Lucene search
+L

319540 matches found

Vulnrichment
Vulnrichment
•added 2026/06/04 2:22 p.m.•28 views

CVE-2026-5228 Improper Access Control in Kurt Software Studio's WriteUp Mobile App

Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WriteUp Mobile App: from 1.3.0 through 04062026...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/04 2:22 p.m.•38 views

EUVD-2026-34283

Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WriteUp Mobile App: from 1.3.0 through 04062026...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/04 7:28 a.m.•24 views

CVE-2026-50211 Exposed Factory Testing App Boundaries

Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers...

8.8CVSS5.8AI score0.00522EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/04 7:28 a.m.•19 views

CVE-2026-50211

Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers...

8.8CVSS5.8AI score0.00522EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/06/04 6:30 a.m.•12 views

OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image...

8.1CVSS5.8AI score0.0085EPSS
SaveExploits0References5Affected Software1
osv_bell
osv_bell
•added 2026/06/04 6:10 a.m.•26 views

BELL-CVE-2026-46248

Bulletin has no description...

5.5CVSS5.7AI score0.0016EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2026/06/04 6:10 a.m.•27 views

BELL-CVE-2026-46268

Bulletin has no description...

5.5CVSS5.7AI score0.0016EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2026/06/04 6:10 a.m.•30 views

BELL-CVE-2026-46271

Bulletin has no description...

7.8CVSS7.2AI score0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/04 5:23 a.m.•67 views

CVE-2026-49189 Broadcast Receiver Privilege Escalation

Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations...

8.5CVSS0.00144EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/06/04 2:23 a.m.•24 views

SUSE CVE-2026-45155

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.7 and 33.0.0 to before 33.0.1, a missing access check on API level allowed to add unknown circles by their ID directly to other circles. Since circle IDs have 62^15 complexity by...

2.6CVSS5.6AI score0.00306EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•28 views

Acer M6E security vulnerabilities

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability, which stems from legacy engineering designs and factory-level diagnostic software. This vulnerability may allow malicious applications to gain access to the...

9.8CVSS5.8AI score0.00522EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•48 views

PT-2026-46261

Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WriteUp Mobile App: from 1.3.0 through 04062026...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/04 12:00 a.m.•34 views

Linux Distros Unpatched Vulnerability : CVE-2026-42317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and 11.0.7, a technician can delete arbitrary...

7CVSS6AI score0.00422EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/04 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2025-41259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWUpdate before 2026.05 is affected by a time-of-check time-of-use TOCTOU race condition that allows local unprivileged attackers to escalate privileges to root...

7.3CVSS5.7AI score0.00101EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•55 views

PT-2026-46146

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations. A Broadcast...

8.5CVSS5.9AI score0.00144EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•8 views

CVE-2026-5228: Improper Access Control

Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WriteUp Mobile App: from 1.3.0 through 04062026...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2026/06/04 12:00 a.m.•62 views

Exploring the Connection between Coding Habits and Cognitive Styles in Malware Developers

Malware research primarily studies the results, the methods, and the impact. Even from an offensive security perspective, what is examined is the method, not the development strategy of the offender. This study investigates the behavioral signatures and coding patterns embedded in the malware...

5.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•29 views

Seagull BarTender code-related vulnerabilities

Seagull BarTender is an enterprise-level labeling, barcode, and RFID design and printing software developed by Seagull Corporation in the United States. Versions of Seagull BarTender from 2.1 to 12.1.1 contain code-related vulnerabilities. These vulnerabilities stem from insecure deserialization...

8.5CVSS6AI score0.00357EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•34 views

Gradio security vulnerabilities

Gradio is an open-source Python library developed by Google. It provides a user-friendly web interface for demonstrating machine learning models. Version 6.14.0 of Gradio contains a security vulnerability. This vulnerability stems from the use of a weak hash function in the saveaudiotocache...

2.5CVSS5.4AI score0.00106EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•28 views

Acer M6E security vulnerabilities

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability, which stems from failing to properly evaluate the command permissions of multiple internal opcodes. This vulnerability may allow unauthorized applications to...

9.4CVSS5.9AI score0.00808EPSS
SaveExploits0References1
Rows per page
Query Builder