Lucene search
+L

349 matches found

vulnersOsv
vulnersOsv
added 2026/05/06 4:44 p.m.8 views

pic-rucio (>=0.0.1 <=2024.10.3.71620) potentially affected by CVE-2026-29090 via rucio (=1.30.5)

rucio PYPI version =1.30.5 is affected by a known vulnerability. The following packages have a transitive dependency on rucio and may be impacted: - pic-rucio =0.0.1, =2024.10.3.71620 Source cves: CVE-2026-29090 Source advisory: SNYK:PYTHON-RUCIO-16635087...

9CVSS5.8AI score0.00301EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/05/06 4:42 p.m.9 views

pic-rucio (>=0.0.1 <=2024.10.3.71620) potentially affected by CVE-2026-29080 via rucio (=1.30.5)

rucio PYPI version =1.30.5 is affected by a known vulnerability. The following packages have a transitive dependency on rucio and may be impacted: - pic-rucio =0.0.1, =2024.10.3.71620 Source cves: CVE-2026-29080 Source advisory: OSV:GHSA-VJR5-C9QV-HGM3...

9.4CVSS5.8AI score0.00281EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/05/06 4:42 p.m.8 views

pic-rucio (>=0.0.1 <=2024.10.3.71620) potentially affected by CVE-2026-29080 via rucio (=1.30.5)

rucio PYPI version =1.30.5 is affected by a known vulnerability. The following packages have a transitive dependency on rucio and may be impacted: - pic-rucio =0.0.1, =2024.10.3.71620 Source cves: CVE-2026-29080 Source advisory: SNYK:PYTHON-RUCIO-16635089...

9.4CVSS5.8AI score0.00281EPSS
SaveExploits0
NVD
NVD
added 2026/04/15 5:17 p.m.7 views

CVE-2026-20148

A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system and read arbitrary files. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is...

4.9CVSS0.06919EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/15 5:17 p.m.6 views

CVE-2026-20147

A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to...

9.9CVSS0.11679EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.10 views

Cisco ISE和Cisco ISE-PIC 安全漏洞

Cisco ISE and Cisco ISE-PIC are products of the American company Cisco. Cisco ISE is a NAC solution designed to manage access to network resources for endpoints, users, and devices in a zero-trust architecture. Cisco ISE-PIC is a component of Cisco ISE. Both Cisco ISE and Cisco ISE-PIC have...

4.9CVSS6AI score0.06919EPSS
SaveExploits0References1
NCSC
NCSC
added 2026/04/10 12:6 p.m.12 views

Vulnerability fixed in Juniper Networks Junos OS Evolved

Juniper has fixed a vulnerability in Junos OS Evolved running on PTX Series devices. A malicious party can exploit this vulnerability to increase privileges. The vulnerability is in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX systems. The vulnerability can lead...

8.5CVSS5.8AI score0.00114EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/10 12:30 a.m.7 views

EUVD-2026-21093

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges...

8.5CVSS5.9AI score0.00114EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/09 9:27 p.m.1 views

CVE-2026-33788 Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges...

8.5CVSS5.9AI score0.00114EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/09 9:27 p.m.5 views

CVE-2026-33788

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges...

8.5CVSS5.9AI score0.00114EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.11 views

PT-2026-31753

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved on PTX Series versions prior to 21.2R3-S8-EVO, versions 21.4-EVO prior to 21.4R3-S7-EVO, versions 22.2-EVO prior to 22.2R3-S4-EVO, versions 22.3-EVO prior to 22.3R3-S3-EVO, versions 22.4-EVO prior to...

8.5CVSS5.9AI score0.00114EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/03/16 3:30 p.m.4 views

EUVD-2026-12355

A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /SetWebpagePic.jsp. The manipulation of the argument targetPath/Suffix leads to unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS6.6AI score0.00309EPSS
SaveExploits0References5
NVD
NVD
added 2026/03/16 2:20 p.m.4 views

CVE-2026-4220

A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /SetWebpagePic.jsp. The manipulation of the argument targetPath/Suffix leads to unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS0.00309EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/16 6:2 a.m.4 views

CVE-2026-4220 Technologies Integrated Management Platform SetWebpagePic.jsp unrestricted upload

A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /SetWebpagePic.jsp. The manipulation of the argument targetPath/Suffix leads to unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS5.4AI score0.00309EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.8 views

Tiandy Easy7 Integrated Management Platform 代码问题漏洞

Tiandy Easy7 Integrated Management Platform is a comprehensive video surveillance management platform developed by Tiandy Company in China. The version 7.17.0 of Tiandy Easy7 Integrated Management Platform contains a code vulnerability. This vulnerability stems from operations on the parameters...

7.5CVSS7.3AI score0.00309EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/21 12:0 a.m.14 views

PT-2026-21367

A vulnerability has been found in feng ha ha/megagao ssm-erp and production ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. This affects the function pictureDelete of the file PictureController.java. Such manipulation of the argument picName leads to path traversal. The attack can be launched...

5.5CVSS5.5AI score0.00304EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/02/05 1:23 a.m.9 views

CVE-2026-1813

A vulnerability was found in bolo-blog bolo-solo up to 2.6.4. Affected is an unknown function of the file src/main/java/org/b3log/solo/bolo/pic/PicUploadProcessor.java of the component FreeMarker Template Handler. The manipulation of the argument File results in unrestricted upload. It is possibl...

9.8CVSS6.1AI score0.00333EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.9 views

bolo-solo 代码问题漏洞

Bolo-Solo is a blog system developed under the open source Bolo-Blog project. Versions of Bolo-Solo 2.6.4 and earlier contained code vulnerabilities. These vulnerabilities stemmed from improper handling of parameters by the FreeMarker Template Handler component in the file...

9.8CVSS6.7AI score0.00333EPSS
SaveExploits1References5
CVE
CVE
added 2026/02/03 11:32 p.m.26 views

CVE-2026-1813

The CVE-2026-1813 entry concerns bolo-blog bolo-solo up to version 2.6.4, involving the FreeMarker Template Handler. It identifies an issue in the file src/main/java/org/b3log/solo/bolo/pic/PicUploadProcessor.java where manipulation of the File argument enables unrestricted upload. This could all...

9.8CVSS6.2AI score0.00333EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/03 11:32 p.m.41 views

CVE-2026-1813 bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload

A vulnerability was found in bolo-blog bolo-solo up to 2.6.4. Affected is an unknown function of the file src/main/java/org/b3log/solo/bolo/pic/PicUploadProcessor.java of the component FreeMarker Template Handler. The manipulation of the argument File results in unrestricted upload. It is possibl...

6.5CVSS0.00333EPSS
SaveExploits1References5
Rows per page
Query Builder