136403 matches found
CVE-2026-90216: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ubi: Fix rollback for explicit UBI device numbers ubiinitattach rolls back module initialization failures by scanning ubidevices0..i-1, where i is the mtd= parameter index. That assumes the parameter index matches the UBI device...
CVE-2021-3030
The Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) due to improper validation of the Theme GET parameter within the /CuteSoft_Client/CuteEditor/Dialogs/colorpicker_more.aspx component. A remote, unauthenticated attacker can craft a malicious URL that, when opene...
PT-2026-94292
Name of the Vulnerable Software and Affected Versions ash authentication phoenix versions 1.7.0 through 2.17.3 ash authentication phoenix versions 3.0.0-rc.0 through 3.0.0-rc.10 ash authentication versions 3.10.5 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Descriptio...
CVE-2026-92592 Craft CMS before 4.18.6 Remote Code Execution via signed cookie
Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used to validate signed redirect parameters, because the HMAC signature is not bound to its purpose Yii's cookieValidationKey is derived from...
CVE-2026-92581 AVideo through 29.0 Like Counter Desynchronization via Array Parameter
In AVideo through 29.0, Like::construct performs counter arithmetic on raw request values before validation, allowing array-typed parameters to desynchronize stored votes from counters. Authenticated attackers can send array-typed like parameters followed by ordinary requests to drive video like...
CVE-2026-92581
In AVideo through 29.0 , the Like::__construct() method performs counter arithmetic on raw request values before validation. This allows array-typed parameters to desynchronize stored votes from denormalized counters. An authenticated attacker can send array-typed like parameters followed by ordi...
CVE-2026-92581 AVideo through 29.0 Like Counter Desynchronization via Array Parameter
In AVideo through 29.0, Like::construct performs counter arithmetic on raw request values before validation, allowing array-typed parameters to desynchronize stored votes from counters. Authenticated attackers can send array-typed like parameters followed by ordinary requests to drive video like...
CVE-2026-92793
GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permission checks by appending a query parameter. Attackers can append a query string containing the admin prefix followed by /logout to reach administrative...
CVE-2026-92748
BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...
CVE-2026-20235
A vulnerability in the API of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to view sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient...
CVE-2026-92793
GoAdmin (through version 1.2.26 ) contains an authorization bypass in its permission-checking middleware. The root cause is a failure to properly anchor the logout pattern when validating permissions, allowing any authenticated user to append a query parameter containing the admin prefix followed...
CVE-2026-92793 GoAdmin through 1.2.26 Authorization Bypass via Query Parameter
GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permission checks by appending a query parameter. Attackers can append a query string containing the admin prefix followed by /logout to reach administrative...
CVE-2026-92793 GoAdmin through 1.2.26 Authorization Bypass via Query Parameter
GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permission checks by appending a query parameter. Attackers can append a query string containing the admin prefix followed by /logout to reach administrative...
CVE-2026-92791
Uber Kraken versions through 0.1.29 contain a path traversal vulnerability in the /tags/{tag} endpoint. The endpoint fails to validate the tag parameter, allowing unauthenticated attackers to supply percent-encoded parent-directory segments (e.g., ..) to traverse outside the configured storage ro...
CVE-2026-92791 Uber Kraken through 0.1.29 Path Traversal via tag parameter
Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...
CVE-2026-92791 Uber Kraken through 0.1.29 Path Traversal via tag parameter
Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...
EUVD-2026-81054
Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...
CVE-2026-92791 Uber Kraken through 0.1.29 Path Traversal via tag parameter
Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...
CVE-2026-92770 Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter
Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...
CVE-2026-92770 Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter
Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...