Lucene search
+L

38408 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/05 12:00 a.m.•24 views

Fedora 43 : nextcloud (2026-5afe6630dc)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5afe6630dc advisory. 33.0.6 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

9.8CVSS7.2AI score0.01041EPSS
SaveExploits11References22
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•34 views

PT-2026-55770

Name of the Vulnerable Software and Affected Versions nextlevelbuilder GoClaw versions prior to 3.13.0-beta.3 Description An issue exists in the WebSocket RPC Handler component within the MethodRouter.Handle function of the internal/gateway/router.go file. This flaw allows for remote manipulation...

6.5CVSS6.6AI score0.00398EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•52 views

PT-2026-55793

Name of the Vulnerable Software and Affected Versions AIAnytime Awesome-MCP-Server versions up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab Description A flaw in the mcp-wiki/wiki-summary component, specifically within the mcp-wiki/src/mcp wiki/server.py file, allows for server-side request forger...

6.5CVSS6.6AI score0.00374EPSS
SaveExploits0References11
NVD
NVD
•added 2026/07/04 4:17 p.m.•24 views

CVE-2026-14633

A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d911a04. This affects an unknown part of the file /index.php/api/product/set of the component Hidden REST API Endpoint. This manipulation of the argument title/description causes...

5.3CVSS0.00486EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/04 9:16 a.m.•24 views

CVE-2026-14622

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...

7.5CVSS0.0069EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/04 8:45 a.m.•63 views

CVE-2026-14622 jairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authentication

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...

7.5CVSS0.0069EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/04 8:45 a.m.•25 views

EUVD-2026-41661

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...

7.5CVSS6.6AI score0.0069EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/04 12:00 a.m.•25 views

PT-2026-55709

Name of the Vulnerable Software and Affected Versions kirilkirkov Ecommerce-CodeIgniter-Bootstrap versions prior to 49b20f53de2b7ec34e920b11c863f1491d911a04 Description A cross site scripting issue exists in the Hidden REST API Endpoint component. A remote attacker can exploit this by manipulatin...

5.3CVSS5.3AI score0.00486EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
•added 2026/07/04 12:00 a.m.•22 views

Fedora 43 : pdns-recursor (2026-34cca3d390)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-34cca3d390 advisory. update to latest upstream release to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

8.2CVSS6.8AI score0.00322EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/04 12:00 a.m.•31 views

PT-2026-55689

Name of the Vulnerable Software and Affected Versions jairiidriss restaurant-website-php-mysql versions up to 521428b5b612449df0cf4a5d15ee40cba67f3d35 Description A missing authentication flaw exists in the AJAX Endpoint component. A remote attacker can manipulate the '/admin/ajax files' endpoint...

7.5CVSS7.1AI score0.0069EPSS
SaveExploits0References9
Snyk
Snyk
•added 2026/07/03 10:19 p.m.•15 views

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to insufficient permission checks in the draft release process. An attacker can access sensitive draft release data or attachments by bypassing required write permissions. Remediation Upgrade...

7.5CVSS6AI score0.00451EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/03 10:19 p.m.•12 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the process that handles repository dump creation, which uses release tag names and asset names as filesystem path components. An attacker can manipulate file system paths by providing specially crafted release t...

8.7CVSS6.5AI score0.00451EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/03 9:31 p.m.•7 views

GHSA-7JVX-G65V-R899 Gitea release asset dumps permit path traversal through crafted names

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

5.3CVSS5.9AI score0.00451EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2026/07/03 9:31 p.m.•9 views

Gitea release asset dumps permit path traversal through crafted names

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

5.3CVSS5.9AI score0.00451EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2026/07/03 9:16 p.m.•21 views

CVE-2026-28705

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

5.3CVSS0.00451EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/03 9:16 p.m.•26 views

CVE-2026-27660

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

7.5CVSS0.00451EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/03 8:19 p.m.•11 views

CVE-2026-28705 Gitea repository dumps write release assets using unsafe path names

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

6AI score0.00451EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/03 8:19 p.m.•50 views

CVE-2026-28705 Gitea repository dumps write release assets using unsafe path names

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

0.00451EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/07/03 8:19 p.m.•21 views

EUVD-2026-41641

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

6AI score0.00451EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/03 8:19 p.m.•53 views

CVE-2026-28705

Gitea versions before 1.25.5 are vulnerable to a Directory Traversal vulnerability within the process that handles repository dump creation. The application uses release tag names and asset names as filesystem path components without sufficient validation. An attacker can provide specially crafte...

5.3CVSS6AI score0.00451EPSS
SaveExploits0References4
Rows per page
Query Builder