Lucene search
+L

377923 matches found

CVE
CVE
added yesterday9 views

CVE-2026-15006

The Bit integrations plugin for WordPress (Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation) is affected by a Directory Traversal vulnerability in the processAttachment function, impacting all versions up to 2.9.0. This allows unauthenticated attackers to read arbitrary server...

7.5CVSS5.6AI score0.00835EPSS
SaveExploits0References10
CVE
CVE
added yesterday9 views

CVE-2026-15414

CVE-2026-15414 affects the Subscriptions for WooCommerce plugin for WordPress, is_role(), both accepting administrator, and the UI’s disabled attribute is client-side-only, enabling bypass by POST or DevTools. Because wps_membership_plan is registered with capabilty_type => 'post', any user wh...

8.8CVSS5.5AI score0.00335EPSS
SaveExploits0References6
CVE
CVE
added yesterday9 views

CVE-2026-13362

Technical details about CVE-2026-13362 are not publicly available in the provided documents. Monitor for updates; no concrete exploit vectors, affected versions, or remediation are confirmed here.

6.4CVSS5.7AI score0.00203EPSS
SaveExploits0References3
CVE
CVE
added yesterday5 views

CVE-2026-7623

CVE-2026-7623 - SureForms WordPress plugin : Affects SureForms – Contact Form, Payment Form & Other Custom Form Builder for WordPress, vulnerable in all versions up to and including 2.8.1. The issue is a Stored Cross-Site Scripting via the headingWrapper parameter caused by insufficient input san...

6.4CVSS5.7AI score0.00206EPSS
SaveExploits0References8
CVE
CVE
added yesterday5 views

CVE-2026-67599

CVE-2026-67599 is a documented OS Command Injection in ClearOS (ClearFoundation) Webconfig interface. The vulnerability arises from the Log Viewer filter parameter being interpolated unsafely into a shell command in /usr/clearos/apps/base/libraries/File.php, allowing payloads like $(…) or backtic...

SaveExploits1References1
CVE
CVE
added yesterday7 views

CVE-2026-17617

The CVE-2026-17617 entry maps to IBM Application Gateway Operator, which is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient URL validation in custom resources. Affected versions are IBM Application Gateway Operator 22.2 to 26.06; CVSS Base score 8.5 (CVSS:3.1, AV:N/AC:L/PR:L/...

SaveExploits0
CVE
CVE
added yesterday9 views

CVE-2026-55244

Technical details for CVE-2026-55244 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed. Monitor SUSE page for updates.

SaveExploits0
CVE
CVE
added 2 days ago9 views

CVE-2026-34641

CVE-2026-34641 (Premiere Pro) is an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. This is supported by NVD and CVE listings that describe Prem...

7.8CVSS6.2AI score0.00139EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago22 views

CVE-2026-45377

CVE-2026-45377 affects Decidim where the normal download_your_data flow authenticates the export owner but redirects to a signed Active Storage blob URL that is not bound to the owner session. This allows replay of the redirect URL by anyone who obtains it, enabling access to private exports. Aff...

6.5CVSS5.5AI score0.00274EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago20 views

CVE-2026-45376

CVE-2026-45376 affects Decidim admin user search. The vulnerability occurs when untrusted input from params[:term] is interpolated into raw SQL in ORDER BY clauses, allowing an authenticated organization administrator to cause time-based blind SQL injections via the sort expression. Affected path...

5.5CVSS5.7AI score0.00341EPSS
SaveExploits0References7
CVE
CVE
added 2 days ago17 views

CVE-2026-54785

CVE-2026-54785 affects gemini-bridge, a lightweight MCP server that bridges AI agents to Google’s Gemini CLI. From versions 1.0.0 through 1.3.1, the inline mode function consult_gemini_with_files accepts a files argument containing a file path and does not confine it to the working directory, cau...

6.2CVSS5.5AI score0.00151EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago14 views

CVE-2026-54768

WPGraphQL

6.9CVSS5.5AI score0.00278EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago19 views

CVE-2026-9044

Technical details about CVE-2026-9044 are not publicly available in the provided documents; monitor for updates.

8.5CVSS6AI score0.00973EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago10 views

CVE-2026-53573

CVE-2026-53573 affects GeoNetwork core-geonetwork (3.12.0 to 4.2.16 and 4.4.11) where unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter allows an attacker-controlled external redirect after login. Root cause: improper validation ena...

4.8CVSS5.4AI score0.00377EPSS
SaveExploits0References7
CVE
CVE
added 2 days ago21 views

CVE-2026-45330

Summary: The vulnerability in Decidim affects the verification admin flow where the pending_authorizations are loaded by raw identifiers without verifying current_organization ownership, allowing a tenant admin to view/approve/reject another tenant’s id_documents. The technical trigger is the use...

