Lucene search
+L

46273 matches found

OSV
OSV
added 2026/07/19 7:45 a.m.7 views

CVE-2026-16224 jxxghp MoviePilot Application API improper authorization

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

5.3CVSS4.7AI score
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/07/19 7:45 a.m.7 views

CVE-2026-16224

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

5.3CVSS4.7AI score0.00222EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/07/19 7:45 a.m.42 views

CVE-2026-16224 jxxghp MoviePilot Application API improper authorization

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

5.3CVSS0.00222EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/19 7:45 a.m.15 views

EUVD-2026-45434

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

5.3CVSS4.7AI score0.00222EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/07/19 7:45 a.m.9 views

CVE-2026-16224 jxxghp MoviePilot Application API improper authorization

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

5.3CVSS4.7AI score0.00222EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/19 7:45 a.m.30 views

CVE-2026-16224

The CVE-2026-16224 entry concerns jxxghp MoviePilot (up to version 2.13.5) with the vulnerability located in the /jxxghp/MoviePilot file inside the Application API component. The issue arises from an improper authorization in an unknown function, enabling remote exploitation. A patch is available...

5.3CVSS4.7AI score0.00222EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2026/07/19 6:12 a.m.77 views

Exploit for CVE-2026-63030

wp2shell Pre-Authentication Remote Code Execution in WordPres...

9.8CVSS6.7AI score0.95605EPSS
SaveExploits74
NVD
NVD
added 2026/07/19 4:17 a.m.14 views

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS0.0041EPSS
SaveExploits0References8
NVD
NVD
added 2026/07/19 4:17 a.m.12 views

CVE-2026-16208

A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...

5CVSS0.00167EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/19 3:48 a.m.8 views

OESA-2026-3027 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

8.4CVSS5.7AI score0.00145EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/19 3:47 a.m.9 views

OESA-2026-2993 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in sndusbmixerfree When sndusbcreatemixer fails, sndusbmixerfree frees mixer-idelems but the controls already added to the ca...

9.1CVSS6.8AI score0.00514EPSS
SaveExploits1References11
Cvelist
Cvelist
added 2026/07/19 3:0 a.m.49 views

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS0.0041EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/19 3:0 a.m.14 views

EUVD-2026-45420

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/07/19 3:0 a.m.8 views

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS6.7AI score0.0041EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/19 3:0 a.m.7 views

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

6.9CVSS6.7AI score
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2026/07/19 3:0 a.m.6 views

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/19 3:0 a.m.27 views

CVE-2026-16209

Summary: CVE-2026-16209 affects Gerapy up to 0.9.13. The vulnerability is in an unknown function within gerapy/server/core/views.py, in the Project Upload Endpoint, causing missing authentication. It is a network-accessible issue that can be exploited remotely; the exploit is public. A patch iden...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/19 2:45 a.m.18 views

EUVD-2026-45419

A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...

5CVSS4.8AI score0.00167EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/19 2:45 a.m.9 views

CVE-2026-16208

A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...

5CVSS4.7AI score0.00167EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/19 2:45 a.m.25 views

CVE-2026-16208

CVE-2026-16208 affects django-tastypie up to 0.15.1. The vulnerability resides in the CacheThrottle/CacheDBThrottle in tastypie/throttle.py, causing a race condition. It is potentially exploitable remotely; attack complexity is described as high. Details on fixes or patches are not provided in th...

5CVSS4.8AI score0.00167EPSS
SaveExploits0References6
Rows per page
Query Builder