Lucene search
+L

117222 matches found

CVE
CVE
added 1 hour ago8 views

CVE-2026-67610

OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scopes by supplying a self-generated RSA keypair via the jwks field. Once an...

8.6CVSS5.5AI score
SaveExploits0References2
Cvelist
Cvelist
added 1 hour ago6 views

CVE-2026-67610 OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access

OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scopes by supplying a self-generated RSA keypair via the jwks field. Once an...

8.6CVSS
SaveExploits0References2
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-52347

OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scopes by supplying a self-generated RSA keypair via the jwks field. Once an...

8.6CVSS5.5AI score
SaveExploits0References2
NVD
NVD
added 3 hours ago4 views

CVE-2026-69091

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by...

8.7CVSS
SaveExploits0References2
NVD
NVD
added 3 hours ago5 views

CVE-2026-69086

SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish...

8.3CVSS
SaveExploits0References2
NVD
NVD
added 3 hours ago4 views

CVE-2026-69084

SiYuan versions = v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan.db handle with no single-statement, read-only, or admin restrictions. The endpoint is gated only by CheckAuth, making it reachable by the...

10CVSS
SaveExploits0References2
NVD
NVD
added 3 hours ago4 views

CVE-2026-69085

SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where the caller-supplied keyword parameter is concatenated directly into SQL statements with no escaping or parameter binding. The endpoint is reachable by a publish RoleReader token, or...

10CVSS
SaveExploits0References2
Cvelist
Cvelist
added 4 hours ago6 views

CVE-2026-69096 OpenWrt luci-app-dockerman Read ACL Remote Code Execution

OpenWrt luci-app-dockerman LuCI master and openwrt-25.12 snapshots containing the ucode dockerrpc.uc RPC backend after the JS/ucode conversion contains an OS command injection vulnerability. The package's read ACL grants broad ubus access to docker. / docker.container., which exposes the...

8.8CVSS
SaveExploits0References4
EUVD
EUVD
added 4 hours ago7 views

EUVD-2026-52289

OpenWrt luci-app-dockerman LuCI master and openwrt-25.12 snapshots containing the ucode dockerrpc.uc RPC backend after the JS/ucode conversion contains an OS command injection vulnerability. The package's read ACL grants broad ubus access to docker. / docker.container., which exposes the...

8.8CVSS6.2AI score
SaveExploits0References4
CVE
CVE
added 4 hours ago10 views

CVE-2026-69096

OpenWrt luci-app-dockerman is affected by an OS command injection in the docker_rpc.uc backend after the JS/ucode conversion. The vulnerability arises because the read ACL can expose ubus objects docker.* / docker.container.* and the run_ttyd handler builds a shell command from request-controlled...

8.8CVSS6.2AI score
SaveExploits0References4
EUVD
EUVD
added 4 hours ago6 views

EUVD-2026-52288

OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows unauthenticated attackers to read files outside the configured runtimeDir. Attackers can supply directory traversal sequences in the query...

8.7CVSS5.5AI score
SaveExploits0References2
Cvelist
Cvelist
added 4 hours ago7 views

CVE-2026-69091 Admidio before 5.0.11 Authentication Bypass via forum.php

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by...

8.7CVSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-69091

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by...

8.7CVSS5.5AI score
SaveExploits0References3
EUVD
EUVD
added 4 hours ago5 views

EUVD-2026-52284

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by...

8.7CVSS5.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-69088

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

8.6CVSS5.7AI score
SaveExploits0References3Affected Software1
CVE
CVE
added 4 hours ago9 views

CVE-2026-69088

Grav CMS 2.0.7–2.0.10 is affected by an arbitrary method invocation vulnerability in blueprint dynamic-field directives. The issue arises because Blueprint::isSafeDynamicCall() only applies its denial list to strings without '::', allowing an account with page-editing rights to insert a directive...

8.6CVSS5.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 4 hours ago3 views

CVE-2026-69086

SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish...

8.3CVSS5.5AI score
SaveExploits0References3
CVE
CVE
added 4 hours ago9 views

CVE-2026-69086

SiYuan before v3.7.3 fails to validate the avID parameter in attribute-view read endpoints across all code branches, enabling path traversal that escapes the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish authentication is disabled can read JS...

8.3CVSS5.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-69085

SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where the caller-supplied keyword parameter is concatenated directly into SQL statements with no escaping or parameter binding. The endpoint is reachable by a publish RoleReader token, or...

10CVSS5.8AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-69083

SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP...

10CVSS6AI score
SaveExploits0References3
Rows per page
Query Builder