Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•27 views

PT-2026-64959

Name of the Vulnerable Software and Affected Versions NitroShare Desktop versions prior to 0.3.5 Description The LAN file transfer server contains a path traversal issue that allows unauthenticated attackers on the same network to write arbitrary files. This occurs because the server fails to...

8.7CVSS6.2AI score0.01115EPSS
SaveExploits0References4
NVD
NVD
•added 2026/04/24 4:16 a.m.•13 views

CVE-2026-41430

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. Redirect parameter on login page is vulnerable to reflected XSS. The patch in commit 16d1b6ca2559f858a1de77bcb03fd7f1b81671c6 fixes the issue by restricting...

6.1CVSS0.00263EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/06 12:00 a.m.•53 views

CVE-2025-70963

Gophish =0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the page on every login. This makes permanent API credentials accessible to any script running in the browser context...

5.4AI score0.00277EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2018-20806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Phamm aka PHP LDAP Virtual Hosting Manager 0.6.8 allows XSS via the login page the /public/main.php action parameter. CVE-2018-20806 Note that Nessus relies on...

6.1CVSS6.1AI score0.0098EPSS
SaveExploits1References2
OSV
OSV
•added 2023/12/15 2:15 p.m.•10 views

CVE-2023-50870

In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible...

8.8CVSS5.8AI score0.00319EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/24 12:00 a.m.•14 views

PT-2023-19604 · Jenkins · Jenkins Openid Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenID Plugin versions 2.4 and earlier Description: The issue arises because the plugin does not invalidate the previous session on login. Recommendations: For Jenkins OpenID Plugin versions 2.4 and earlier, update to a version later...

9.8CVSS9.2AI score0.01149EPSS
SaveExploits0References4
OSV
OSV
•added 2017/01/18 12:00 a.m.•17 views

UBUNTU-CVE-2017-3312

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Packaging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure...

6.7CVSS6.9AI score0.00446EPSS
SaveExploits0References4
Rows per page
Query Builder