Lucene search
+L

83418 matches found

EUVD
EUVD
added 2026/07/23 3:32 p.m.15 views

EUVD-2026-48298

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

5.4CVSS5AI score0.00235EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/23 3:32 p.m.16 views

CVE-2026-48539 GFI Archiver < 15.13 Stored XSS via MailInsights.aspx

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

5.4CVSS5.1AI score0.00235EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/23 3:32 p.m.37 views

CVE-2026-48539

GFI Archiver prior to 15.13 is affected by CVE-2026-48539: a stored XSS in the MailInsights.aspx report naming parameter. An authenticated user can inject script/HTML that is stored by ReportScheduling.btnSaveReport_Click() and later executes in the viewer’s browser when they access the MailInsig...

5.4CVSS5.1AI score0.00235EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/23 3:32 p.m.41 views

CVE-2026-48539 GFI Archiver < 15.13 Stored XSS via MailInsights.aspx

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

5.4CVSS0.00235EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/23 2:18 p.m.19 views

CVE-2026-65689

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

9.8CVSS0.00866EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/23 2:18 p.m.14 views

CVE-2026-65690

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file upload functionality that allows authenticated attackers to traverse outside the intended directory by supplying a crafted filename. Attackers can exploit this path traversal...

8.8CVSS0.00901EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/23 1:30 p.m.30 views

CVE-2026-65690

Bold Reports Standalone Report Designer, versions before 14.1.12, is affected by a path traversal vulnerability in the file upload feature due to missing filepath validation. This allows an authenticated attacker to supply a crafted filename to traverse outside the intended directory and potentia...

8.8CVSS6.1AI score0.00901EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/07/23 1:28 p.m.40 views

CVE-2026-65689

Bold Reports Standalone Report Designer before 14.1.12 is affected by a path traversal vulnerability in the database download feature that allows unauthenticated attackers to read arbitrary files on the server filesystem, including authentication credentials, potentially giving full unauthorized ...

9.8CVSS5.9AI score0.00866EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/23 1:28 p.m.43 views

CVE-2026-65689 Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

9.8CVSS0.00866EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/23 1:25 p.m.15 views

CVE-2026-65688 Bold Reports Standalone Report Designer 14.1.12 Arbitrary File Read via Font Processing

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

9.8CVSS5.9AI score0.00866EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/23 1:25 p.m.38 views

CVE-2026-65688

The vulnerability affects Bold Reports Standalone Report Designer (before version 14.1.12). A missing filepath validation in the font processing feature enables unauthenticated attackers to perform a path traversal and read arbitrary files from the server filesystem, potentially exposing sensitiv...

9.8CVSS5.9AI score0.00866EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/23 1:25 p.m.16 views

CVE-2026-65688

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

9.8CVSS5.9AI score0.00866EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/07/23 1:24 p.m.34 views

CVE-2026-65687

Bold Reports Standalone Report Designer (vulnerable before 14.1.12) contains a path traversal vulnerability in its SVG processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem, potentially exposing credentials and enabling full unauthorized acces...

9.8CVSS5.9AI score0.00866EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/23 1:24 p.m.39 views

CVE-2026-65687 Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via SVG Processing

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its SVG processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path...

9.8CVSS0.00866EPSS
SaveExploits0References2
Circl
Circl
added 2026/07/23 12:52 a.m.17 views

CVE-2026-60455

creationtimestamp| type| source ---|---|--- 2026-07-23 00:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbmpjs7sj2q 2026-07-23 01:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbn6chrjh22 2026-07-23 17:17:14+00:00| seen|...

8.8CVSS7.1AI score0.00432EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/23 12:00 a.m.16 views

PT-2026-64080

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge kv map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

4.8CVSS5AI score0.00112EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/23 12:00 a.m.24 views

PT-2026-63999

Name of the Vulnerable Software and Affected Versions Bold Reports Standalone Report Designer versions 6.3 through 14.1.11 Description A missing filepath validation issue exists in the database download feature within the DataHub module. This path traversal weakness allows unauthenticated attacke...

9.8CVSS5.5AI score0.00866EPSS
SaveExploits0References4
Circl
Circl
added 2026/07/22 5:00 p.m.13 views

CVE-2026-50055

creationtimestamp| type| source ---|---|--- 2026-07-22 17:00:04+00:00| seen| Telegram/DukmhtJrIpGOZqoDJUhS517XJJYQfKNbcSgKtz1K8tDTao 2026-07-22 17:00:04+00:00| seen| Telegram/SMGH074nh7Yd9wjw94ayVIJrvLGWCGzfB0CoL72YFuLp63A 2026-07-23 00:00:09+00:00| published-proof-of-concept|...

5.9AI score
SaveExploits1
Circl
Circl
added 2026/07/22 4:32 p.m.18 views

CVE-2026-13181

creationtimestamp| type| source ---|---|--- 2026-07-22 16:32:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mraqrtt7w72g 2026-07-22 17:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrasjljpek2b 2026-09-08 22:20:02+00:00| seen|...

8.1CVSS5.9AI score0.00502EPSS
SaveExploits1References6
OSV
OSV
added 2026/07/22 2:17 p.m.11 views

CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder