Lucene search
+L

14 matches found

NVD
NVD
added 2026/07/19 4:17 a.m.12 views

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS0.0041EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/19 3:0 a.m.10 views

EUVD-2026-45420

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/19 3:0 a.m.47 views

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS0.0041EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/19 3:0 a.m.20 views

CVE-2026-16209

Summary: CVE-2026-16209 affects Gerapy up to 0.9.13. The vulnerability is in an unknown function within gerapy/server/core/views.py, in the Project Upload Endpoint, causing missing authentication. It is a network-accessible issue that can be exploited remotely; the exploit is public. A patch iden...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/19 3:0 a.m.5 views

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

6.9CVSS6.7AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.10 views

PT-2026-61043

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-2755

Malicious code in bioql PyPI...

7.8CVSS7.5AI score0.00512EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/09/19 12:0 a.m.6 views

JetBrains TeamCity Path Traversal Vulnerability

JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from a path traversal vulnerability that stems...

5.5CVSS6.9AI score0.12206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.13 views

PT-2025-28391 · Siemens · Tia Project-Server +1

Name of the Vulnerable Software and Affected Versions: TIA Project-Server versions prior to V2.1.1 TIA Project-Server V17 versions Totally Integrated Automation Portal TIA Portal V17 versions Totally Integrated Automation Portal TIA Portal V18 versions Totally Integrated Automation Portal TIA...

5.3CVSS6.3AI score0.00277EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.7 views

PT-2024-9215 · Schneider Electric · Modicon Mc80 Bmkc80 +2

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 CPU BMXP34, Modicon MC80 BMKC80, and Modicon Momentum Unity M1E Processor 171CBU affected versions not specified Description: The issue is related to the lack of message integrity checks during transmission ove...

7.5CVSS7.3AI score0.00281EPSS
SaveExploits0References6
OSV
OSV
added 2022/08/11 3:15 p.m.8 views

CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/11 3:15 p.m.5 views

CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

9.8CVSS7.3AI score0.00661EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/11 2:56 p.m.38 views

CVE-2021-22289 RCE through Project Upload from Target

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

8.3CVSS9.8AI score0.00661EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/08/11 12:0 a.m.8 views

B&R Automation Studio 输入验证错误漏洞

B&R Automation Studio is an integrated software development environment from B&R Automation, an Austrian company. A security vulnerability exists in B&R Automation Studio versions above 4.0, which stems from an input validation vulnerability in the project upload mechanism that could allow an...

9.8CVSS8.4AI score0.00661EPSS
SaveExploits0References4
Rows per page
Query Builder