Lucene search
+L

89505 matches found

EUVD
EUVD
added 2026/07/13 4:30 a.m.12 views

EUVD-2026-43278

A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation of the argument Name/Username leads to cross site scripting. The attack can be executed remotely. The exploit is...

4.8CVSS4.7AI score0.0021EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/13 4:20 a.m.9 views

X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent()

A flaw was found in the X.org X11 server, specifically within the GLX OpenGL Extension to the X Window System dispatch layer. A remote attacker can exploit this vulnerability by sending a series of crafted X11 requests. This can lead to a use-after-free condition, where the server attempts to wri...

9CVSS6AI score0.00222EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/13 3:45 a.m.10 views

CVE-2026-15529 yzhao062 pyod persistence.py pyod.utils.persistence.load deserialization

A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. Upgrading to version 3.6.2 is abl...

5.3CVSS6AI score
SaveExploits0References10
Redos
Redos
added 2026/07/13 12:0 a.m.9 views

ROS-20260713-73-0002

The vulnerability in Portainer-Ce is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker who operates remotely to bypass security restrictions and gain unauthorized access to protected information...

10CVSS6.4AI score0.00503EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/07/13 12:0 a.m.5 views

The vulnerability of the gnutls_pkcs12_bag_set_data() function in the GnuTLS cryptographic library allows a attacker to damage memory or cause service failures.

The vulnerability of the gnutlspkcs12bagsetdata function in the GnuTLS cryptographic library is related to a single-precision shift error. Exploiting this vulnerability could allow an attacker to corrupt memory or cause service failures...

5.3CVSS5.2AI score0.00727EPSS
SaveExploits0References27Affected Software8
Positive Technologies
Positive Technologies
added 2026/07/13 12:0 a.m.15 views

PT-2026-57646

A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is an unknown function of the file /admin/index.php of the component Administrative Interface. Performing a manipulation of the argument page results in improper control of filename for include/requi...

5.3CVSS5.9AI score0.00242EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2026/07/13 12:0 a.m.3 views

The vulnerability of the gnutls_x509_crt_check_hostname2() function in the lib/x509/hostname-verify.c file of the GnuTLS cryptographic library allows a attacker to perform a MITM attack.

The vulnerability of the gnutlsx509crtcheckhostname2 function in the lib/x509/hostname-verify.c file of the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a remote attacker to perform a MITM attack...

8.5CVSS6.1AI score0.00423EPSS
SaveExploits0References28Affected Software8
EUVD
EUVD
added 2026/07/12 7:15 p.m.15 views

EUVD-2026-43246

A weakness has been identified in vnotex vnote up to 3.20.1. Impacted is an unknown function of the file /src/data/extra/web/js/markdownit.js of the component YAML Frontmatter. This manipulation of the argument pmetaData causes cross site scripting. The attack may be initiated remotely. The vendo...

5.1CVSS4.6AI score0.00195EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/12 7:15 p.m.42 views

CVE-2026-15505 vnotex vnote YAML Frontmatter markdownit.js cross site scripting

A weakness has been identified in vnotex vnote up to 3.20.1. Impacted is an unknown function of the file /src/data/extra/web/js/markdownit.js of the component YAML Frontmatter. This manipulation of the argument pmetaData causes cross site scripting. The attack may be initiated remotely. The vendo...

5.1CVSS0.00195EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/12 1:16 p.m.11 views

CVE-2026-15501

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.testmcpconnection of the file astrbot/dashboard/routes/tools.py of the component MCP Test Endpoint. The manipulation of the argument mcpserverconfig.url leads to...

6.5CVSS0.00206EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/12 12:45 p.m.36 views

CVE-2026-15502 AojiaoZero Antaris PayPal IPN Payment ipn.php _rewardPurchase sql injection

A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation of the argument itemnumber results in sql injection. The attack may be performed from remote. The vendor was contacte...

6.5CVSS0.00196EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/12 11:16 a.m.10 views

CVE-2026-15493

A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b701a45f0edcd4f42d5f64aeee. This issue affects some unknown processing of the file absent.php. Performing a manipulation of the argument exportdate results in cross site scripting. It is possible to initiate...

5.1CVSS0.00191EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/12 10:16 a.m.13 views

CVE-2026-15491

A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. This affects an unknown part. This manipulation causes missing authentication. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain...

7.5CVSS0.00383EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/12 7:0 a.m.23 views

CVE-2026-15485

TRENDnet TEW-821DAP 1.11B03 contains a flaw in the DNS Lookup Handler (function sub_43F2C4 in /goform/tools_nslookup) that allows os command injection via manipulation of nslookup_target/dns_server. The vulnerability can be triggered remotely. The vendor notes these items are EOL; no current conf...

6.5CVSS6.5AI score0.01072EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/12 6:30 a.m.42 views

CVE-2026-15484 TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow

A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub41EC14 of the file /goform/toolsnslookup of the component ssi. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The vendor explains: "We are unable to...

9CVSS0.00472EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/12 6:15 a.m.8 views

CVE-2026-15483

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub41EC14 of the file /goform/toolsnslookup of the component ssi. The manipulation of the argument nslookuptarget leads to buffer overflow. It is possible to initiate the attack remotely. The vendo...

9CVSS7.3AI score0.00472EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/12 6:0 a.m.10 views

EUVD-2026-43204

A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /azcall/adm/gestaoloja/sis.php?t=consultar of the component HTTP Handler. Executing a manipulation of the argument nome/perfil/status can lead to sql injection. The attack may be...

7.5CVSS5.9AI score0.00274EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/12 2:0 a.m.13 views

EUVD-2026-43196

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file /callrec/audio.jsp of the component Call Recording Handler. The manipulation of the argument callId results in improper authorization. The attack may be performed from remote...

5.3CVSS5.8AI score0.00207EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/12 12:31 a.m.13 views

EUVD-2026-43192

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may...

5.3CVSS5.7AI score0.00207EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/12 12:0 a.m.25 views

PT-2026-57527

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 1.12B01 Description A buffer overflow can be triggered remotely via the nslookup target argument in the sub 41EC14 function within the /goform/tools nslookup file of the ssi component. This issue affects products th...

9CVSS7.1AI score0.00472EPSS
SaveExploits0References8
Rows per page
Query Builder