Lucene search
+L

9782 matches found

CVE
CVE
•added 2026/09/02 3:40 p.m.•27 views

CVE-2026-84649

The Stapler component (versions 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317, excluding 2088.2093.vd7c3e58008a_6) included in Jenkins versions 2.447 through 2.579 and LTS 2.452.1 through 2.568.2 contains a vulnerability where an HTTP endpoint serving dynamically generated JavaScript resource...

8.8CVSS5.7AI score0.00201EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•10 views

EUVD-2026-70115

In Stapler 1839.ved17667baeb5 through 2107.v8dfcbe8ed317 both inclusive, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.447 through 2.579 both inclusive, LTS 2.452.1 through 2.568.2 both inclusive, an HTTP endpoint serving dynamically generated JavaScript resources embeds the user's...

8.8CVSS5.7AI score0.00201EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•1 views

CVE-2026-84649: Cross-Site Request Forgery (CSRF)

In Stapler 1839.ved17667baeb5 through 2107.v8dfcbe8ed317 both inclusive, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.447 through 2.579 both inclusive, LTS 2.452.1 through 2.568.2 both inclusive, an HTTP endpoint serving dynamically generated JavaScript resources embeds the user's...

8.8CVSS5.6AI score0.00201EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•20 views

PT-2026-84772

In Stapler 1839.ved17667b a eb 5 through 2107.v8dfcb e8ed317 both inclusive, except 2088.2093.vd7c3e58008a 6, included in Jenkins 2.447 through 2.579 both inclusive, LTS 2.452.1 through 2.568.2 both inclusive, an HTTP endpoint serving dynamically generated JavaScript resources embeds the user's...

8.8CVSS5.7AI score0.00201EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/01 9:31 p.m.•9 views

GHSA-68JX-F42C-7599 TYPO3 CMS - Broken Access Control in Backend and Install Tool

Problem The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 CVE-2020-11069 became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Admin Tool applications from the site's main entry script instead of the dedicated typo3/ directory. Whether a request originat...

7.3CVSS5.9AI score0.00242EPSS
SaveExploits0References10
OSV
OSV
•added 2026/08/31 3:42 p.m.•8 views

OPENSUSE-SU-2026:21713-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen

This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...

10CVSS6.7AI score0.00715EPSS
SaveExploits5References124
Snyk
Snyk
•added 2026/08/31 3:10 p.m.•11 views

Cross-site Request Forgery (CSRF)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

5.1CVSS5.3AI score0.00251EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/31 3:01 p.m.•4 views

SUSE-SU-2026:3897-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issue: Update to Mozilla Thunderbird 140.14. - MFSA 2026-79 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935: Privilege escalation in the DOM: Networking component CVE-2026-74936:...

9.8CVSS6.3AI score0.00715EPSS
SaveExploits4References33
CVE
CVE
•added 2026/08/31 11:46 a.m.•21 views

CVE-2026-71378

ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from another origin. Its default policy, FetchMetadataResourceIsolationPolicy, was derived from a reference implementation...

4.6CVSS5.8AI score0.00251EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2025-56798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges vi...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•0 views

CVE-2026-71378: Cross-Site Request Forgery (CSRF)

ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from another origin. Its default policy, FetchMetadataResourceIsolationPolicy, was derived from a reference implementation...

4.6CVSS5.5AI score0.00251EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/28 8:20 p.m.•29 views

CVE-2026-55696

PrivateBin versions prior to 2.0.5 contain a stored XSS vulnerability in the attachment download link. The root cause is that DOMPurify sanitization in AttachmentViewer.setAttachment only applies to image/*svg MIME types, and the resulting sanitized blob is assigned to a local variable used for t...

4.3CVSS6AI score0.00368EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•1 views

CVE-2026-55696: Improper Neutralization of Input During Web Page Generation

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAttachment in js/privatebin.js uses getAttachmentMimeType to accept attacker-controlled MIME types and uses getBlobUrl to create a same-origin blob before setting...

4.3CVSS6AI score0.00368EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/27 12:00 a.m.•39 views

TencentOS Server 3: thunderbird (TSSA-2026:0924)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0924 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.8CVSS6.8AI score0.00521EPSS
SaveExploits1References34
NVD
NVD
•added 2026/08/26 6:16 p.m.•18 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS0.00241EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/26 12:00 a.m.•40 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

0.00241EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/26 12:00 a.m.•11 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

5.9AI score0.00241EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/26 12:00 a.m.•14 views

EUVD-2025-210782

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

5.4AI score0.00241EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•0 views

CVE-2025-56798: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/26 12:00 a.m.•25 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS5.4AI score0.00241EPSS
SaveExploits0References3
Rows per page
Query Builder