Lucene search
+L

8032 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/01 4:27 p.m.12 views

CVE-2026-20191

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request...

7.5CVSS6AI score0.00909EPSS
SaveExploits0References2Affected Software1
Cisco
Cisco
added 2026/07/01 4:00 p.m.28 views

Cisco Catalyst Center Arbitrary File Read Vulnerability

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request...

7.5CVSS6AI score0.00909EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/01 12:00 a.m.24 views

PT-2026-54702

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description Insufficient validation of user-supplied input allows an unauthenticated, remote attacker to read arbitrary files from a restricted container. This is achieved by sending a...

7.5CVSS6AI score0.00909EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/30 9:32 p.m.28 views

CVE-2026-54517

A flaw was found in jackson-databind. A remote attacker can exploit this vulnerability due to an issue in how active-view @JsonView filters are applied. Specifically, setterless collections annotated with a restricted @JsonView can be populated from attacker-controlled JSON even when the active...

5.3CVSS5.7AI score0.00384EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/06/30 3:12 p.m.13 views

CVE-2026-48313 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read and limited write access. An attacker could exploit this vulnerability to access sensitive...

9.3CVSS5.9AI score0.02954EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 3:12 p.m.84 views

CVE-2026-48313

Adobe ColdFusion versions 2025.9, 2023.20 and earlier are affected by a path traversal vulnerability (CWE-22) that allows an unauthenticated remote attacker to perform arbitrary file system read and limited write access outside the intended directory scope. No user interaction is required. The vu...

9.3CVSS5.9AI score0.02954EPSS
SaveIn wildExploits0References1Affected Software1
CVE
CVE
added 2026/06/30 3:11 p.m.516 views

CVE-2026-48282

CVE-2026-48282 affects Adobe ColdFusion 2025.9, 2023.20 and earlier. The connected exploit sources describe a path traversal in ColdFusion’s Remote Development Service (RDS) that allows an unauthenticated attacker to read and write arbitrary files via /CFIDE/main/ide.cfm, resulting in Remote Code...

10CVSS6.4AI score0.42388EPSS
SaveIn wildExploits3References2Affected Software1
NVD
NVD
added 2026/06/30 1:17 p.m.37 views

CVE-2026-12388

A flaw was found in the Identity Provider IdP mapper component of Keycloak, which is used to manage how user information from external services is mapped to Keycloak users. An administrator with limited permissions to manage identity providers can exploit this flaw by creating a "Hardcoded Role"...

6.5CVSS0.00405EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/30 12:00 p.m.22 views

EUVD-2026-40301

A flaw was found in the Identity Provider IdP mapper component of Keycloak, which is used to manage how user information from external services is mapped to Keycloak users. An administrator with limited permissions to manage identity providers can exploit this flaw by creating a "Hardcoded Role"...

6.5CVSS5.8AI score0.00405EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/30 12:00 p.m.11 views

CVE-2026-12388

A flaw was found in the Identity Provider IdP mapper component of Keycloak, which is used to manage how user information from external services is mapped to Keycloak users. An administrator with limited permissions to manage identity providers can exploit this flaw by creating a "Hardcoded Role"...

6.5CVSS5.8AI score0.00405EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/29 8:17 p.m.28 views

CVE-2026-43725

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the...

7.1CVSS0.00912EPSS
SaveExploits0References7
OSV
OSV
added 2026/06/29 8:17 p.m.14 views

DEBIAN-CVE-2026-43701

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox...

7.1CVSS7.3AI score0.00551EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/29 8:17 p.m.22 views

CVE-2026-43701

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox...

7.1CVSS0.00551EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/06/29 7:43 p.m.17 views

CVE-2026-43701

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox...

7.1CVSS7.3AI score0.00551EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/06/29 7:43 p.m.13 views

CVE-2026-43701

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox...

7.1CVSS7AI score0.00551EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/06/29 7:43 p.m.19 views

EUVD-2026-40211

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox...

5.7AI score0.00551EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/29 7:43 p.m.77 views

CVE-2026-43701

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox...

0.00551EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/06/29 7:42 p.m.15 views

CVE-2026-43725

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the...

7.6AI score0.00912EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/06/29 7:42 p.m.19 views

EUVD-2026-40192

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox...

7.1CVSS5.7AI score0.00912EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/06/29 7:29 p.m.14 views

Missing Authorization

Overview com.yahoo.elide:elide-core is a library that lets you stand up a GraphQL/JSON-API web service with minimal effort. Affected versions of this package are vulnerable to Missing Authorization in the SortingImpl.getValidSortingRules process. An attacker can infer the values of restricted...

5.3CVSS5.9AI score0.00281EPSS
SaveExploits0References2
Rows per page
Query Builder