Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.3 views

CVE-2026-26093

Improper Neutralization of Special Elements used in a Command 'Command Injection' in Owl opds 2.2.0.4 allows Command Injection via a crafted network request...

9.8CVSS5.5AI score0.00389EPSS
Exploits0References1
OSV
OSV
added 2026/02/20 5:25 p.m.0 views

CVE-2026-2333

Improper Neutralization of Special Elements used in a Command 'Command Injection' in Owl opds 2.2.0.4 allows Command Injection via a crafted network request...

9.8CVSS5.8AI score0.00293EPSS
Exploits0References1
OSV
OSV
added 2026/02/20 5:25 p.m.1 views

CVE-2026-26096

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

5.5CVSS5.8AI score0.00017EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 5:25 p.m.2 views

CVE-2026-26095

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS0.00017EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 5:25 p.m.4 views

CVE-2026-26100

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

6.8CVSS0.00017EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 5:25 p.m.2 views

CVE-2026-26093

Improper Neutralization of Special Elements used in a Command 'Command Injection' in Owl opds 2.2.0.4 allows Command Injection via a crafted network request...

9.8CVSS0.00389EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 4:56 p.m.19 views

CVE-2026-26102 Incorrect Permission Assignment for Critical Resource in Owl opds

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS0.00018EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 4:55 p.m.6 views

CVE-2026-26101

CVE-2026-26101 affects Owl opds 2.2.0.4 and is caused by an incorrect permission assignment that enables file manipulation via a crafted network request. The connected records confirm the vulnerability details but do not specify a vendor patch or remediation steps. No exploit details are provided...

8.5CVSS5.4AI score0.00018EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/20 4:52 p.m.1 views

CVE-2026-26096

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.4AI score0.00017EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/20 4:49 p.m.5 views

CVE-2026-26093

Improper Neutralization of Special Elements used in a Command 'Command Injection' in Owl opds 2.2.0.4 allows Command Injection via a crafted network request...

8.7CVSS5.4AI score0.00389EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.1 views

PT-2026-21260

Improper Neutralization of Special Elements used in a Command 'Command Injection' in Owl opds 2.2.0.4 allows Command Injection via a crafted network request...

9.2CVSS5.5AI score0.00293EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

Owl Cyber Defense OPDS 安全漏洞

Owl Cyber Defense OPDS is a network isolation device developed by Owl Cyber Defense Corporation in the United States. Version 2.2.0.4 of Owl Cyber Defense OPDS contains a security vulnerability, which stems from improper allocation of permissions for critical resources, potentially leading to fil...

8.5CVSS5.8AI score0.00017EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

Owl Cyber Defense OPDS 命令注入漏洞

Owl Cyber Defense OPDS is a network isolation device developed by Owl Cyber Defense Corporation. Version 2.2.0.4 of Owl Cyber Defense OPDS contains a command injection vulnerability. This vulnerability stems from improper handling of special elements within commands, which may lead to command...

9.8CVSS5.8AI score0.00389EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/28 12:29 p.m.3 views

EUVD-2020-30897

ForensiT AppX Management Service 2.2.0.4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

8.5CVSS6.2AI score0.00007EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/28 12:29 p.m.2 views

CVE-2020-36989 ForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe' Unquoted Service Path

ForensiT AppX Management Service 2.2.0.4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

8.5CVSS6.2AI score0.00007EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.2 views

PT-2026-5115

ForensiT AppX Management Service 2.2.0.4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

8.5CVSS6.2AI score0.00007EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/09 11:36 a.m.1 views

CVE-2021-41638

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...

7.5CVSS6.8AI score0.00382EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/28 12:0 a.m.16 views

MELAG FTP Server Authentication Error Vulnerability

MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to an authentication error, which stems from incomplete authentication checks. A remote attacker could exploit the vulnerability to access local files with a valid username...

7.5CVSS3.9AI score0.00382EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.2 views

MELAG FTP Server 安全漏洞

MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to a user enumeration vulnerability, which stems from the fact that the program presents different responses to users and non-users, and can be exploited by attackers to identify...

5.3CVSS5.5AI score0.00232EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.2 views

MELAG FTP Server 授权问题漏洞

MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to an authentication error, which stems from incomplete authentication checks. A remote attacker could exploit the vulnerability to access local files with a valid username...

7.5CVSS5.6AI score0.00382EPSS
Exploits1References2
Rows per page
Query Builder