Lucene search
+L

447 matches found

Cvelist
Cvelist
•added 2026/04/13 12:00 a.m.•47 views

CVE-2025-69627

Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc. During execution, an internal XID object is allocated and then freed prematurely, after which the freed pointer is still passed into UI and logging helper...

0.00199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/13 12:00 a.m.•7 views

CVE-2025-69627

Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc. During execution, an internal XID object is allocated and then freed prematurely, after which the freed pointer is still passed into UI and logging helper...

5.8AI score0.00199EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/10 7:23 p.m.•15 views

CVE-2026-39563

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.12...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 9:31 a.m.•16 views

EUVD-2026-20207

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.12...

5.9AI score0.00261EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/08 8:30 a.m.•9 views

CVE-2026-39563 WordPress Share This Image plugin <= 2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.12...

5.8AI score0.00261EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/08 8:30 a.m.•9 views

CVE-2026-39563

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.12...

5.9AI score0.00261EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/08 8:30 a.m.•25 views

CVE-2026-39563

CVE-2026-39563 affects the WordPress Share This Image plugin (versions

5.3CVSS5.9AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/08 8:30 a.m.•36 views

CVE-2026-39563 WordPress Share This Image plugin <= 2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.12...

5.3CVSS0.00261EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•16 views

WordPress plugin Share This Image 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•21 views

PT-2026-31154

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.12...

5.3CVSS5.9AI score0.00261EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•0 views

CVE-2026-39563: Missing Authorization

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.12...

5.3CVSS5.9AI score0.00261EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/06 4:16 p.m.•13 views

CVE-2026-34208

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct assignment to global objects for example Math.random = ..., but this protection can be bypassed through an exposed callable constructor path: this.constructor.calltarget, attackerObject. Because this.constructo...

10CVSS0.00604EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2026/03/26 2:01 p.m.•22 views

WordPress Share This Image plugin <= 2.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Share This Image versions = 2.12...

5.3CVSS5.9AI score0.00261EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/03/25 12:30 p.m.•16 views

EUVD-2026-15363

In the Linux kernel, the following vulnerability has been resolved: blktrace: fix thiscpuread/write in preemptible context tracingrecordcmdline internally uses thiscpuread and thiscpuwrite on the per-CPU variable tracecmdlinesave, and tracesavecmdline explicitly asserts preemption is disabled via...

5.8AI score0.00119EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/25 10:27 a.m.•14 views

CVE-2026-23374 blktrace: fix __this_cpu_read/write in preemptible context

In the Linux kernel, the following vulnerability has been resolved: blktrace: fix thiscpuread/write in preemptible context tracingrecordcmdline internally uses thiscpuread and thiscpuwrite on the per-CPU variable tracecmdlinesave, and tracesavecmdline explicitly asserts preemption is disabled via...

5.8AI score
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-23374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blktrace: fix thiscpuread/write in preemptible context tracingrecordcmdline internally uses thiscpuread and thiscpuwrite on the per-CPU variable tracecmdlinesav...

5.5CVSS6AI score0.00119EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/24 4:01 p.m.•17 views

Malicious code in this-is-my-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72a917ddcec635fc210d8767a9c289b6d43128c589de76fe7c0548da33878d2 The package this-is-my-test-package was found to contain malicious code...

5.9AI score
SaveExploits0
OSV
OSV
•added 2026/03/24 4:01 p.m.•15 views

MAL-2026-2393 Malicious code in this-is-my-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72a917ddcec635fc210d8767a9c289b6d43128c589de76fe7c0548da33878d2 The package this-is-my-test-package was found to contain malicious code...

5.8AI score
SaveExploits0
Snyk
Snyk
•added 2026/03/06 3:20 p.m.•5 views

Malicious Package

Overview @wgu-edu/wgu-icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 2:44 p.m.•9 views

Malicious Package

Overview es1int-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
Rows per page
Query Builder