Lucene search
K

6 matches found

CNNVD
CNNVD
added 2026/03/09 12:0 a.m.4 views

Budibase 安全漏洞

Budibase is an open-source low-code platform developed by Budibase in the UK. It allows for the creation of internal applications, workflows, and management panels within minutes. Budibase versions 3.24.0 and earlier contained security vulnerabilities. These vulnerabilities stemmed from file...

9CVSS5.9AI score0.00264EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/20 1:0 a.m.6 views

CVE-2026-26980

Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed in version 6.19.1...

9.4CVSS5.7AI score0.1648EPSS
Exploits6References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/20 1:0 a.m.3 views

CVE-2026-26980 Ghost has a SQL Injection in its Content API

Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed in version 6.19.1...

9.4CVSS5.7AI score0.1648EPSS
Exploits6References3
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.5 views

Ghost SQL注入漏洞

Ghost is a hosting service developed by the Ghost open-source project. Versions of Ghost from 3.24.0 to 6.19.0 have SQL injection vulnerabilities. These vulnerabilities stem from unvalidated code, which may allow unauthorized attackers to execute arbitrary reads from the database...

9.4CVSS6.3AI score0.1648EPSS
Exploits6References4
OSV
OSV
added 2026/02/18 9:50 p.m.3 views

GHSA-W52V-V783-GW97 Ghost has a SQL injection in Content API

Impact A SQL injection vulnerability existed in Ghost's Content API that allowed unauthenticated attackers to read arbitrary data from the database. Vulnerable Versions This vulnerability is present in Ghost v3.24.0 to v6.19.0. Patches v6.19.1 contains a fix for this issue. Note: as this...

9.4CVSS6.2AI score0.1648EPSS
Exploits6References6
Positive Technologies
Positive Technologies
added 2025/01/21 12:0 a.m.3 views

PT-2025-3164 · Cfengine · Cfengine Enterprise Mission Portal

Name of the Vulnerable Software and Affected Versions: CFEngine Enterprise Mission Portal versions 3.21.5 and below CFEngine Enterprise Mission Portal version 3.24.0 Description: The issue allows for XSS. The estimated number of potentially affected devices worldwide is not available. There is no...

4.8CVSS7AI score0.00353EPSS
Exploits0References4
Rows per page
Query Builder