Lucene search
+L

979150 matches found

Cvelist
Cvelist
added yesterday15 views

CVE-2026-14219 URL Redirection in Bilin Software's HUMANIST Digital Human Resources

URL redirection to untrusted site 'open redirect' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

5.4CVSS0.0016EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added yesterday2 views

CVE-2026-18772

Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads...

5.5CVSS5.4AI score0.00132EPSS
SaveExploits0
Cvelist
Cvelist
added yesterday16 views

CVE-2026-18772

Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads...

5.5CVSS0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-52647

Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads...

5.5CVSS5.4AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday15 views

CVE-2026-16296 Clearfy < 2.4.3 - Open Redirect via Cyrlitera 404 Handler

The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function, which allows unauthenticated attackers to redirect visitors to an arbitrary external URL when a non-defaul...

0.00136EPSS
SaveExploits0References1
CVE
CVE
added yesterday9 views

CVE-2026-16296

The CVE-2026-16296 entry applies to the Clearfy Cache WordPress plugin, affected versions before 2.4.3. The issue is described as the Cyrlitera old-URL redirect handler not validating the redirect target, passing a decoded request URI to an unsafe redirect function. This allows unauthenticated at...

4.7CVSS5.6AI score0.00136EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday8 views

EUVD-2026-52592

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history...

4.3CVSS5.5AI score0.00132EPSS
SaveExploits0References1
NVD
NVD
added yesterday8 views

CVE-2026-18721

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...

5.3CVSS0.0025EPSS
SaveExploits0References5
Cvelist
Cvelist
added yesterday18 views

CVE-2026-18721 kalcaddle kodbox SSO API Login apiLogin redirect

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...

5.3CVSS0.0025EPSS
SaveExploits0References5
CVE
CVE
added yesterday15 views

CVE-2026-18721

CVE-2026-18721 affects kalcaddle kodbox 1.67 Build 02, specifically the /user/sso/apiLogin handler in the SSO API Login component. The vulnerability arises from improper handling of the callbackUrl parameter, enabling an open redirect. Exploitation is possible remotely, and publicly disclosed exp...

5.3CVSS5.1AI score0.0025EPSS
SaveExploits0References5
EUVD
EUVD
added yesterday7 views

EUVD-2026-52570

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...

5.3CVSS5.1AI score0.0025EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago42 views

CVE-2026-67611 OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an unauthenticated client registration endpoint. Attackers can register an OAut...

8.6CVSS0.00329EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-52337

Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for recipient channel IDs that were never opened or confirmed in russh/src/server/encrypted.rs, serverreadauthenticated, and the execrequest callback. Version 0.62.5 fixes the issue...

6.5CVSS5.5AI score0.00213EPSS
SaveExploits0References3
NVD
NVD
added 2 days ago7 views

CVE-2026-69087

The Grav form plugin getgrav/grav-plugin-form before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates user-supplied form data inside Twig expressions, and Grav::redirect accepts external URLs without origin validation. When a form blueprint...

7.1CVSS0.00213EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago13 views

CVE-2026-69087

The Grav form plugin (getgrav/grav-plugin-form) prior to v9.1.13 has an open redirect in the redirect action. Since v9.1.11, redirect targets can be evaluated from user-supplied form data (Twig expressions), and Grav::redirect() does not validate URL origins. If a form blueprint uses a redirect l...

7.1CVSS5.6AI score0.00213EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago42 views

CVE-2026-69087 Grav Form Plugin before 9.1.13 Open Redirect via form.value() Twig

The Grav form plugin getgrav/grav-plugin-form before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates user-supplied form data inside Twig expressions, and Grav::redirect accepts external URLs without origin validation. When a form blueprint...

7.1CVSS0.00213EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-52280

The Grav form plugin getgrav/grav-plugin-form before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates user-supplied form data inside Twig expressions, and Grav::redirect accepts external URLs without origin validation. When a form blueprint...

7.1CVSS5.6AI score0.00213EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago8 views

CVE-2026-69087

The Grav form plugin getgrav/grav-plugin-form before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates user-supplied form data inside Twig expressions, and Grav::redirect accepts external URLs without origin validation. When a form blueprint...

7.1CVSS5.6AI score0.00213EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2 days ago5 views

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 release.

Red Hat Developer Hub 1.10.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

8.7CVSS6.5AI score0.00617EPSS
SaveExploits2References34
NVD
NVD
added 2 days ago8 views

CVE-2026-12817

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

8.7CVSS0.00157EPSS
SaveExploits0References2
Rows per page
Query Builder