Lucene search
+L

35369 matches found

OSV
OSV
added 2026/04/24 3:16 p.m.11 views

DEBIAN-CVE-2026-31536

In the Linux kernel, the following vulnerability has been resolved: smb: server: let senddone handle a completion without IBSENDSIGNALED With smbdirectsendbatch processing we likely have requests without IBSENDSIGNALED, which will be destroyed in the final request that has IBSENDSIGNALED set. If...

9.8CVSS5.3AI score0.00442EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/24 2:30 p.m.42 views

CVE-2026-31536

The vulnerability CVE-2026-31536 affects the Linux kernel SMB direct server implementation. In smb: server: let send_done handle a completion without IB_SEND_SIGNALED, during smbdirect_send_batch processing requests may be processed without IB_SEND_SIGNALED and could be destroyed in the final req...

9.8CVSS5.4AI score0.00442EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/04/24 1:10 p.m.15 views

CLSA-2026-1777036238 libsoup: Fix of CVE-2026-5119

CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request...

8.2CVSS5.8AI score0.00254EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/24 12:58 p.m.22 views

CLSA-2026-1777035524 libsoup: Fix of CVE-2026-5119

CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request...

8.2CVSS5.8AI score0.00254EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2026/04/24 12:30 p.m.15 views

Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerability

Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module. This issue affects Apache DolphinScheduler: Version = 3.2.0 and 3.3.1. Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class...

6.3CVSS5.8AI score0.00537EPSS
SaveExploits0References4Affected Software2
Vulnrichment
Vulnrichment
added 2026/04/24 11:05 a.m.7 views

CVE-2026-4313 Stored XSS in AdaptiveGRC

AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms. Authenticated attacker can replace the value of the text field in the HTTP POST request. Improper parameter validation by the server results in arbitrary JavaScript execution in the victim's browser. Critically, this...

2.4CVSS5.9AI score0.0059EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/24 1:16 a.m.7 views

CVE-2026-31955

Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery SSRF vulnerability in versions prior to 4.4.1 allows users with DataSet permissions to make arbitrary HTTP requests from the CMS...

4.9CVSS0.00282EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/24 12:31 a.m.15 views

EUVD-2026-25347

A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers...

6.9CVSS5.8AI score0.00294EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/24 12:31 a.m.15 views

GHSA-MF69-R24Q-GHHR Duplicate Advisory: OpenClaw: Pairing pending-request caps were enforced per channel instead of per account

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wwfp-w96m-c6x8. This link is maintained to preserve external references. Original Description OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account,...

6.3CVSS5.7AI score
SaveExploits0References4
EUVD
EUVD
added 2026/04/24 12:31 a.m.11 views

EUVD-2026-25330

OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allowing attackers to exhaust the shared pending window. Remote attackers can submit pairing requests from other accounts to block new pairing challenges on unaffected accounts,...

6.3CVSS5.8AI score0.00417EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/24 12:16 a.m.9 views

CVE-2026-27841

A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery CSRF protections. Because the application does not enforce server-side validation of request origin or implement CSRF tokens, a malicious extern...

8.4CVSS0.00162EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/24 12:16 a.m.21 views

CVE-2026-1789

A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers...

6.9CVSS0.00294EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/24 12:14 a.m.9 views

CVE-2026-31955 Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality

Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery SSRF vulnerability in versions prior to 4.4.1 allows users with DataSet permissions to make arbitrary HTTP requests from the CMS...

4.9CVSS6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/24 12:14 a.m.6 views

CVE-2026-31955 Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality

Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery SSRF vulnerability in versions prior to 4.4.1 allows users with DataSet permissions to make arbitrary HTTP requests from the CMS...

4.9CVSS5.6AI score0.00282EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/24 12:14 a.m.13 views

EUVD-2026-25366

Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery SSRF vulnerability in versions prior to 4.4.1 allows users with DataSet permissions to make arbitrary HTTP requests from the CMS...

4.9CVSS5.8AI score0.00282EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/24 12:14 a.m.22 views

CVE-2026-31955

CVE-2026-31955 affects Xibo CMS prior to 4.4.1. An authenticated SSRF vulnerability in the remote DataSet functionality allows users with DataSet permissions (and the privilege to add DataSets to Layouts) to cause the CMS server to issue arbitrary HTTP requests to internal or external resources. ...

4.9CVSS5.8AI score0.00282EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/24 12:00 a.m.7 views

CVE-2026-27841 SenseLive X3050 Cross-Site request forgery

A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery CSRF protections. Because the application does not enforce server-side validation of request origin or implement CSRF tokens, a malicious extern...

8.4CVSS5.2AI score0.00162EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/24 12:00 a.m.24 views

CVE-2026-27841

SenseLive X3050 is affected by a CSRF vulnerability in its web management interface. The issue allows state-changing requests to be triggered without proper server-side origin validation or CSRF tokens, enabling a malicious external page to submit unauthorized configuration changes to the device....

8.4CVSS5.7AI score0.00162EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.14 views

SenseLive X3050 跨站请求伪造漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a cross-site request forgeing vulnerability. This vulnerability arises from the lack of protection against cross-site request forgeing in the w...

8.4CVSS5.7AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.28 views

PT-2026-34888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB server component where the send done function needs to handle completions that lack the IB SEND SIGNALED flag. During smbdirect send batch processing, requests...

9.8CVSS7.7AI score0.00442EPSS
SaveExploits0References14
Rows per page
Query Builder