Lucene search
+L

89835 matches found

NVD
NVD
added 2026/04/04 11:16 p.m.8 views

CVE-2026-5526

A security flaw has been discovered in Tenda 4G03 Pro up to 1.0/1.1/04.03.01.53/192.168.0.1. Affected by this vulnerability is an unknown functionality of the file /bin/httpd. The manipulation results in improper access controls. The attack may be performed from remote. The exploit has been...

9.8CVSS0.00362EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/04/04 11:15 p.m.35 views

CVE-2026-5527 Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key

A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the file /etc/www/pem/server.key of the component ECDSA P-256 Private Key Handler. This manipulation causes use of hard-coded cryptographic key . It is possible t...

6.9CVSS0.00435EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/04 11:15 p.m.33 views

CVE-2026-5527

CVE-2026-5527 affects Tenda 4G03 Pro (versions 1.0/1.0re/01.bin/04.03.01.53). The issue resides in the ECDSA P-256 Private Key Handler, specifically the /etc/www/pem/server.key, where a hard-coded private key is used. This allows a remote attacker to exploit the vulnerability over the network wit...

6.9CVSS5.9AI score0.00435EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/04 11:15 p.m.3 views

CVE-2026-5527 Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key

A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the file /etc/www/pem/server.key of the component ECDSA P-256 Private Key Handler. This manipulation causes use of hard-coded cryptographic key . It is possible t...

6.9CVSS5.9AI score0.00435EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/04/04 5:0 p.m.19 views

CVE-2026-5468

A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a manipulation of the argument formCss/formCssMobile/formSideHtml results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the publi...

5.4CVSS4.4AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/03 11:2 p.m.7 views

CVE-2026-5413

A vulnerability was identified in Newgen OmniDocs up to 12.0.00. Affected by this vulnerability is an unknown functionality of the file /omnidocs/GetWebApiConfiguration. The manipulation of the argument connectionDetails leads to information disclosure. The attack is possible to be carried out...

6.3CVSS5.3AI score0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/03 3:30 p.m.49 views

CVE-2026-5470 mixelpixx Google-Research-MCP Model Context Protocol content-extractor.service.ts extractContent server-side request forgery

A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bfe5f6e582b6cc288bb897b35cf2/ca613b736ab787bc926932f59cddc69457185a83. This issue affects the function extractContent of the file src/services/content-extractor.service.ts of the component Model Context Protoc...

6.5CVSS0.00206EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/03 2:30 p.m.7 views

CVE-2026-5469 Casdoor Webhook URL server-side request forgery

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not...

5.1CVSS5.7AI score
SaveExploits0References5
CVE
CVE
added 2026/04/03 2:30 p.m.44 views

CVE-2026-5469

CVE-2026-5469 affects Casdoor version 2.356.0, specifically the Webhook URL Handler component. A crafted manipulation can induce a server-side request forgery (SSRF) and is reportable remotely. The vulnerability involves unknown code within the Webhook URL Handler and, per disclosures, the vendor...

7.2CVSS5.6AI score0.00301EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/04/03 2:16 p.m.7 views

CVE-2026-5468

A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a manipulation of the argument formCss/formCssMobile/formSideHtml results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the publi...

5.4CVSS0.00188EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/04/03 12:16 p.m.9 views

CVE-2026-33533

A flaw was found in Glances, an open-source system monitoring tool. The Glances XML-RPC server, when activated, sends a wildcard Access-Control-Allow-Origin header and does not validate the Content-Type header. This allows a remote attacker to craft a malicious webpage that can issue a Cross-Orig...

7.1CVSS5.9AI score0.00332EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/03 3:39 a.m.6 views

EUVD-2026-18570

Swift Crypto: X-Wing HPKE Decapsulation Accepts Malformed Ciphertext Length...

7.5CVSS5.8AI score0.00472EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/03 1:32 a.m.26 views

CVE-2026-28815

A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1...

0.00472EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/03 12:0 a.m.9 views

PT-2026-29972

A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1...

5.9AI score0.00472EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/04/02 10:55 p.m.12 views

CVE-2026-5311

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

6.9CVSS5.8AI score0.00991EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/04/02 6:31 p.m.18 views

EUVD-2026-18488

A security flaw has been discovered in Newgen OmniDocs up to 12.0.00. Affected by this issue is some unknown functionality of the file /omnidocs/WebApiRequestRedirection. The manipulation of the argument DocumentId results in improper control of resource identifiers. The attack may be performed...

6.9CVSS5.7AI score0.00315EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/04/02 6:31 p.m.6 views

EUVD-2026-18360

A security flaw has been discovered in Trendnet TEW-657BRM 1.00.1. The impacted element is the function updatepcdb of the file /setup.cgi. The manipulation of the argument macpcdba results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the...

9CVSS7.8AI score0.00815EPSS
SaveExploits1References5
NVD
NVD
added 2026/04/02 6:16 p.m.6 views

CVE-2026-5413

A vulnerability was identified in Newgen OmniDocs up to 12.0.00. Affected by this vulnerability is an unknown functionality of the file /omnidocs/GetWebApiConfiguration. The manipulation of the argument connectionDetails leads to information disclosure. The attack is possible to be carried out...

6.3CVSS0.00305EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/02 6:0 p.m.3 views

CVE-2026-5414

A security flaw has been discovered in Newgen OmniDocs up to 12.0.00. Affected by this issue is some unknown functionality of the file /omnidocs/WebApiRequestRedirection. The manipulation of the argument DocumentId results in improper control of resource identifiers. The attack may be performed...

6.9CVSS5.7AI score0.00315EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/04/02 6:0 p.m.20 views

CVE-2026-5414

Newgen OmniDocs (up to 12.0.00) contains a vulnerability in /omnidocs/WebApiRequestRedirection where manipulating the DocumentId parameter leads to improper control of resource identifiers. The issue can be exploited remotely, and a public exploit is available. The vendor was contacted but did no...

6.9CVSS5.7AI score0.00315EPSS
SaveExploits0References4
Rows per page
Query Builder