Lucene search
+L

32441 matches found

Kitploit
Kitploit
added 2026/09/08 11:31 p.m.7 views

log4j-cve-code-search-resources

コード検索を使用したlog4j CVE-2021-44228およびlog4j CVE-2021-45046の修正/緩和。...

10CVSS7.4AI score0.99999EPSS
SaveExploits372
RedhatCVE
RedhatCVE
added 2026/09/08 11:02 p.m.5 views

CVE-2026-81738

A flaw was found in OpenVPN when using the tap-windows6 driver. A remote attacker could exploit this vulnerability by sending specially crafted DOMAIN-SEARCH entries. This could lead to an out-of-bounds write, potentially causing information disclosure or a denial of service...

4.2CVSS0.00331EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/08 10:19 p.m.7 views

CVE-2026-86082

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make t...

7.1CVSS0.00238EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/08 9:23 p.m.15 views

CVE-2026-86082

n8n , an open source workflow automation platform, is affected by a domain-restriction bypass in the OpenAI Chat Model node . The root cause is that the searchModels code path in loadModels.ts omitted the assertOpenAiCredentialAllowsUrl check, meaning the credential allowed-domain restrictions en...

7.1CVSS0.00238EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/09/08 9:23 p.m.31 views

CVE-2026-86082 n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make t...

7.1CVSS0.00238EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/08 9:23 p.m.14 views

CVE-2026-86082 n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make t...

7.1CVSS5.8AI score
SaveExploits0References6
NVD
NVD
added 2026/09/08 9:18 p.m.8 views

CVE-2026-85982

The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting XSS issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on...

9CVSS0.00219EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 9:18 p.m.7 views

CVE-2026-81192

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

7CVSS0.00138EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/08 9:18 p.m.7 views

CVE-2026-80159

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...

4CVSS0.00115EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 9:16 p.m.12 views

CVE-2026-9848

CVE-2026-9848 CVE-2026-9848 は、WordPress 用プラグイン WP Ticket Customer Support Ticket System & Helpdesk のバージョン 6.0.4 以前に影響する未認証SQLインジェクション(SQLi)脆弱性です。この欠陥は、プラグインがWordPressの検索パラメータ s を取得し、それを $wpdb-prepare や適切なエスケープ処理を使わずにUNIONサブクエリ内のSQL...

7.5CVSS5.9AI score0.00655EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/08 8:31 p.m.7 views

EUVD-2026-74105

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...

4CVSS0.00115EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 8:31 p.m.9 views

CVE-2026-80159

Acrobat Reader is affected by an Untrusted Search Path vulnerability (CWE-426 ) that could lead to privilege escalation . An attacker with high privileges could exploit this to gain elevated access, though exploitation requires user interaction (opening a malicious file) and depends on conditions...

4CVSS0.00115EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2026/09/08 8:31 p.m.26 views

CVE-2026-80159 Acrobat Reader | Untrusted Search Path (CWE-426)

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...

4CVSS0.00115EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 8:18 p.m.6 views

CVE-2026-78579

The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are substituted directly into the filter string and passed to the LDAP search operation, resulting in modification of th...

6.8CVSS0.00247EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 8:18 p.m.8 views

CVE-2026-76199

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...

8.6CVSS0.00211EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 8:18 p.m.15 views

CVE-2026-81192

CVE-2026-81192 is an untrusted search path vulnerability in the OpenTelemetry.Resources.Host NuGet package, affecting macOS only. The host.id resource attribute detector invokes sh and ioreg by bare name, resolving them through the PATH environment variable rather than by absolute path. A less-pr...

7CVSS0.00138EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/08 8:18 p.m.8 views

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

7CVSS6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/08 8:18 p.m.25 views

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

7CVSS0.00138EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/08 8:17 p.m.19 views

CVE-2026-85982

The Auth0 AD/LDAP Connector is affected by a stored Cross-Site Scripting (XSS) vulnerability caused by improper HTML encoding in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes—or a low-privileged local user...

9CVSS0.00219EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 8:17 p.m.30 views

CVE-2026-85982 Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector

The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting XSS issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on...

9CVSS0.00219EPSS
SaveExploits0References1
Rows per page
Query Builder