Lucene search
+L

37012 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•1 views

CVE-2026-6788: Uncontrolled Search Path Element

Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files...

8.5CVSS5.7AI score0.00175EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•27 views

PT-2026-37647

Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.This issue affects WatchGuard Agent before 1.25.03.0000...

8.5CVSS5.8AI score0.00175EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•79 views

PT-2026-37659

Name of the Vulnerable Software and Affected Versions JohnsonControls AC2000 versions 10.6 through 10 JohnsonControls AC2000 versions 11.0 through 9 JohnsonControls AC2000 versions 12 through 3 Description An uncontrolled search path element issue allows for the manipulation of configuration file...

8.4CVSS5.7AI score0.00108EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•3 views

CVE-2026-8011: Protection Mechanism Failure

Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.6AI score0.00259EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•1 views

CVE-2026-21661: Uncontrolled Search Path Element

An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths. This issue affects AC2000: from 10.6 before release 10, from 11.0 before release 9, from 12 before release 3...

8.4CVSS5.8AI score0.00108EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•20 views

WatchGuard Agent 代码问题漏洞

WatchGuard Agent is a terminal security protection and device management agent provided by the American company WatchGuard. Versions of WatchGuard Agent prior to 1.25.03.0000 contained a code vulnerability caused by uncontrolled search path elements, which could lead to the use of malicious files...

8.5CVSS5.9AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/05 12:31 p.m.•20 views

EUVD-2023-60574

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

6.1CVSS5.9AI score0.00265EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/05 12:16 p.m.•29 views

CVE-2023-54349

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

6.1CVSS0.00265EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/05 11:24 a.m.•8 views

CVE-2023-54349

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

6.1CVSS5.9AI score0.00265EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/05 11:24 a.m.•10 views

CVE-2023-54349 AmazCart CMS 3.4 Reflected Cross-Site Scripting via Search

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

6.1CVSS5.9AI score0.00265EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/05 11:24 a.m.•33 views

CVE-2023-54349

AmazCart CMS 3.4 is affected by a reflected cross-site scripting (XSS) vulnerability in the search functionality. The issue allows unauthenticated attackers to inject arbitrary JavaScript by submitting payloads in the search input, with scripts potentially executing when search results or history...

6.1CVSS5.9AI score0.00265EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/05 11:24 a.m.•61 views

CVE-2023-54349 AmazCart CMS 3.4 Reflected Cross-Site Scripting via Search

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

6.1CVSS0.00265EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/05/05 2:20 a.m.•12 views

CVE-2026-40201

@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file...

5.4CVSS5.8AI score0.00298EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/05 12:18 a.m.•11 views

GHSA-XHJH-PMCV-23JW Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams

Vulnerability Disclosure: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams Summary The encode function in lib/helpers/AxiosURLSearchParams.js contains a character mapping charMap at line 21 that reverses the safe percent-encoding of null bytes. After encodeURIComponent'\x00'...

3.7CVSS5.9AI score0.00264EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/05/05 12:18 a.m.•38 views

EUVD-2026-25590

Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams...

3.7CVSS5.8AI score0.00264EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•21 views

AmazCart CMS 跨站脚本漏洞

AmazCart CMS is an e-commerce content management system developed by the AmazCart company. Version 3.4 of AmazCart CMS has a cross-site scripting vulnerability. This vulnerability stems from a reflective cross-site scripting flaw, allowing unauthenticated attackers to inject malicious scripts...

6.1CVSS5.9AI score0.00265EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/05 12:00 a.m.•22 views

PT-2026-37004

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

6.1CVSS5.9AI score0.00265EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•3 views

CVE-2023-54349: Improper Neutralization of Input During Web Page Generation

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

6.1CVSS6.1AI score0.00265EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/04 10:04 p.m.•48 views

GHSA-HM49-WCQC-G2XG net-imap vulnerable to command Injection via "raw" arguments to multiple commands

Summary Several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. Details Net::IMAP's...

5.8CVSS5.6AI score0.00519EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
•added 2026/05/04 10:04 p.m.•18 views

net-imap vulnerable to command Injection via "raw" arguments to multiple commands

Summary Several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. Details Net::IMAP's...

9.8CVSS5.6AI score0.00519EPSS
SaveExploits0References12Affected Software1
Rows per page
Query Builder