Lucene search
+L

24464 matches found

EUVD
EUVD
added 3 hours ago5 views

EUVD-2026-52572

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...

6.5CVSS6.2AI score
SaveExploits0References5
CVE
CVE
added 3 hours ago11 views

CVE-2026-18723

CVE-2026-18723 affects diaowen DWSurvey up to version 6.14.0. The vulnerability lies in an unknown function within /api/dwsurvey/app/survey/up-survey-status.do of the Survey Status Handler, leading to improper authorization. Exploitation could be remote (network vector) with low privileges requir...

6.5CVSS6.2AI score
SaveExploits0References5
Circl
Circl
added yesterday3 views

GHSA-M2H6-J472-RP4C

creationtimestamp| type| source ---|---|--- 2026-08-03 22:31:31+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f 2026-08-04 00:00:43+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f...

5.3AI score
SaveExploits0References1
EUVD
EUVD
added yesterday9 views

EUVD-2026-52267

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

9CVSS5.3AI score
SaveExploits0References5
CVE
CVE
added yesterday8 views

CVE-2026-18600

GL.iNet GL-MT3000 devices (firmware up to 4.4.5) are affected by a vulnerability in the Network Lua RPC Plugin, specifically in network.switch_info/network.switch_status in /usr/lib/oui-httpd/rpc/network. Manipulating the switch argument enables remote command injection. The exploit has been publ...

9CVSS7.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-18600

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

9CVSS7.1AI score
SaveExploits0References5Affected Software1
EUVD
EUVD
added yesterday8 views

EUVD-2026-52265

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

9.3CVSS6AI score
SaveExploits0References1
Circl
Circl
added yesterday5 views

CVE-2026-16300

creationtimestamp| type| source ---|---|--- 2026-08-03 09:02:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030756328811295 2026-08-03 16:50:31+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xecb7dh2i...

9.8CVSS5.3AI score0.00149EPSS
SaveExploits0References2
NVD
NVD
added yesterday8 views

CVE-2026-16563

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...

6.5CVSS0.00132EPSS
SaveExploits0References1
Circl
Circl
added yesterday7 views

CVE-2026-9593

creationtimestamp| type| source ---|---|--- 2026-08-03 06:30:53+00:00| seen| https://infosec.exchange/users/certvde/statuses/117030168375818784...

8.4CVSS5.3AI score0.00115EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday20 views

CVE-2026-16564 Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...

0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-52183

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...

6.5CVSS5.6AI score0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-52184

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...

4.3CVSS5.5AI score0.00132EPSS
SaveExploits0References1
OSV
OSV
added yesterday4 views

ROOT-OS-UBUNTU-2204-CVE-2026-53397 CVE-2026-53397 in rootio-linux - Patched by Root

Root has patched CVE-2026-53397 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

7.5CVSS5.4AI score0.00529EPSS
SaveExploits0
OSV
OSV
added yesterday6 views

ROOT-OS-UBUNTU-2204-CVE-2026-31421 CVE-2026-31421 in rootio-linux - Patched by Root

Root has patched CVE-2026-31421 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS6.2AI score0.0012EPSS
SaveExploits0
OSV
OSV
added yesterday6 views

ROOT-OS-UBUNTU-2204-CVE-2025-40342 CVE-2025-40342 in rootio-linux - Patched by Root

Root has patched CVE-2025-40342 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

8.8CVSS5.4AI score0.00325EPSS
SaveExploits0
OSV
OSV
added yesterday4 views

ROOT-OS-UBUNTU-2204-CVE-2025-37907 CVE-2025-37907 in rootio-linux - Patched by Root

Root has patched CVE-2025-37907 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS7.9AI score0.00124EPSS
SaveExploits0
OSV
OSV
added yesterday4 views

ROOT-OS-UBUNTU-2204-CVE-2024-53176 CVE-2024-53176 in rootio-linux - Patched by Root

Root has patched CVE-2024-53176 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

4.7CVSS6.9AI score0.00222EPSS
SaveExploits0
OSV
OSV
added yesterday3 views

ROOT-OS-UBUNTU-2204-CVE-2022-49971 CVE-2022-49971 in rootio-linux - Patched by Root

Root has patched CVE-2022-49971 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS8.2AI score0.00179EPSS
SaveExploits0
OSV
OSV
added yesterday6 views

ROOT-OS-UBUNTU-2204-CVE-2026-31664 CVE-2026-31664 in rootio-linux - Patched by Root

Root has patched CVE-2026-31664 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS5.8AI score0.0012EPSS
SaveExploits0
Rows per page
Query Builder