Lucene search
+L

30352 matches found

NVD
NVD
added 1 hour ago5 views

CVE-2026-48145

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.2CVSS
SaveExploits0References3
CVE
CVE
added 2 hours ago14 views

CVE-2026-48144

Apache Thrift c_glib bindings are affected by an improper validation of certificate hostnames (host mismatch) leading to a potential TLS trust issue. The issue affects Thrift before 0.24.0 and is rated CRITICAL (CVSS 4.0: AV:N/AC:H/PR:N/UI:N/S:S/VC:H/VI:H/VA:N) with high impact on confidentiality...

9.1CVSS5.8AI score
SaveExploits0References3
Nuclei
Nuclei
added 9 hours ago30 views

CKAN DataStore SQL Search - SQL Injection

CKAN, an open-source data management system used for powering open data portals, contains an unauthenticated SQL injection vulnerability in the datastoresearchsql API endpoint. id: CVE-2026-42031 info: name: CKAN DataStore SQL Search - SQL Injection author: theamanrawat severity: high description...

9.8CVSS5.9AI score0.01817EPSS
SaveExploits0References2
Nuclei
Nuclei
added 9 hours ago58 views

Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload

Amasty Order Attributes for Magento 2 4.0.0 contains an unrestricted file upload vulnerability caused by lack of authentication and validation in the upload endpoint, letting unauthenticated attackers upload arbitrary files including PHP, enabling remote code execution or malware hosting. id:...

9.8CVSS6.6AI score0.05216EPSS
SaveExploits0References3
Nuclei
Nuclei
added 9 hours ago25 views

Flowise - NVIDIA NIM Endpoints Missing Authentication

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router /api/v1/nvidia-nim/ is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generati...

9.8CVSS5.8AI score0.3625EPSS
SaveExploits2References3
Nuclei
Nuclei
added 9 hours ago19 views

HT Mega < 3.0.7 - Sensitive Information Disclosure

The HT Mega plugin for WordPress is vulnerable to Sensitive Information Exposure via AJAX actions. This template dynamically extracts the security nonce before exploitation. id: CVE-2026-4106 info: name: HT Mega 3.0.7 - Sensitive Information Disclosure author: EFETR severity: high description: |...

5.3CVSS5.8AI score0.00742EPSS
SaveExploits1References2
Nuclei
Nuclei
added 9 hours ago25 views

Webnus Inc. Modern Events Calendar - Broken Access Control

Webnus Inc. Modern Events Calendar = 7.29.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers bypass authorization, exploit requires no special privileges. id: CVE-2026-32583 info: name: Webnus Inc. Modern Events...

5.3CVSS5.8AI score0.007EPSS
SaveExploits0References1
Nuclei
Nuclei
added 9 hours ago47 views

WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation

User Registration & Membership WordPress plugin = 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts id: CVE-2026-1492 info: name: WordPres...

9.8CVSS7.4AI score0.25532EPSS
SaveExploits2References3
Nuclei
Nuclei
added 9 hours ago31 views

Mailcow < 2026-03b - Href Link Injection

mailcow 2026-03b reflects raw REQUESTURI into JavaScript and href links on the login page, allowing attackers to inject parameters that break JS logic and enable phishing. id: CVE-2026-40878 info: name: Mailcow 2026-03b - Href Link Injection author: ritikchaddha severity: low description: | mailc...

2.1CVSS5.9AI score0.00805EPSS
SaveExploits0References3
Nuclei
Nuclei
added 9 hours ago6 views

W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read

W3 Total Cache WordPress plugin = 2.9.4 contains a directory traversal caused by improper handling in setupSources function, letting unauthenticated attackers read arbitrary files, exploit requires manual minify mode enabled with specific filename. id: CVE-2026-9282 info: name: W3 Total Cache =...

7.5CVSS5.9AI score0.02773EPSS
SaveExploits0References3
Nuclei
Nuclei
added 9 hours ago15 views

Apache Tomcat - Cross-Site Scripting

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

6.1CVSS5.9AI score0.04249EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 10 hours ago5 views

Important: Red Hat Security Advisory: grafana security, bug fix, and enhancement update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

6.5CVSS5.9AI score0.00295EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 11 hours ago7 views

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

7.5CVSS7.1AI score0.00598EPSS
SaveExploits0References2
Circl
Circl
added yesterday9 views

CVE-2026-57989

creationtimestamp| type| source ---|---|--- 2026-07-26 19:23:25+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrl473fzck2v 2026-07-26 20:32:33+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla2pxgvp2d 2026-07-27 04:45:16+00:00| seen|...

7.4CVSS5.8AI score
SaveExploits0References3
Circl
Circl
added yesterday6 views

CVE-2026-57978

creationtimestamp| type| source ---|---|--- 2026-07-26 17:55:26+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987561675416708 2026-07-26 20:34:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla5gqeqn2e 2026-07-27 04:45:14+00:00| seen|...

5.4CVSS5.8AI score
SaveExploits0References4
Circl
Circl
added yesterday6 views

CVE-2026-64520

creationtimestamp| type| source ---|---|--- 2026-07-26 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987456179389325...

8.4CVSS5.8AI score0.00155EPSS
SaveExploits0References1
Circl
Circl
added yesterday6 views

CVE-2026-64522

creationtimestamp| type| source ---|---|--- 2026-07-26 17:15:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987404024660419...

8.8CVSS5.8AI score0.00166EPSS
SaveExploits0References1
Circl
Circl
added yesterday7 views

CVE-2026-17496

creationtimestamp| type| source ---|---|--- 2026-07-26 16:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrkqtkdipa23 2026-07-26 16:10:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrkrg43gaz2y 2026-07-26 17:00:19+00:00| seen|...

8.1CVSS5.8AI score
SaveExploits0References5
Circl
Circl
added yesterday10 views

CVE-2026-17458

creationtimestamp| type| source ---|---|--- 2026-07-26 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116986165685626877 2026-07-26 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrkdgz7ndm2i 2026-07-26 17:27:08+00:00| seen|...

6.5CVSS6.6AI score
SaveExploits0References3
Circl
Circl
added yesterday11 views

CVE-2026-17459

creationtimestamp| type| source ---|---|--- 2026-07-26 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116985811828078268 2026-07-26 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrk6g3xnyj2n 2026-07-26 17:25:36+00:00| seen|...

5.3CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder