Lucene search
+L

29411 matches found

Cvelist
Cvelist
added 2026/07/30 3:55 p.m.52 views

CVE-2026-28814 Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering

Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue...

0.0041EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/30 3:55 p.m.41 views

CVE-2026-28814

Summary of CVE-2026-28814 : Apache JSPWiki (up to 2.12.3) allows pre-auth arbitrary wiki markup rendering due to lack of authentication. This can enable an attacker to obtain sensitive data stored in JSPWiki variables. Affected version range is up to 2.12.3; fixed in 2.12.4 and 3.0.0. Remediation...

7.5CVSS5.8AI score0.0041EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/30 3:55 p.m.7 views

CVE-2026-28814

Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue...

5.8AI score0.0041EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/30 3:16 p.m.18 views

CVE-2026-12947

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user...

7.5CVSS0.00233EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 2:17 p.m.15 views

EUVD-2026-51146

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user...

7.5CVSS5.8AI score0.00233EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/30 2:17 p.m.81 views

CVE-2026-12947

CVE-2026-12947 affects IBM App Connect Enterprise versions 13.0.1.0–13.0.7.2 and 12.0.1.0–12.0.12.27. The issue involves storing potentially sensitive information in log files that could be read by a local user (CWE-532). IBM’s advisory lists the remediation via APAR IT49670, with fixes available...

7.5CVSS5.8AI score0.00233EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/30 12:26 a.m.58 views

CVE-2026-18011

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Low...

0.00091EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.16 views

PT-2026-66330

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Low...

9.6CVSS5.9AI score0.00572EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.26 views

PT-2026-66536

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.8.4 Description Broken access control issues in the file handling API allow unauthorized access to user files, breaking tenant isolation in multi-user deployments. The endpoint '/api/v1/files/images/fl...

6.5CVSS5.6AI score0.00391EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.17 views

PT-2026-66537

Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access versions 11.0 through 11.0.2 IBM Security Verify Access versions 10.0 through 10.0.9.1 IBM Verify Identity Access Container versions 11.0 through 11.0.2 IBM Security Verify Access Container versions 10.0 through...

5.3CVSS5.2AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.14 views

PT-2026-66211

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00572EPSS
SaveExploits0References376
CVE
CVE
added 2026/07/29 7:05 p.m.40 views

CVE-2026-18266

CVE-2026-18266 affects Dify AI Workflow via the OAuth flow in the AppInitializer component, enabling an Open Redirect vulnerability. An attacker can coerce a user to visit a malicious page or file, resulting in a redirection to a site of the attacker’s choosing and potential information disclosur...

5.4CVSS5.9AI score0.00248EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/29 6:59 p.m.15 views

EUVD-2026-50475

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed some sensitive information to be disclosed to an unintended host due to improper handling of upstream requests in...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/29 5:16 p.m.15 views

CVE-2026-20316

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

5.3CVSS0.09816EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/29 4:22 p.m.14 views

EUVD-2026-50404

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

5.3CVSS5.9AI score0.09816EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/29 4:22 p.m.12 views

CVE-2026-20316 Cisco Secure Firewall Management Center Software Static Credential Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

5.3CVSS5.9AI score0.09816EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/29 4:22 p.m.496 views

CVE-2026-20316

Cisco Secure Firewall Management Center (FMC) Software is affected by CVE-2026-20316 due to static credentials in the web interface, enabling an unauthenticated, remote attacker with a low-privileged account to log in and access sensitive data. Root cause: hard-coded/static credentials for a low-...

5.3CVSS5.9AI score0.09816EPSS
SaveIn wildExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/29 4:22 p.m.88 views

CVE-2026-20316 Cisco Secure Firewall Management Center Software Static Credential Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

5.3CVSS0.09816EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/07/29 4:00 p.m.12 views

Cisco Secure Firewall Management Center Software Static Credential Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

5.3CVSS5.9AI score0.09816EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/29 3:22 p.m.15 views

EUVD-2026-50373

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS6.2AI score0.00189EPSS
SaveExploits0References3
Rows per page
Query Builder