Lucene search
+L

26967 matches found

NVD
NVD
added 1 hour ago7 views

CVE-2026-57310

Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker who obtain password hash to decode user credentials. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also...

6.3CVSS
Exploits0References2
EUVD
EUVD
added 2 hours ago4 views

EUVD-2026-45944

Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker who obtain password hash to decode user credentials. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also...

6.3CVSS5.4AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 8 hours ago4 views

CVE-2026-13142

The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a working attempt lockout on its passwordless email one-time-password verification, and stores the short numeric codes in plaintext, allowing an unauthenticated attacker who knows a...

5.5AI score
Exploits0References1
EUVD
EUVD
added 8 hours ago5 views

EUVD-2026-45884

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

5.5AI score
Exploits0References1
Nuclei
Nuclei
added 9 hours ago73 views

QSAN Storage Manager <3.3.3 - Cross-Site Scripting

QSAN Storage Manager before 3.3.3 contains a reflected cross-site scripting vulnerability. Header page parameters do not filter special characters. Remote attackers can inject JavaScript to access and modify specific data. id: CVE-2021-37216 info: name: QSAN Storage Manager 3.3.3 - Cross-Site...

6.1CVSS5.9AI score0.03186EPSS
Exploits0References4
Cvelist
Cvelist
added yesterday12 views

CVE-2026-64072 nvme: fix bio leak on mapping failure

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request...

Exploits0References3
Cvelist
Cvelist
added yesterday16 views

CVE-2026-64024 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

9.4CVSS
Exploits0References3
NVD
NVD
added yesterday8 views

CVE-2026-16218

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...

2.6CVSS0.002EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-16218

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...

2.6CVSS4AI score0.002EPSS
Exploits0References7Affected Software1
EUVD
EUVD
added yesterday9 views

EUVD-2026-45429

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...

2.6CVSS4AI score0.002EPSS
Exploits0References6
CVE
CVE
added yesterday12 views

CVE-2026-16218

Technical details for CVE-2026-16218 are not publicly available in the provided documents; no affected versions, root cause specifics, or remediation are disclosed here. Monitor for updates.

2.6CVSS4AI score0.002EPSS
Exploits0References6
Cvelist
Cvelist
added yesterday30 views

CVE-2026-16218 hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...

2.6CVSS0.002EPSS
Exploits0References6
NVD
NVD
added yesterday10 views

CVE-2026-16213

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS0.00081EPSS
Exploits0References6
EUVD
EUVD
added yesterday8 views

EUVD-2026-45424

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS4.3AI score0.00081EPSS
Exploits0References6
Cvelist
Cvelist
added yesterday26 views

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS0.00081EPSS
Exploits0References6
CVE
CVE
added yesterday8 views

CVE-2026-16213

Summary of vulnerability (CVE-2026-16213) : In Fantomas42 django-blog-zinnia (up to 0.20), a flaw affects an unknown function in the file zinnia/views/mixins/entry_protection.py (Protected Entry Password Handler). The manipulation leads to the cleartext storage of sensitive information . Exploita...

4.8CVSS4.3AI score0.00081EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added yesterday7 views

PT-2026-61047

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entry protection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS4.3AI score0.00081EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added yesterday5 views

PT-2026-61388

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme free host mem nvme free host mem frees dev-hmb sgt via dma free noncontiguous but never clears the pointer afterward. This leads to a use-after-free if nvme free host mem is called twice in th...

5.4AI score
Exploits0References4
Positive Technologies
Positive Technologies
added yesterday5 views

PT-2026-61337

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma vecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dma vec allocation was getting leaked on the completion...

5.3AI score
Exploits0References3
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-45395

Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...

6.8CVSS5.4AI score0.00144EPSS
Exploits0References3
Rows per page
Query Builder