Lucene search
+L

41790 matches found

OSV
OSV
added 2026/06/01 4:37 p.m.14 views

CVE-2026-45154 Nextcloud: Improper Access Control in Collectives

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This...

2.6CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/06/01 4:37 p.m.46 views

CVE-2026-45154

Nextcloud Collectives vulnerability: from version 2.6.0 through before 4.3.0, if a collective page was deleted and the collective was shared view‑only, guests with access could directly retrieve the deleted pages from the trashbin. Root cause: improper access control. A fix is available in versio...

2.6CVSS5.7AI score0.00189EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/01 4:03 p.m.24 views

CVE-2026-7459

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated Subscriber+ account takeover in all versions up to, and including, 5.26.0 via the event reaction endpoints reacttoevent / unreacttoevent. The endpoints register getitemspermissionschec...

7.5CVSS5.8AI score0.00593EPSS
SaveExploits1References1
OSV
OSV
added 2026/06/01 3:50 p.m.10 views

OPENSUSE-SU-2026:20854-1 Security update for rqlite

This update for rqlite fixes the following issues: Changes in rqlite: - Update to version 10.2.0: Support verifying mTLS peer Common Name Console supports restore from SQLite data Console "count rows" respects current Tables Expand/Collapse state Console supports dropping indexes Further Console...

9.6CVSS5.8AI score0.00781EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/01 3:22 p.m.44 views

CVE-2026-42674

The CVE concerns the WordPress plugin Advanced Access Manager (AAM)

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/01 3:16 p.m.19 views

EUVD-2026-33686

Missing Authorization vulnerability in Ben Balter WP Document Revisions allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Document Revisions: from n/a before 4.0.0...

7.5CVSS5.8AI score0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/01 2:47 p.m.43 views

CVE-2026-42682 WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects wpForo Forum: from n/a through 3.0.6...

9.1CVSS0.00291EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/01 1:16 p.m.20 views

CVE-2026-10252

A security vulnerability has been detected in itsourcecode Online House Rental System 1.0. This affects an unknown function of the file /managetenant.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/06/01 11:30 a.m.31 views

EUVD-2026-33631

A vulnerability was detected in itsourcecode Online House Rental System 1.0. This impacts an unknown function of the file /managepayment.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Rosalinux
Rosalinux
added 2026/06/01 11:23 a.m.23 views

Advisory ROSA-SA-2026-3305

CVE-ID: CVE-2016-10506 BDU-ID: None CVE-Crit: Medium CVE-DESCRIPTION: Vulnerabilities involving division by zero in functions opjpinextcprl, opjpinextpcrl, and opjpinextrpcl in the pi.c file of OpenJPEG allow a malicious attacker to cause a service failure abrupt termination of the application...

6.5CVSS5.8AI score0.0347EPSS
SaveExploits0
OSV
OSV
added 2026/06/01 7:00 a.m.16 views

CVE-2026-10234 Mettle sendportal Campaign webview cross site scripting

A vulnerability was detected in Mettle sendportal up to 3.0.1. This affects an unknown part of the file /webview/ of the component Campaign Handler. The manipulation of the argument content results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be...

5.1CVSS4.4AI score
SaveExploits0References9
OSV
OSV
added 2026/06/01 6:00 a.m.9 views

CVE-2026-10230 Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow

A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::readanimations of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally...

4.8CVSS6.1AI score
SaveExploits0References8
NVD
NVD
added 2026/06/01 4:16 a.m.26 views

CVE-2026-48208

An improper neutralization of active SVG content in OTRS or OTRS Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when affected tickets are opened by an agent o...

6.5CVSS0.00333EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/01 3:33 a.m.67 views

CVE-2026-48187 Email with special content can lead to DoS

An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS: 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.4.X Please note that OTRS Community Edition 6.x,...

5.7CVSS0.00201EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/01 3:33 a.m.32 views

CVE-2026-48189

Technical details about CVE-2026-48189 are not provided in the supplied documents; no affected versions, vectors, or patches are specified. Monitor for updates from official advisories.

5.7CVSS5.8AI score0.00198EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/06/01 3:32 a.m.34 views

EUVD-2026-33547

An improper neutralization of user-controllable input in OTRS or OTRS Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting XSS attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into...

7.1CVSS6AI score0.00219EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/01 3:32 a.m.18 views

CVE-2026-48209

An improper neutralization of user-controllable input in OTRS or OTRS Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting XSS attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into...

7.1CVSS6AI score0.00219EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2026/06/01 3:32 a.m.15 views

CVE-2026-48209 Reflected XSS in authenticated agent context

An improper neutralization of user-controllable input in OTRS or OTRS Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting XSS attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into...

7.1CVSS6AI score0.00219EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/01 3:32 a.m.54 views

CVE-2026-48209 Reflected XSS in authenticated agent context

An improper neutralization of user-controllable input in OTRS or OTRS Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting XSS attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into...

7.1CVSS0.00219EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/01 3:32 a.m.49 views

CVE-2026-48209

OTRS Community Edition 7.0.x is vulnerable to reflected XSS due to improper neutralization of user-controllable input in ticket handling. Attackers who are authenticated can exploit crafted request parameters in ticket actions to inject JavaScript via manipulated request URLs, executing code in t...

7.1CVSS6AI score0.00219EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder