Lucene search
+L

143805 matches found

Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•28 views

PT-2026-42805

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/05/22 12:00 a.m.•22 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/05/22 12:00 a.m.•38 views

CVE-2026-36228

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

0.00479EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/05/22 12:00 a.m.•29 views

EUVD-2026-31474

Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component...

6.1CVSS5.8AI score0.00302EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•7 views

CVE-2025-32746: Insecure Storage of Sensitive Information

Dell PowerFlex Manager, versions =4.6.2, contains an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information...

5.5CVSS6.1AI score0.00103EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/22 12:00 a.m.•17 views

CVE-2026-36228

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

6.6AI score0.00479EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•26 views

PT-2026-42769

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 4.6.3 Description Insecure storage of sensitive information allows a low privileged attacker with local access to potentially gain unauthorized access to sensitive data. Recommendations Update to a...

5.5CVSS5.8AI score0.00102EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•41 views

Ubiquiti UniFi OS Server security vulnerabilities

The Ubiquiti UniFi OS Server is a server platform developed by the Ubiquiti company, designed for managing UniFi networks and security devices. The Ubiquiti UniFi OS Server has a security vulnerability that stems from path traversal attacks. This vulnerability may allow malicious actors with...

7.7CVSS7.2AI score0.00592EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•46 views

Dell PowerFlex Manager security vulnerabilities

Dell PowerFlex Manager is a software-defined infrastructure deployment and lifecycle management platform developed by the American company Dell. Versions of Dell PowerFlex Manager prior to 4.6.2 contain security vulnerabilities. These vulnerabilities stem from the exposure of directory list...

7.5CVSS7.2AI score0.00127EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•29 views

Dell PowerFlex Manager security vulnerabilities

Dell PowerFlex Manager is a product of the American company Dell. Versions of Dell PowerFlex Manager prior to 4.6.2 contained security vulnerabilities. These vulnerabilities stemmed from the insecure storage of sensitive information, which could allow unauthenticated attackers with local access t...

5.5CVSS5.9AI score0.00103EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•29 views

PT-2026-42762

Name of the Vulnerable Software and Affected Versions Avantra versions prior to 25.3.0 Description An issue in syslink software AG Avantra on Linux and Windows allows the insertion of sensitive information into log files, leading to Resource Leak Exposure, which occurs when a system fails to...

7.5CVSS5.8AI score0.00414EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•11 views

CVE-2026-36226: Undefined Security Weakness

Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component...

6.1CVSS5.9AI score0.00302EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/05/22 12:00 a.m.•35 views

EUVD-2026-31472

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/05/22 12:00 a.m.•18 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.6AI score0.01112EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/05/22 12:00 a.m.•41 views

EUVD-2026-31473

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•10 views

CVE-2026-7636: Exposure of Sensitive Information to an Unauthorized Actor

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the mapmetacap. This makes it possible for authenticated attackers, with subscriber-level access and above, to extra...

4.3CVSS5.7AI score0.00422EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•8 views

CVE-2025-32751: Insecure Storage of Sensitive Information

Dell PowerFlex Manager, versions =4.6.2, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information...

5.5CVSS6.1AI score0.00102EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•9 views

CVE-2026-8477: Improper Enforcement of Behavioral Workflow

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access to a sealed entry to retrieve its sensitive data without triggering the unseal audit notification via a crafted API request. This issue...

2.7CVSS5.8AI score0.00297EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/22 12:00 a.m.•64 views

CVE-2026-36228

The Easy Chat Server 3.1 software contains a buffer overflow vulnerability in the chat message functionality. A remote attacker can cause the service to terminate unexpectedly (Denial of Service) by submitting a chat message request with an oversized payload in the mtowho recipient field at the /...

7.3CVSS6.6AI score0.00479EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/05/22 12:00 a.m.•34 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

0.01112EPSS
SaveExploits1References1
Rows per page
Query Builder