Lucene search
+L

30477 matches found

Positive Technologies
Positive Technologies
added 2026/03/23 12:00 a.m.14 views

PT-2026-27184

Name of the Vulnerable Software and Affected Versions AVideo versions up to and including 26.0 Description AVideo is an open source video platform. The remindMe.json.php endpoint passes the $ REQUEST'live schedule id' variable through multiple functions without proper sanitization. This ultimatel...

8.8CVSS5.9AI score0.00347EPSS
SaveExploits1References6
Packet Storm News
Packet Storm News
added 2026/03/23 12:00 a.m.11 views

DNS Rebinding Detection Sensor

This Python script implements a lightweight DNS Rebinding detection sensor designed to identify suspicious DNS resolution behavior in real time...

5.8AI score
SaveExploits0
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.15 views

WordPress plugin WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS5.9AI score0.00444EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.16 views

Rails 安全漏洞

Rails is an open-source web application framework based on the Ruby language, developed by the Rails team in the United States. Vulnerabilities exist in versions of Rails prior to 8.1.2.1, 8.0.4.1, and 7.2.3.1. These vulnerabilities stem from a problem with regular expressions that involves...

6.9CVSS5.8AI score0.00498EPSS
SaveExploits0References8
RubySec
RubySec
added 2026/03/23 12:00 a.m.29 views

Rails Active Support has a possible ReDoS vulnerability in number_to_delimited

Impact NumberToDelimitedConverter used a regular expression with gsub! to insert thousands delimiters. This could produce quadratic time complexity on long digit strings. Releases The fixed releases are available at the normal locations...

6.9CVSS5.7AI score0.00498EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/22 11:24 p.m.5 views

CVE-2026-2580 WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter

The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 4.9.1 due to insufficient escaping on the user supplied parameter and lack of...

7.5CVSS5.9AI score0.00444EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/22 11:24 p.m.3 views

CVE-2026-2580

The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 4.9.1 due to insufficient escaping on the user supplied parameter and lack of...

7.5CVSS5.9AI score0.00444EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/03/22 11:24 p.m.40 views

CVE-2026-2580 WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter

The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 4.9.1 due to insufficient escaping on the user supplied parameter and lack of...

7.5CVSS0.00444EPSS
SaveExploits0References4
CVE
CVE
added 2026/03/22 11:24 p.m.26 views

CVE-2026-2580

The CVE-2026-2580 entry concerns the WP Maps – Store Locator, Google Maps, OpenStreetMap, Mapbox, Listing, Directory & Filters WordPress plugin (up to v4.9.1). The root cause is insufficient escaping and insufficient preparation of an SQL query, enabling time-based SQL Injection via the ‘orderby’...

7.5CVSS5.9AI score0.00444EPSS
SaveExploits0References4
Circl
Circl
added 2026/03/22 4:01 a.m.15 views

CVE-2026-4450

creationtimestamp| type| source ---|---|--- 2026-03-22 04:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmnx6b7fh2s 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260324...

8.8CVSS5.7AI score0.00281EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/22 3:30 a.m.11 views

EUVD-2026-14269

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2CVSS5.8AI score0.00135EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/22 3:16 a.m.7 views

DEBIAN-CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS5.3AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/22 3:16 a.m.11 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS0.00135EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/03/22 3:16 a.m.22 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS5.9AI score0.00135EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/22 3:16 a.m.9 views

UBUNTU-CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS5.8AI score0.00135EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/22 2:16 a.m.3 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2CVSS5.8AI score0.00135EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/03/22 2:16 a.m.42 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2CVSS0.00135EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/22 2:16 a.m.4 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/03/22 2:16 a.m.13 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS5.3AI score0.00135EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/03/22 12:00 a.m.27 views

SOGo 安全漏洞

SOGo is a highly fast and scalable modern collaboration suite open source by Alinto. It offers calendar management, address book management, a fully functional webmail client, as well as features for resource sharing and permission handling. Versions of SOGo prior to 5.12.5 contained security...

2.6CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Rows per page
Query Builder