Lucene search
+L

126006 matches found

EUVD
EUVD
added 2026/08/24 1:49 p.m.5 views

EUVD-2026-64886

RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...

8.2CVSS5.6AI score
SaveExploits0References1
NVD
NVD
added 2026/08/24 1:19 p.m.3 views

CVE-2026-78365

Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another company's supplier record, and to reassign it to their own company, via a PUT request to /api/supplier/id setting companyid...

9.3CVSS
SaveExploits0References3
NVD
NVD
added 2026/08/24 12:16 p.m.3 views

CVE-2026-78279

Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...

5.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 12:16 p.m.3 views

CVE-2026-78277

Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...

4.9CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 12:16 p.m.3 views

CVE-2026-78269

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

6.4CVSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2026/08/24 12:08 p.m.4 views

qemu-kvm security, bug fix, and enhancement update

An update is available for qemu-kvm. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linu...

6.7CVSS5.9AI score0.00158EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/08/24 11:45 a.m.28 views

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

7.7CVSS5.7AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/24 11:41 a.m.4 views

CVE-2026-74719

A flaw was found in the Linux kernel's Server Message Block SMB over Remote Direct Memory Access RDMA SMC protocol implementation. A remote attacker, by sending a duplicate link confirmation or addition request, can cause a memory leak. This occurs because the system overwrites an existing memory...

5.5CVSS5.5AI score0.0022EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 11:39 a.m.5 views

EUVD-2026-64787

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

4.3CVSS5.1AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 11:39 a.m.10 views

CVE-2026-78280 WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

4.3CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 11:39 a.m.7 views

EUVD-2026-64786

Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...

5.4CVSS5.1AI score
SaveExploits0References1
CVE
CVE
added 2026/08/24 11:39 a.m.11 views

CVE-2026-78279

CVE-2026-78279 is an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Fluent Support Pro , affecting versions ≤ 2.3.1 . The vulnerability was discovered by Ananda Dhakal (Patchstack). A CVSS 3.1 score of 5.4 (Medium) is assigned, with a network vector, low a...

5.4CVSS5.1AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 11:39 a.m.8 views

EUVD-2026-64784

Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...

4.9CVSS5.1AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 11:39 a.m.8 views

CVE-2026-78269 WordPress Shared Files plugin <= 1.7.69 - Server Side Request Forgery (SSRF) vulnerability

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

6.4CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 11:39 a.m.6 views

EUVD-2026-64834

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

6.4CVSS5.1AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 10:10 a.m.18 views

CVE-2026-59295 Micrometer Instrumentation of Apache HttpAsyncClient Denial of Service Vulnerability

Micrometer-instrumented Apache HttpAsyncClient 4.x or 5.x usage via MicrometerHttpClientInterceptor can leak memory unboundedly when asynchronous requests fail before receiving a response e.g. connection resets or timeouts. Tracking state for these requests remains in memory indefinitely, and...

5.9CVSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 8:05 a.m.9 views

CVE-2026-71201

A flaw was found in OpenStack Ironic. A project reader can exploit this vulnerability by sending a specially crafted request to the Ironic service. This allows the reader to access Portgroups that are assigned to Nodes belonging to or leased by other projects, leading to unauthorized information...

5CVSS4.8AI score0.00168EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/24 7:13 a.m.5 views

FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit this vulnerability to inject arbitrary headers or requests into an HTTP proxy CONNECT request. This occurs because FreeRDP does not properly validate control characters in the server-controlled...

9.8CVSS8.6AI score0.0038EPSS
SaveExploits0References7
SUSE Linux
SUSE Linux
added 2026/08/24 6:56 a.m.2 views

Security update for Multi-Linux Manager Client Tools - Monitoring stack

This update fixes the following issues: grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints bsc1271331 - version 12.4.4 CVE-2025-12141: Fixed information leakage...

9.1CVSS6AI score0.16177EPSS
SaveExploits0References52
RedHat Linux
RedHat Linux
added 2026/08/24 6:26 a.m.5 views

FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit this vulnerability to inject arbitrary headers or requests into an HTTP proxy CONNECT request. This occurs because FreeRDP does not properly validate control characters in the server-controlled...

9.8CVSS8.6AI score0.0038EPSS
SaveExploits0References7
Rows per page
Query Builder