Lucene search
+L
AttackerkbMost viewed

96138 matches found

ATTACKERKB
ATTACKERKB
added 2012/12/03 12:00 a.m.27 views

CVE-2012-5611 MySQL Buffer Overflow

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

6.5CVSS4.1AI score0.23956EPSS
SaveExploits3References13
ATTACKERKB
ATTACKERKB
added 2026/08/18 5:11 p.m.26 views

CVE-2026-44472

Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership and automatically associates anonymous commerce data with the newly activated account. An attacker can use...

8.1CVSS5.5AI score0.00439EPSS
SaveExploits0References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/05 8:06 a.m.26 views

CVE-2026-64566

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: propagate SKBFLSHAREDFRAG in iptfsskbaddfrags When iptfsskbaddfrags copies frag references from the source frag walk into a new SKB, it increments the page reference count via skbfragref but does not propagate...

5.4AI score0.00352EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/23 5:46 a.m.26 views

CVE-2026-64600

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfsreflinkfillcowhole,delalloc are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a...

5.5AI score0.00467EPSS
SaveExploits8References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/21 6:02 p.m.26 views

CVE-2026-63454

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution...

7.2CVSS6.1AI score0.00547EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/19 12:02 p.m.26 views

CVE-2026-63806

In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUGON in ioeventfd datamatch with getunaligned Drop a BUGON that has been reachable since it was first added, way back in 2009, and instead use getunaligned to perform potentially-unaligned accesses...

7.1CVSS5.2AI score0.00155EPSS
SaveExploits0References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/03 6:12 a.m.26 views

CVE-2026-11352

An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function discards zero-length UDP datagrams before counting them toward the per-call packet budget, a connected QUIC peer can...

6.7AI score0.0101EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/25 11:29 p.m.26 views

CVE-2026-9222

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access...

9.2CVSS5.9AI score0.00412EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/24 6:43 p.m.26 views

CVE-2026-13027

Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.9AI score0.00319EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/23 7:10 p.m.26 views

CVE-2026-48020

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an unauthenticated attacker to bypass route-level authentication and authorization. When a public router matches on a...

7.8CVSS5.9AI score0.00757EPSS
SaveExploits2References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/22 12:40 p.m.26 views

CVE-2026-6653

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling...

8.3CVSS5.9AI score0.00578EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/02 9:45 a.m.26 views

CVE-2025-53302

Missing Authorization vulnerability in Anton Shevchuk Constructor allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Constructor: from n/a through 1.6.5...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:02 a.m.26 views

CVE-2026-4377

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number. This issue was fixed in version 1.00B16CP...

6CVSS5.8AI score0.00141EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 5:30 a.m.26 views

CVE-2026-7533

The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7. This is due to missing nonce verification in the handleoauthredirect function, which is registered on the admininit hook and processes Square OAuth tokens from ...

4.3CVSS5.8AI score0.00135EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/05/27 9:32 p.m.26 views

CVE-2026-45322

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.runshell passes a command string...

7.8CVSS5.7AI score0.01722EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 5:31 a.m.26 views

CVE-2026-8701

The GNTT Post Title Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the title-ticker-slide, title-ticker-fade, and title-ticker-typing shortcodes. This is due to insufficient input sanitization and output escaping on shortcode attributes notably border,...

6AI score0.00187EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/26 9:29 p.m.26 views

CVE-2026-5260

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...

8.2CVSS5.8AI score0.00727EPSS
SaveExploits0References18
ATTACKERKB
ATTACKERKB
added 2026/05/26 9:15 p.m.26 views

CVE-2026-9584

A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

7.5CVSS6.8AI score0.00254EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/26 4:46 p.m.26 views

CVE-2026-35221

Improperly built filter clauses lead to a SQL injection vulnerability in the search query for comfinder...

6.9CVSS5.9AI score0.00322EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/25 8:20 p.m.26 views

CVE-2026-48589

Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login. In affected versions, insufficient validation of this client-controlled value could allow an attacker to influence the redirect target in applications using the Jakarta EE module...

5.8AI score0.00352EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/25 5:15 p.m.26 views

CVE-2026-9477

A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument mac results in os command injection. The attack is...

10CVSS5.6AI score0.01909EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/25 2:15 p.m.26 views

CVE-2018-25375

SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to...

8.6CVSS6.6AI score0.00182EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/24 7:00 p.m.26 views

CVE-2026-9393

A vulnerability was found in H3C Magic B0 up to 100R002. This affects the function EditBasicSSID5G of the file /goform/aspForm. Performing a manipulation of the argument param results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. The...

9CVSS7.6AI score0.00445EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/24 11:15 a.m.26 views

CVE-2026-9378

A security flaw has been discovered in Edimax BR-6675nD 1.12. This affects the function formHwSet of the file /goform/formHwSet of the component POST Request Handler. The manipulation of the argument regDomain/ABandregDomain/nic0Addr/nic1Addr/wlanAddr/inicAddr results in command injection. It is...

6.5CVSS6.4AI score0.01171EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/24 3:30 a.m.26 views

CVE-2026-9352

A weakness has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function makerunenv of the file tools/environments/local.py of the component Messaging Gateway Handler. Executing a manipulation can lead to information disclosure. The attack may be launched...

