Lucene search
+L

33299 matches found

EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-62202

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parameter of GET /exports/:id/:filename. In server/api/controllers/boards/download.js, the decoded inputs.filename value is...

8.8CVSS5.5AI score0.00552EPSS
SaveExploits0References3
EUVD
EUVD
added 2 hours ago2 views

EUVD-2026-61506

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process...

8.8CVSS5.3AI score
SaveExploits0References1
EUVD
EUVD
added 2 hours ago2 views

EUVD-2026-61502

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process...

7.1CVSS5.1AI score
SaveExploits0References1
EUVD
EUVD
added 2 hours ago2 views

EUVD-2026-61496

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Work in Process...

7CVSS5.3AI score
SaveExploits0References1
EUVD
EUVD
added 2 hours ago2 views

EUVD-2026-61377

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

8.2CVSS5.3AI score
SaveExploits0References1
CVE
CVE
added 2 hours ago3 views

CVE-2026-76042

Google Chrome's GPU process uses an uninitialized resource, allowing an attacker with renderer-process compromise to read memory outside the sandbox via a crafted HTML page. Affected versions are Chrome prior to 151.0.7922.169; update to that version or later to remediate. No in-the-wild exploita...

5.3AI score
SaveExploits0References2
CVE
CVE
added 2 hours ago4 views

CVE-2026-76044

A race condition in Chrome's USB handling (versions before 151.0.7922.169) allows a remote attacker with a compromised renderer process to escape the sandbox and execute arbitrary code via a crafted HTML page. The fix is to update to Chrome 151.0.7922.169 or later, as noted in the August 2026 sta...

5.9AI score
SaveExploits0References2
CVE
CVE
added 2 hours ago3 views

CVE-2026-76033

A CORS implementation flaw in Google Chrome prior to 151.0.7922.169 allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML page. The issue is classified as High severity by Chromium. The fix is included in Chrome 151.0.7922.169; the Stable ...

5.2AI score
SaveExploits0References2
NVD
NVD
added 5 hours ago4 views

CVE-2026-71551

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

7.8CVSS
SaveExploits0References3
EUVD
EUVD
added 5 hours ago6 views

EUVD-2026-61079

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/nodehelper.js passes every inbound object payload through replaceSecretPlaceholder in js/serverfunctions.js before invoking...

4.3CVSS5.3AI score
SaveExploits0References4
Cvelist
Cvelist
added 7 hours ago6 views

CVE-2026-75926 Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant

Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside the project directory. Hugo 0.162.0 added tailwindcss to the AllowChildProcess default in...

9.3CVSS
SaveExploits0References6
CVE
CVE
added 7 hours ago10 views

CVE-2026-75926

Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside the project directory. Hugo 0.162.0 added tailwindcss to the AllowChildProcess default in...

9.3CVSS5.7AI score
SaveExploits0References6
EUVD
EUVD
added 7 hours ago9 views

EUVD-2026-61008

Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside the project directory. Hugo 0.162.0 added tailwindcss to the AllowChildProcess default in...

9.3CVSS5.7AI score
SaveExploits0References6
NVD
NVD
added 8 hours ago2 views

CVE-2026-63632

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...

3.3CVSS
SaveExploits0References4
EUVD
EUVD
added 8 hours ago3 views

EUVD-2026-60944

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...

3.3CVSS5.2AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 8 hours ago2 views

CVE-2026-63632

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...

3.3CVSS5.2AI score
SaveExploits0References5Affected Software1
Nuclei
Nuclei
added 20 hours ago40 views

Apache NiFi - Information Disclosure

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

5.4CVSS5.8AI score0.0313EPSS
SaveExploits0
EUVD
EUVD
added 22 hours ago10 views

EUVD-2026-60495

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination...

5.4AI score
SaveExploits0References3
EUVD
EUVD
added 22 hours ago6 views

EUVD-2026-60485

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash...

5.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 23 hours ago5 views

PT-2026-77201

Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside the project directory. Hugo 0.162.0 added tailwindcss to the AllowChildProcess default in...

9.3CVSS5.7AI score
SaveExploits0References7
Rows per page
Query Builder