Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

32 matches found

RedHat Linux
RedHat Linux•added 2026/06/25 8:18 a.m.•64 views

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

10CVSS6.6AI score0.01625EPSS
SaveExploits2References13
RedHat Linux
RedHat Linux•added 2026/06/17 12:57 p.m.•36 views

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

9.8CVSS6.6AI score0.01625EPSS
SaveExploits1References12
CNNVD
CNNVD•added 2026/06/08 12:00 a.m.•28 views

Mobile Verification Toolkit 路径遍历漏洞

The Mobile Verification Toolkit is an open-source mobile device forensics analysis tool developed by MVT. Versions of the Mobile Verification Toolkit prior to version 2026.5.12 contained a path traversal vulnerability. This vulnerability stemmed from file identifiers that were not cleared during...

5.3CVSS5.3AI score0.00515EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/05/29 12:00 a.m.•0 views

CVE-2026-49201: Use of Hard-coded Credentials

The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key. This allows an attacker to decrypt, modify, and re-encrypt system backups, facilitating persistent backdoor injection...

10CVSS5.8AI score0.00311EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE•added 2026/03/10 2:08 p.m.•16 views

CVE-2025-41765

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not limited to, contact images, HTTPS certificates, system backups for restoration, server peer configurations, and...

9.1CVSS5.9AI score0.00265EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux•added 2026/03/10 10:02 a.m.•13 views

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

10CVSS6.6AI score0.02326EPSS
SaveExploits2References5
EUVD
EUVD•added 2026/03/09 9:30 a.m.•11 views

EUVD-2025-208372

A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/03/09 9:30 a.m.•15 views

EUVD-2025-208377

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not limited to, contact images, HTTPS certificates, system backups for restoration, server peer configurations, and...

9.1CVSS5.9AI score0.00265EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/03/09 9:30 a.m.•11 views

EUVD-2025-208373

A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References2
OSV
OSV•added 2026/03/09 9:16 a.m.•14 views

CVE-2025-41763

A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files...

6.5CVSS5.9AI score0.00241EPSS
SaveExploits0References1
NVD
NVD•added 2026/03/09 9:16 a.m.•14 views

CVE-2025-41765

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not limited to, contact images, HTTPS certificates, system backups for restoration, server peer configurations, and...

9.1CVSS0.00265EPSS
SaveExploits0References1
CVE
CVE•added 2026/03/09 8:17 a.m.•33 views

CVE-2025-41765

The CVE-2025-41765 issue centers on an unchecked authorization enforcement in the wwwupload.cgi endpoint, enabling an unauthorized remote attacker to upload and apply arbitrary data. The known impact includes the ability to introduce contact images, HTTPS certificates, system backups for restorat...

9.1CVSS6.1AI score0.00265EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb•added 2026/03/09 8:17 a.m.•7 views

CVE-2025-41765

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not limited to, contact images, HTTPS certificates, system backups for restoration, server peer configurations, and...

9.1CVSS5.9AI score0.00265EPSS
SaveExploits0References2
CVE
CVE•added 2026/03/09 8:17 a.m.•31 views

CVE-2025-41763

CVE-2025-41763 : A low-privilege remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files. The entry provides CVSS 3.1 impact vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) with...

6.5CVSS5.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb•added 2026/03/09 8:17 a.m.•4 views

CVE-2025-41763

A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes•added 2026/03/09 5:57 a.m.•29 views

Improper file access permission settings in multiple Digital Arts products

Overview Multiple products provided by Digital Arts Inc. contains the following vulnerability. Incorrect default permissions CWE-276 - CVE-2026-28267 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

6.8CVSS6.2AI score0.00153EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/03/09 12:00 a.m.•1 views

CVE-2025-41763: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/03/05 12:00 a.m.•20 views

Nginx UI 安全漏洞

Nginx UI is a web interface for Nginx developed by Jacky. Versions of Nginx UI prior to 2.3.3 contained security vulnerabilities. These vulnerabilities stemmed from the /api/backup endpoint, which allowed access without authentication, thereby exposing encrypted keys. This could enable unverified...

9.8CVSS7.7AI score0.01014EPSS
SaveExploits14References1
RedHat Linux
RedHat Linux•added 2026/02/18 2:15 p.m.•14 views

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

7.5CVSS6.8AI score0.00564EPSS
SaveExploits3References5
RedHat Linux
RedHat Linux•added 2026/02/09 2:20 p.m.•22 views

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

7.8CVSS6.8AI score0.00564EPSS
SaveExploits4References6
Rows per page
Query Builder