6.9CVSS5.7AI score0.00286EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/20 7:12 p.m.26 views

CVE-2026-9123

Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a local attacker to execute arbitrary code inside a sandbox via malicious network traffic. Chromium security severity: Medium...

7.5CVSS6.4AI score0.00187EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/15 5:15 a.m.26 views

CVE-2026-43490

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate inherited ACE SID length smbinheritdacl walks the parent directory DACL loaded from the security descriptor xattr. It verifies that each ACE contains the fixed SID header before using it, but does not verify that...

8.8CVSS6AI score0.00408EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/14 5:38 a.m.26 views

CVE-2025-13874

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with Guest permissions to view issues in projects they were not authorized to access...

4.3CVSS5.8AI score0.00227EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/14 5:33 a.m.26 views

CVE-2026-8144

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks...

4.3CVSS5.8AI score0.00181EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/11 8:08 p.m.26 views

CVE-2026-28913

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

7.5CVSS5.8AI score0.00326EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/11 5:17 p.m.26 views

CVE-2026-7308

An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via the HTML index page in Sonatype Nexus Repository versions 3.6.0 through versions before 3.92.0. Th...

5.1CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/11 3:15 a.m.26 views

CVE-2026-8268

A vulnerability has been found in Open5GS up to 2.7.7. This issue affects the function OpenAPIlistcreate of the component SMF. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed ...

5.3CVSS5.4AI score0.00372EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/05/08 10:21 p.m.26 views

CVE-2026-42339

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0.9.0.5 CVE-2025-59146 and hardened in v0.9.6 CVE-2025-62155 does not block the unspecified address 0.0.0.0. A regular...

8.5CVSS5.8AI score0.00279EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/08 7:15 a.m.26 views

CVE-2026-44928

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal...

2.9CVSS5.8AI score0.00211EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/06 3:27 a.m.26 views

CVE-2026-3208

The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mppiximage' WooCommerce API endpoint in all versions up to, and including, 8.7.11. This makes it possible for unauthenticated attackers to retrieve...

5.3CVSS6AI score0.00499EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.26 views

CVE-2026-34315

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.5CVSS5.8AI score0.00226EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/15 10:13 a.m.26 views

CVE-2026-28741

Mattermost versions 10.11.x = 10.11.12, 11.5.x = 11.5.0, 11.4.x = 11.4.2, 11.3.x = 11.3.2 fail to validate CSRF tokens on an authentication endpoint which allows an attacker to update a user's authentication method via a CSRF attack by tricking a user into visiting a malicious page. Mattermost...

6.8CVSS5.8AI score0.00129EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/06 8:48 p.m.26 views

CVE-2026-35392

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, PUT upload in httpserver/updown.go has no path sanitization. This vulnerability is fixed in 2.0.0-beta.3...

9.8CVSS7.2AI score0.00683EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/20 10:23 p.m.26 views

CVE-2026-33186

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 :path pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the :path omitted the mandatory...

9.1CVSS5.9AI score0.01557EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/21 9:28 a.m.26 views

CVE-2019-18963

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none...

5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/06 6:11 p.m.26 views

CVE-2025-69214

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an SQL Injection vulnerability exists in the ajaxselect.php endpoint when handling the componenti operation. An authenticated attacker can inject malicious SQL code through the...

8.7CVSS5.9AI score0.00423EPSS
SaveExploits3References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/15 1:11 p.m.26 views

CVE-2026-22638

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.2AI score0.00037EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2025/12/18 2:16 p.m.26 views

CVE-2025-1029

Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7...

7.5CVSS5.4AI score0.00282EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/05/13 12:00 a.m.26 views

CVE-2025-4427

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API. Recent assessments: remmons-r7 at May 22, 2025 5:21am UTC reported: On May 13, 2025, Ivanti published an adviso...

8.8CVSS8.9AI score0.99927EPSS
SaveExploits10References2
ATTACKERKB
ATTACKERKB
added 2025/01/14 12:00 a.m.26 views

CVE-2024-13159

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

9.8CVSS7.2AI score0.99992EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2024/08/29 12:00 a.m.26 views

CVE-2024-6670

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

9.8CVSS8AI score0.93EPSS
SaveExploits2References4
ATTACKERKB
ATTACKERKB
added 2024/02/21 9:15 p.m.26 views

CVE-2023-24333

A stack overflow vulnerability in Tenda AC21 with firmware version USAC21V1.0reV16.03.08.15cnTDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi...

8.8CVSS6.1AI score0.00475EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/09/22 12:00 a.m.26 views

CVE-2023-43770

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcubestringreplacer.php behavior. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

6.1CVSS5.9AI score0.58483EPSS
SaveExploits2References4
ATTACKERKB
ATTACKERKB
added 2023/07/14 6:15 p.m.26 views

CVE-2023-37224

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files...

6CVSS6.1AI score0.00188EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/06/28 12:00 a.m.26 views

CVE-2023-21237

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

6.2CVSS6.3AI score0.00264EPSS
SaveExploits0References2
Total number of security vulnerabilities5000