Lucene search
+L

48704 matches found

Vulnrichment
Vulnrichment
added 2026/04/26 8:45 a.m.9 views

CVE-2026-7028 CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5.1AI score0.00311EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/26 8:45 a.m.28 views

CVE-2026-7028

VULNERABILITY: CVE-2026-7028 affects CodeAstro Online Job Portal 1.0. An SQL injection is possible in the All Jobs Page via manipulation of the ID argument in /admin/jobs-admins/delete-jobs.php. Exploitation is remote and publicly released; impact is limited to low confidentiality/integrity/avail...

5.8CVSS5.2AI score0.00311EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/26 8:45 a.m.51 views

CVE-2026-7028 CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS0.00311EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/04/26 8:45 a.m.16 views

EUVD-2026-25703

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5AI score0.00311EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/26 8:45 a.m.7 views

CVE-2026-7028

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5AI score0.00311EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2026/04/26 5:16 a.m.20 views

CVE-2026-7019

A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly...

9CVSS0.00632EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/04/26 4:30 a.m.5 views

CVE-2026-7019 Tenda F456 P2pListFilter fromP2pListFilter buffer overflow

A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly...

9CVSS8.8AI score0.00632EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/04/26 4:30 a.m.18 views

EUVD-2026-25694

A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly...

9CVSS8.8AI score0.00632EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/04/26 4:30 a.m.15 views

CVE-2026-7019

A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly...

9CVSS6AI score0.00632EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/04/26 4:30 a.m.48 views

CVE-2026-7019 Tenda F456 P2pListFilter fromP2pListFilter buffer overflow

A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly...

9CVSS0.00632EPSS
SaveExploits1References5
CVE
CVE
added 2026/04/26 4:30 a.m.34 views

CVE-2026-7019

CVE-2026-7019 affects Tenda F456 1.0.0.5: the vulnerability is in the P2pListFilter function (file /goform/P2pListFilter) where improper handling of the argument menufacturer/Go causes a buffer overflow. The issue can be exploited remotely, and a public exploit/ PoC exists. According to the provi...

9CVSS8.8AI score0.00632EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2026/04/26 4:16 a.m.19 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS0.00338EPSS
SaveExploits0References8
CVE
CVE
added 2026/04/26 3:30 a.m.28 views

CVE-2026-7018

Datavane Datavines (up to build 13607645e14a4982468cfdbcf75c85cde63bae71) exposes a vulnerability in the JWT Token Handler component, specifically in TokenManager.java. Manipulation of the tokenSecret parameter can cause use of a hard-coded cryptographic key. The issue is exploitable remotely wit...

6.3CVSS5.3AI score0.00338EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/04/26 3:30 a.m.50 views

CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS0.00338EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/26 3:30 a.m.6 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS4.7AI score0.00338EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/04/26 3:30 a.m.7 views

CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.3AI score0.00338EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/04/26 3:30 a.m.11 views

EUVD-2026-25693

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.3AI score0.00338EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2026/04/26 1:52 a.m.18 views

SUSE CVE-2026-31681

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtmultiport: validate range encoding in checkentry portsmatchv1 treats any non-zero pflags entry as the start of a port range and unconditionally consumes the next ports element as the range end. The checkentry path...

4.4CVSS5.4AI score0.00115EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2026/04/26 12:00 a.m.28 views

PT-2026-35222

A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is the function shell.write of the file src/index.ts. Such manipulation of the argument Description leads to command injection. The attack must be carried out locally. The exploit has been disclosed...

8.5CVSS5.1AI score0.00653EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/26 12:00 a.m.20 views

PT-2026-35223

A vulnerability was detected in 666ghj MiroFish up to 0.1.2. The impacted element is an unknown function of the file /console of the component Werkzeug Debugger PIN Handler. Performing a manipulation of the argument SECRET results in information disclosure. It is possible to initiate the attack...

6.3CVSS4.9AI score0.00412EPSS
SaveExploits0References6
Rows per page
Query Builder