Lucene search
+L

489 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•7 views

CVE-2026-39563: Missing Authorization

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.12...

5.3CVSS5.9AI score0.00261EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/06 4:16 p.m.•22 views

CVE-2026-34208

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct assignment to global objects for example Math.random = ..., but this protection can be bypassed through an exposed callable constructor path: this.constructor.calltarget, attackerObject. Because this.constructo...

10CVSS0.00604EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2026/03/26 2:01 p.m.•28 views

WordPress Share This Image plugin <= 2.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Share This Image versions = 2.12...

5.3CVSS5.9AI score0.00261EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/03/25 12:30 p.m.•23 views

EUVD-2026-15363

In the Linux kernel, the following vulnerability has been resolved: blktrace: fix thiscpuread/write in preemptible context tracingrecordcmdline internally uses thiscpuread and thiscpuwrite on the per-CPU variable tracecmdlinesave, and tracesavecmdline explicitly asserts preemption is disabled via...

5.9AI score0.00119EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/03/25 10:27 a.m.•23 views

CVE-2026-23374 blktrace: fix __this_cpu_read/write in preemptible context

In the Linux kernel, the following vulnerability has been resolved: blktrace: fix thiscpuread/write in preemptible context tracingrecordcmdline internally uses thiscpuread and thiscpuwrite on the per-CPU variable tracecmdlinesave, and tracesavecmdline explicitly asserts preemption is disabled via...

5.9AI score0.00119EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-23374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blktrace: fix thiscpuread/write in preemptible context tracingrecordcmdline internally uses thiscpuread and thiscpuwrite on the per-CPU variable tracecmdlinesav...

5.5CVSS5.9AI score0.00119EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/24 4:01 p.m.•19 views

Malicious code in this-is-my-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72a917ddcec635fc210d8767a9c289b6d43128c589de76fe7c0548da33878d2 The package this-is-my-test-package was found to contain malicious code...

5.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2026/03/24 4:01 p.m.•16 views

MAL-2026-2393 Malicious code in this-is-my-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72a917ddcec635fc210d8767a9c289b6d43128c589de76fe7c0548da33878d2 The package this-is-my-test-package was found to contain malicious code...

5.8AI score
SaveExploits0
Snyk
Snyk
•added 2026/03/06 3:20 p.m.•10 views

Malicious Package

Overview @wgu-edu/wgu-icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 2:44 p.m.•12 views

Malicious Package

Overview es1int-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/12 6:19 a.m.•15 views

CVE-2026-2323

Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.6AI score0.0025EPSS
SaveExploits0References5
NVD
NVD
•added 2026/02/03 3:16 p.m.•35 views

CVE-2026-25010

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3CVSS0.00204EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/03 2:08 p.m.•8 views

CVE-2026-25010

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3AI score0.00204EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/03 2:08 p.m.•19 views

EUVD-2026-5255

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3CVSS5.3AI score0.00204EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/03 2:08 p.m.•8 views

CVE-2026-25010 WordPress Share This Image plugin <= 2.09 - Broken Access Control vulnerability

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3CVSS6AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/03 2:08 p.m.•36 views

CVE-2026-25010

CVE-2026-25010 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Share This Image (share-this-image) affecting version

5.3CVSS6AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/03 2:08 p.m.•46 views

CVE-2026-25010 WordPress Share This Image plugin <= 2.09 - Broken Access Control vulnerability

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3CVSS0.00204EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/02/03 7:39 a.m.•10 views

Malicious Package

Overview @uselagoon/ui-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/03 12:00 a.m.•20 views

WordPress plugin “Share This Image” has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.3CVSS5.8AI score0.00204EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•12 views

CVE-2026-25010: Missing Authorization

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3CVSS6AI score0.00204EPSS
SaveExploits0References1
Rows per page
Query Builder