Lucene search
+L

63624 matches found

CVE
CVE
added 2026/07/17 2:31 a.m.30 views

CVE-2026-15160

Summary of CVE-2026-15160 : The Ninja Forms - Excel Export plugin for WordPress is vulnerable to a directory traversal flaw in all versions up to and including 3.3.6, exploitable via the spreadsheet_export_tmp_name parameter. This vulnerability allows an authenticated user with subscriber-level a...

4.3CVSS6.2AI score0.00459EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/17 2:31 a.m.45 views

CVE-2026-15160 Ninja Forms - Excel Export <= 3.3.6 - Missing Authorization to Authenticated (Subscriber+) XLS Write via Path Traversal

The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.6 via the 'spreadsheetexporttmpname' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to write .xls/.xlsx files ...

4.3CVSS0.00459EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/17 2:18 a.m.12 views

CVE-2026-62231

The Grav API plugin getgrav/grav-plugin-api before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ApiKeyAuthenticator class never reads or enforces these scopes. It loads and returns the owning user's full account object, so a key created...

8.6CVSS0.00221EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/17 12:32 a.m.18 views

EUVD-2026-45068

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is associated with program files https://github.Com/bcgit/bc-lts-java/blob/main/nativec/arm/sha/shake.C,...

5.6CVSS6.1AI score0.001EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/17 12:7 a.m.6 views

CVE-2026-62234 Grav < 2.0.4 SSRF via Unrestricted cURL Protocols

Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks with file://, dict://, or gopher:// URLs. Attackers can trigger webhook events to read local files, access process information, or pivot to...

8.4CVSS5.3AI score0.00297EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/17 12:7 a.m.9 views

CVE-2026-62234

Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks with file://, dict://, or gopher:// URLs. Attackers can trigger webhook events to read local files, access process information, or pivot to...

8.4CVSS6.1AI score0.00297EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/17 12:7 a.m.13 views

EUVD-2026-45080

Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks with file://, dict://, or gopher:// URLs. Attackers can trigger webhook events to read local files, access process information, or pivot to...

8.4CVSS6.1AI score0.00297EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/17 12:7 a.m.43 views

CVE-2026-62231 Grav < 1.0.6 API Key Scope Bypass via ApiKeyAuthenticator

The Grav API plugin getgrav/grav-plugin-api before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ApiKeyAuthenticator class never reads or enforces these scopes. It loads and returns the owning user's full account object, so a key created...

8.6CVSS0.00221EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/17 12:7 a.m.6 views

CVE-2026-62231 Grav < 1.0.6 API Key Scope Bypass via ApiKeyAuthenticator

The Grav API plugin getgrav/grav-plugin-api before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ApiKeyAuthenticator class never reads or enforces these scopes. It loads and returns the owning user's full account object, so a key created...

8.6CVSS5.4AI score
SaveExploits0References5
EUVD
EUVD
added 2026/07/17 12:7 a.m.11 views

EUVD-2026-45119

The Grav API plugin getgrav/grav-plugin-api before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ApiKeyAuthenticator class never reads or enforces these scopes. It loads and returns the owning user's full account object, so a key created...

8.6CVSS6.1AI score0.00221EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/17 12:7 a.m.13 views

CVE-2026-62231

The Grav API plugin (getgrav/grav-plugin-api) prior to version 1.0.6 has an authorization bypass in ApiKeyAuthenticator: API keys with restricted scopes are ignored, and the API key resolves to the owning user’s full account, allowing a key with limited scopes (e.g., read-only) to perform any ope...

8.6CVSS6.1AI score0.00221EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/17 12:0 a.m.16 views

Oracle Linux 10 : dnsmasq (ELSA-2026-19158)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19158 advisory. - Prevent overflow in extractname function CVE-2026-2291 - Prevent DoS in DNSSEC validation CVE-2026-4890 - Prevent out-of-bounds read in DNSSEC...

8.8CVSS5.9AI score0.07237EPSS
SaveExploits4References7
BDU FSTEC
BDU FSTEC
added 2026/07/17 12:0 a.m.4 views

The vulnerability of the urb_write_completion() function in the RDP client FreeRDP allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the urbwritecompletion function in the RDP client FreeRDP relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

7.8CVSS7.7AI score0.00467EPSS
SaveExploits0References5Affected Software3
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.15 views

PT-2026-60644

Name of the Vulnerable Software and Affected Versions Grav versions prior to 2.0.4 Description Authenticated users with api.webhooks.write permission can create webhooks using unrestricted cURL protocols such as file://, dict://, or gopher://. This allows attackers to trigger webhook events to re...

8.4CVSS5.9AI score0.00297EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/16 10:17 p.m.4 views

CVE-2026-15997 Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded state

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is associated with program files https://github.Com/bcgit/bc-lts-java/blob/main/nativec/arm/sha/shake.C,...

5.6CVSS5.3AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/16 9:59 p.m.7 views

kernel: XFS data corruption using reflink

A flaw was found in the XFS filesystem. A race condition in the copy-on-write mechanism for reflinked files can cause writes to bypass the copy-on-write process and modify shared data blocks directly. As a result, data intended for a private copy may be written to the original shared location,...

7.8CVSS5.7AI score0.00507EPSS
SaveExploits6References5
RedHat Linux
RedHat Linux
added 2026/07/16 9:55 p.m.47 views

kernel: XFS data corruption using reflink

A flaw was found in the XFS filesystem. A race condition in the copy-on-write mechanism for reflinked files can cause writes to bypass the copy-on-write process and modify shared data blocks directly. As a result, data intended for a private copy may be written to the original shared location,...

7.8CVSS5.7AI score0.00507EPSS
SaveExploits6References5
OSV
OSV
added 2026/07/16 8:20 p.m.22 views

GHSA-X8MG-6R4P-87PF ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization

About 14 HTTP handlers resolve the database path param and call getDatabase... WITHOUT user.canAccessToDatabase... and without setting the engine principal, because they extend AbstractServerHttpHandler directly instead of DatabaseAbstractHandler which holds the only per-database gate at...

7.1CVSS6.1AI score0.00319EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/16 8:16 p.m.14 views

CVE-2026-61389

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability...

7.3CVSS0.00107EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/16 8:0 p.m.36 views

CVE-2026-61389 AutomationDirect Productivity Suite Out-of-bounds Write

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability...

7.3CVSS0.00107EPSS
SaveExploits0References3
Rows per page
Query Builder