Lucene search
K

33 matches found

Circl
Circl
added 4 days ago6 views

CVE-2026-44083

creationtimestamp| type| source ---|---|--- 2026-06-09 11:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu4cm3xcd24...

9.8CVSS5.3AI score0.00063EPSS
Exploits0References1
Circl
Circl
added 2026/06/05 1:24 p.m.7 views

CVE-2026-11251

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

3.1CVSS5.3AI score0.0003EPSS
Exploits0References3
Circl
Circl
added 2026/06/03 5:15 a.m.7 views

CVE-2026-8885

creationtimestamp| type| source ---|---|--- 2026-06-03 05:15:50+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnee4piqoh2c...

6.4CVSS5.8AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/28 12:30 p.m.11 views

EUVD-2026-32862

FlowIntel up to version 3.3.0 contains a server-side request forgery SSRF vulnerability in the external reference URL probe functionality in app/case/task.py. An attacker who can submit an external reference URL can cause the application server to issue an HTTP HEAD request to an attacker-specifi...

6.2CVSS5.8AI score0.00044EPSS
Exploits0References2
CVE
CVE
added 2026/05/28 9:27 a.m.13 views

CVE-2026-9813

CVE-2026-9813 affects FlowIntel up to version 3.3.0 and is due to a server-side request forgery (SSRF) in the external reference URL probe in app/case/task.py. An attacker who can submit an external reference URL can cause the application server to issue an HTTP HEAD request to an attacker-specif...

9.9CVSS5.8AI score0.00044EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/28 9:27 a.m.7 views

CVE-2026-9813 FlowIntel external reference URL probe allows server-side request forgery

FlowIntel up to version 3.3.0 contains a server-side request forgery SSRF vulnerability in the external reference URL probe functionality in app/case/task.py. An attacker who can submit an external reference URL can cause the application server to issue an HTTP HEAD request to an attacker-specifi...

6.2CVSS5.8AI score0.00044EPSS
Exploits0References1
Circl
Circl
added 2026/03/11 5:0 a.m.3 views

CVE-2026-20892

creationtimestamp| type| source ---|---|--- 2026-03-11 05:00:00+00:00| seen| https://jvn.jp/en/vu/JVNVU98103854/ 2026-03-16 03:00:08+00:00| seen| https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-006887.html...

8.6CVSS7.1AI score0.00066EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/06/04 12:0 a.m.9 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Jun 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS9AI score0.03827EPSS
Exploits3References3
Circl
Circl
added 2025/05/16 1:35 p.m.8 views

CVE-2025-40907

creationtimestamp| type| source ---|---|--- 2025-05-16 13:35:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16683 2025-05-16 14:08:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114517901515427046 2025-05-16 17:02:29+00:00| seen|...

5.3CVSS5.8AI score0.00758EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2025/05/13 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2025-1505)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5AI score0.00142EPSS
Exploits2References2
Packet Storm
Packet Storm
added 2024/08/06 12:0 a.m.263 views

eduAuthorities 1.0 SQL Injection

Titles: eduAuthorities-1.0 Multiple-SQLi Author: nu11secur1ty Date: 07/29/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html Reference: https://portswigger.net/web-security/sql-injection Description: The...

7.4AI score
Exploits0
NVD
NVD
added 2024/06/14 5:15 a.m.11 views

CVE-2024-3496

Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer. As for the affected products/models/versions, see the reference URL...

8.8CVSS0.00071EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/06/14 4:17 a.m.21 views

CVE-2024-3497 Directory Traversal Remote Code Execution Vulnerability

Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL...

8.8CVSS6.9AI score0.00191EPSS
Exploits0References3
NVD
NVD
added 2024/06/14 4:15 a.m.19 views

CVE-2024-27179

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL...

4.7CVSS0.0003EPSS
Exploits1References4
NVD
NVD
added 2024/06/14 4:15 a.m.14 views

CVE-2024-27172

Remote Command program allows an attacker to get Remote Code Execution. As for the affected products/models/versions, see the reference URL...

9.8CVSS0.30575EPSS
Exploits1References4
NVD
NVD
added 2024/06/14 4:15 a.m.16 views

CVE-2024-27168

It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow attackers to bypass authentication and reach administrative interfaces. As for the affected products/models/versions, see the reference URL...

7.1CVSS0.00028EPSS
Exploits1References4
NVD
NVD
added 2024/06/14 4:15 a.m.7 views

CVE-2024-27164

Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL...

7.1CVSS0.00072EPSS
Exploits1References4
NVD
NVD
added 2024/06/14 4:15 a.m.8 views

CVE-2024-27156

The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL...

6.8CVSS0.00215EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/06/14 4:9 a.m.23 views

CVE-2024-27179 Session disclosure inside the log files

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL...

4.7CVSS7.3AI score0.0003EPSS
Exploits1References4
CVE
CVE
added 2024/06/14 3:22 a.m.53 views

CVE-2024-27157

CVE-2024-27157 affects Toshiba e-STUDIO MFPs. The vulnerability involves authentication sessions being stored in clear-text logs, enabling an observer with access to the logs to retrieve sessions and credentials, potentially bypassing authentication. Impact details are described across multiple s...

6.8CVSS7.1AI score0.00215EPSS
Exploits1References4
Rows per page
Query Builder