Lucene search
+L

7 matches found

Vulnrichment
Vulnrichment
added 6 days ago7 views

CVE-2026-44227 RT: Reflected Cross-Site Scripting via URL parameters

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...

6.1CVSS5.6AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/17 8:11 p.m.47 views

CVE-2026-44974

CVE-2026-44974 affects the @hapi/content header parser. Before v6.0.2, Content.disposition() kept the last value for duplicate parameters while Content.type() kept the first for duplicate charset/boundary parameters, creating a parameter-smuggling primitive when duplicates are resolved inconsiste...

7.7CVSS5.2AI score0.00344EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/22 9:12 p.m.15 views

EUVD-2026-31506

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 through 6.0.2 contain a Cross-Site Request Forgery CSRF vulnerability. An attacker who can induce a logged-in RT user to visit a malicious web page can trigger arbitrary state-changing actions in RT on that...

7.1CVSS5.9AI score0.00117EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/04 8:25 a.m.23 views

CVE-2025-14461

The CVE describes unauthenticated order-status manipulation in the Xendit Payment plugin for WordPress (WooCommerce integration). Versions up to and including 6.0.2 expose a publicly accessible API callback endpoint (wc_xendit_callback) that processes payment callbacks without authenticating orig...

5.3CVSS5.3AI score0.00345EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/17 12:23 a.m.16 views

CVE-2025-14237

Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02 a...

9.8CVSS7.8AI score0.00899EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:9 a.m.6 views

CVE-2023-25967

Cross-Site Request Forgery CSRF vulnerability in PeepSo Community by PeepSo plugin = 6.0.2.0 versions...

8.8CVSS8.9AI score0.00256EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:0 a.m.23 views

Oracle Virtualization VM VirtualBox Unauthorized Operation Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS8.4AI score0.00379EPSS
SaveExploits0
Rows per page
Query Builder