Lucene search
K

4589 matches found

Nuclei
Nuclei
added 16 hours ago26 views

Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. id: CVE-2023-29887 info: name: Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion author: ctflearner severity: high description: | A Local...

7.5CVSS7.5AI score0.62334EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/06/03 4:6 p.m.5 views

CVE-2026-20233

A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed. This vulnerability...

6.1CVSS6AI score0.00022EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/06/03 4:6 p.m.7 views

EUVD-2026-34135

A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed. This vulnerability...

6.1CVSS6AI score0.00022EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/08 12:31 a.m.19 views

EUVD-2026-28468

A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS6.4AI score0.00036EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/07 12:0 a.m.13 views

PT-2026-38598

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.2 Description An issue exists in the JSON Object Handler component where the manipulation of the condition argument in the '/sys/dict/loadTreeData' endpoint allows for remote SQL injection. SQL injection is a...

6.5CVSS6.6AI score0.00036EPSS
Exploits0References9
ATTACKERKB
ATTACKERKB
added 2026/05/02 6:15 a.m.2 views

CVE-2026-7605

A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.uploadImgByHttp/HttpFileToMultipartFileUtil.httpFileToMultipartFile/HttpFileToMultipartFileUtil.downloadImageData of the file CommonController.java of the component...

6.5CVSS6.3AI score0.00055EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.3 views

PT-2026-34014

A vulnerability has been found in WebSystems WebTOTUM 2026. This impacts an unknown function of the component Calendar. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading the affected...

5.1CVSS3.9AI score0.00036EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2026/04/16 12:0 a.m.8 views

Debian: Security Advisory (DSA-6213-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS5.8AI score0.00164EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2026/04/15 12:0 a.m.13 views

Debian: Security Advisory (DLA-4531-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.00641EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2026/04/15 12:0 a.m.1 views

Debian: Security Advisory (DSA-6211-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.8AI score0.00071EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2026/04/15 12:0 a.m.1 views

Debian: Security Advisory (DLA-4533-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7CVSS5.8AI score0.00037EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2026/04/14 12:0 a.m.2 views

Debian: Security Advisory (DLA-4530-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.00108EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.8 views

Debian: Security Advisory (DSA-6208-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.00044EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/10 1:45 a.m.4 views

EUVD-2026-21280

A vulnerability has been found in JeecgBoot up to 3.9.1. This impacts an unknown function of the component SysAnnouncementController. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor...

6.5CVSS6.1AI score0.00055EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2026/04/09 12:0 a.m.3 views

Debian: Security Advisory (DSA-6202-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.9AI score0.00071EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2026/04/09 12:0 a.m.3 views

Debian: Security Advisory (DLA-4524-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6AI score0.00059EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2026/04/09 12:0 a.m.3 views

Debian: Security Advisory (DSA-6203-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.9AI score0.00033EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2026/04/08 12:0 a.m.5 views

Debian: Security Advisory (DSA-6201-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.9AI score0.00141EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2026/04/06 12:0 a.m.2 views

Fedora: Security Advisory (FEDORA-2026-1e87d53608)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS5.9AI score0.00015EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2026/04/06 12:0 a.m.7 views

Fedora: Security Advisory (FEDORA-2026-0ff49872ae)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS5.9AI score0.00015EPSS
Exploits0References3
Rows per page
Query Builder