Lucene search
+L

8298 matches found

Cvelist
Cvelist
•added 2026/06/30 6:02 a.m.•75 views

CVE-2026-56809

Multiple laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses a crafted URL...

6.1CVSS0.00337EPSS
SaveExploits0References4
CVE
CVE
•added 2026/06/30 6:02 a.m.•82 views

CVE-2026-56809

CVE-2026-56809 concerns Ricoh Web Image Monitor on multiple laser printers/MFPs. The vulnerability is a reflected cross-site scripting flaw that allows arbitrary script execution in the web browser of a user who accesses the Web Image Monitor. Reported impact is browser-side, with confidentiality...

6.1CVSS6.2AI score0.00337EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/06/30 6:02 a.m.•14 views

CVE-2026-56809

Multiple laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses a crafted URL...

6.1CVSS6.4AI score0.00337EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/06/30 6:02 a.m.•16 views

CVE-2026-56809

Multiple laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses a crafted URL...

6.1CVSS6.2AI score0.00337EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/06/30 6:02 a.m.•24 views

EUVD-2026-40255

Multiple laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses Web Image Monitor...

6.1CVSS6.3AI score0.00337EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•43 views

PT-2026-53822

Name of the Vulnerable Software and Affected Versions Ricoh Web Image Monitor affected versions not specified Description Ricoh Web Image Monitor contains a reflected cross-site scripting issue. This allows an arbitrary script to be executed within the web browser of a user who accesses the...

6.1CVSS6.1AI score0.00337EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
•added 2026/06/30 12:00 a.m.•11 views

The vulnerability of the qcom_add_sysmon_subdev() function in the drivers/remoteproc/qcom_sysmon.c module of the Linux kernel subsystem allows a hacker to cause a service failure.

The vulnerability of the qcomaddsysmonsubdev function in the drivers/remoteproc/qcomsysmon.c module of the Linux kernel subsystem for remote processors is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.3AI score0.00251EPSS
SaveExploits0References12Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•6 views

CVE-2026-56809: Improper Neutralization of Input During Web Page Generation

Multiple laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses a crafted URL...

6.1CVSS6.2AI score0.00337EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/28 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-53141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/v3d: Fix global performance monitor reference counting In the SETGLOBAL ioctl, v3dperfmonfind bumps the reference count on the perfmon it returns, but...

5.5CVSS5.9AI score0.00121EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/26 4:32 p.m.•16 views

GHSA-PR7J-96CJ-549H Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API

Fluentd's Monitor Agent plugin inmonitoragent exposes internal metrics and plugin information via a REST API. It was discovered that the API response /api/plugins.json and related endpoints unintentionally includes internal instance variables of loaded plugins. If any plugins store sensitive...

7.5CVSS7.8AI score0.00474EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/06/26 4:32 p.m.•13 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the inmonitoragent process. An attacker can access sensitive internal instance variables, including credentials, by sending HTTP requests to the Monitor Agent API endpoints. The impact...

8.7CVSS7.8AI score0.00474EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/06/26 4:32 p.m.•20 views

Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API

Fluentd's Monitor Agent plugin inmonitoragent exposes internal metrics and plugin information via a REST API. It was discovered that the API response /api/plugins.json and related endpoints unintentionally includes internal instance variables of loaded plugins. If any plugins store sensitive...

7.5CVSS7.8AI score0.00474EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2026/06/26 4:16 p.m.•27 views

CVE-2026-0828

Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unprivileged user to abuse IOCTL path and terminate protected system processes...

7.5CVSS0.00409EPSS
SaveExploits3References2
CVE
CVE
•added 2026/06/26 3:47 p.m.•184 views

CVE-2026-0828

The Safetica endpoint client (x64) kernel driver ProcessMonitorDriver.sys is vulnerable to a Bring Your Own Vulnerable Driver (BYOVD) attack. In versions 10.5.75.0 and 11.11.4.0 , an unprivileged user can abuse an unauthenticated IOCTL handler (0xB822200C) that lacks caller privilege validation a...

7.5CVSS6AI score0.00409EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2026/06/26 12:00 a.m.•35 views

PT-2026-53003

Name of the Vulnerable Software and Affected Versions Fluentd versions prior to 1.19.3 Description The Monitor Agent plugin in monitor agent exposes internal metrics and plugin information through a REST API. The responses from the /api/plugins.json endpoint and related endpoints unintentionally...

9.8CVSS7.8AI score0.00474EPSS
SaveExploits0References17
RubySec
RubySec
•added 2026/06/26 12:00 a.m.•22 views

Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API

Fluentd's Monitor Agent plugin inmonitoragent exposes internal metrics and plugin information via a REST API. It was discovered that the API response /api/plugins.json and related endpoints unintentionally includes internal instance variables of loaded plugins. If any plugins store sensitive...

7.5CVSS7.8AI score0.00474EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/06/25 10:34 p.m.•19 views

GO-2026-5758 containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

containerd CRI — image-config LABEL flows to restart-monitor binary:// logger: host-root command execution from an image pull in github.com/containerd/containerd...

9.4CVSS8.1AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/25 6:43 p.m.•26 views

GO-2026-5339 OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth in github.com/open-telemetry/opentelemetry-operator

OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth in github.com/open-telemetry/opentelemetry-operator...

7.7CVSS8.1AI score0.0046EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/25 9:16 a.m.•31 views

CVE-2026-53141

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix global performance monitor reference counting In the SETGLOBAL ioctl, v3dperfmonfind bumps the reference count on the perfmon it returns, but v3dperfmonsetglobalioctl and v3dperfmondelete fail to release that referen...

5.5CVSS5.9AI score0.00121EPSS
SaveExploits0References16
Debian CVE
Debian CVE
•added 2026/06/25 8:38 a.m.•21 views

CVE-2026-53141

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix global performance monitor reference counting In the SETGLOBAL ioctl, v3dperfmonfind bumps the reference count on the perfmon it returns, but v3dperfmonsetglobalioctl and v3dperfmondelete fail to release that referen...

5.5CVSS5.9AI score0.00121EPSS
SaveExploits0
Rows per page
Query Builder