Lucene search
+L

277466 matches found

Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.31 views

PT-2026-26067

When a plugin is installed using the Arturia Software Center MacOS, it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the file permissions 777, meaning it is writable by any user. When uninstalling a plugin via the Arturia Software Center the...

8.2CVSS5.9AI score0.00127EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.9 views

PT-2026-26105

CVE-2026-29858 A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion LFI, leadingot sensitive information exposure. https://t.co/WowAOqIOTR...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.22 views

PT-2026-26066

The "Privileged Helper" component of the Arturia Software Center MacOS does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege escalation...

7.8CVSS5.9AI score0.00122EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-32609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. The GHSA-gh4x fix commit 5d3de60 addressed unauthenticated configuration secrets exposure on th...

7.5CVSS7.4AI score0.00499EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/18 12:0 a.m.4 views

CVE-2025-67829

Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection...

5.8AI score0.0026EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.16 views

GLPI 授权问题漏洞

GLPI is an open-source IT and asset management software developed by GLPI. This software provides a comprehensive IT resource management interface, allowing you to create databases to manage various IT assets such as computers, monitors, servers, printers, network devices, telephones, and even...

6.5CVSS5.8AI score0.00292EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-1732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowe...

4.3CVSS5.5AI score0.00253EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.13 views

Arturia Software Center 安全漏洞

Arturia Software Center is an application developed by the French company Arturia, used for managing, installing, and updating music production software and plugins. There is a security vulnerability in Arturia Software Center, which stems from improper permission settings in the uninstall.sh...

8.2CVSS5.8AI score0.00127EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.16 views

Arturia Software Center 安全漏洞

The Arturia Software Center is an application developed by the French company Arturia, used for managing, installing, and updating music production software and plugins. The Arturia Software Center has a security vulnerability, which stems from insufficient client-side code signature verification...

7.8CVSS5.9AI score0.00122EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/03/17 11:16 p.m.38 views

CVE-2026-25937 GLPI has a MFA bypass

GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credentials can bypass MFA and steal their account. Version 11.0.6 fixes the issue...

6.5CVSS0.00292EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/17 11:16 p.m.12 views

CVE-2026-25937 GLPI has a MFA bypass

GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credentials can bypass MFA and steal their account. Version 11.0.6 fixes the issue...

6.5CVSS5.9AI score
SaveExploits0References3
OSV
OSV
added 2026/03/17 8:16 p.m.8 views

UBUNTU-CVE-2026-25936

GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, an authenticated user can perfom a SQL injection. Version 11.0.6 fixes the issue...

8.8CVSS5.9AI score0.00339EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/03/17 12:43 p.m.163 views

aicerberus

AICerberus 🐺 AI supply chain security scanner — one comma...

6.2AI score
SaveExploits0
EUVD
EUVD
added 2026/03/17 9:31 a.m.9 views

EUVD-2026-12547

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.0045EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/17 8:15 a.m.9 views

CVE-2026-4312

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS0.0045EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/17 7:29 a.m.8 views

CVE-2026-4312

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.0045EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/03/17 7:29 a.m.43 views

CVE-2026-4312 DrangSoft|GCB/FCB Audit Software - Missing Authentication

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS0.0045EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/17 7:29 a.m.30 views

CVE-2026-4312

Affected product: DrangSoft GCB/FCB Audit Software. Vulnerability: Missing Authentication, enabling unauthenticated remote attackers to directly access APIs and create a new administrative account. Impact/risks: High impact on confidentiality, integrity, and availability as per CVSS metrics (CRIT...

9.8CVSS5.9AI score0.0045EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/17 7:29 a.m.8 views

CVE-2026-4312 DrangSoft|GCB/FCB Audit Software - Missing Authentication

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.0045EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/03/17 2:12 a.m.19 views

[SECURITY] Fedora 42 Update: mingw-openexr-3.3.8-1.fc42

MinGW Windows openexr library...

8.4CVSS5.8AI score0.00523EPSS
SaveExploits3
Rows per page
Query Builder