4.9CVSS5.4AI score0.00279EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago11 views

CVE-2026-54909

CVE-2026-54909 affects the Go library pion/stun. The vulnerability arises when parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN/ICE Binding responses, where XORMappedAddress.GetFromAs can panic. This leads to a remote denial of service. The issue is fixed in version 3.1.3; upgrading...

5.3CVSS5.5AI score0.00371EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago12 views

CVE-2026-8400

CVE-2026-8400 is reported in IBM SDK, Java Technology Edition (OpenJ9). The IBM bulletin describes a flaw in the ORB component that may allow a malicious IIOP server to load and instantiate arbitrary classes, reflecting unsafe input handling (CWE-470). Affected IBM Java versions are 7.1.0.0–7.1.5...

SaveExploits0
CVE
CVE
added 2 days ago15 views

CVE-2026-54787

CVE-2026-54787 affects the Go library sigstore-go. Before 1.2.1, it does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a long‑lived signing key without a certificate, enabling an attacker with expired key material to sign accepted bundles. The issue i...

3.1CVSS5.5AI score0.0009EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago23 views

CVE-2026-45086

CVE-2026-45086 (Decidim) affects the demographics questionnaire admin editor feature. A route under /admin/demographics/questions renders the editor interface without validating admin authorization, allowing a normal participant to access and view the live update form action. This constitutes an ...

5.4CVSS5.5AI score0.00171EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago27 views

CVE-2026-68771

Technical details about this CVE are not publicly available in the provided documents. Monitor for updates from the vendor and CVE databases for affected versions, impact, and remediation.

9.8CVSS6.2AI score0.00623EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago7 views

CVE-2026-18420

Technical details for CVE-2026-18420 are not publicly available in the provided documents. Monitor for updates.

SaveExploits0References1
CVE
CVE
added 2 days ago13 views

CVE-2026-65981

CVE-2026-65981 affects Coturn prior to 4.15.0. A MOBILITY-TICKET–based session-resume flaw allows an authenticated attacker to bypass per-allocation authorization: a resumed REFRESH is validated against the attacker’s identity instead of the original allocation owner, enabling cross-user receipt ...

7.1CVSS5.5AI score0.0025EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago18 views

CVE-2026-68770

The CVE affects the sentence-transformers library, where a logic flaw in the import_module_class helper (sentence_transformers/util/misc.py) adds an incorrect guard: os.path.exists(model_name_or_path) causes the trust_remote_code gate to pass whenever the provided path exists locally. This enable...

9.8CVSS6.4AI score0.00521EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago8 views

CVE-2026-53551

The vulnerability CVE-2026-53551 affects free5GC AUSF prior to version 1.4.5, where the supiOrSuci field in UE authentication requests is not validated. Null bytes (\x00) and other control characters pass through JSON parsing and are forwarded to the UDM in an unescaped URL path, causing Go’s net...

6.9CVSS5.5AI score0.00429EPSS
SaveExploits0References6
CVE
CVE
added 2 days ago16 views

CVE-2026-62959

CVE-2026-62959 affects Coturn versions 4.5.2–4.14.0 where, when started with --acme-redirect and exposing a plaintext-TCP listener, an unauthenticated remote client can trigger a pre-auth heap-memory disclosure by sending a single HTTP GET, receiving a 301 with a Location header that leaks up to...

8.2CVSS5.7AI score0.00384EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago12 views

CVE-2026-53599

CVE-2026-53599 affects REDAXO CMS versions 5.18.2–5.21.1 where rex_mediapool::isAllowedExtension lets an authenticated backend user with media[upload] permission upload a JPEG/PHP polyglot named shell.php.any.jpg. On servers with multi-extension PHP handlers, this can be executed as the web serve...

7.5CVSS5.6AI score0.00314EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago10 views

CVE-2026-62999

Copier (library and CLI for rendering project templates) is affected from version 9.5.0 through 9.16.0. Percent-encoded parent-directory segments or encoded path separators in a template URL could match a configured trusted repository prefix before HTTP server or Git transport decoding, enabling ...

7.5CVSS5.5AI score0.00294EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago80 views

CVE-2026-53510

Savon (Ruby SOAP client) contains a vulnerability in Savon::Model.all_operations, which interpolates attacker-controlled WSDL operation names into Ruby source passed to module_eval, allowing arbitrary code execution in the application process. Affected versions are 0.9.8 through 2.17.1; the issue...

8.1CVSS6AI score0.00396EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago14 views

CVE-2026-18394

CVE-2026-18394 affects Strands Agents Tools’ http_request tool prior to v0.8.2, where incorrect authorization could allow an attacker to exfiltrate credentials configured via HTTP_REQUEST_TOKEN_CONFIG by routing requests through proxy infrastructure under attacker control. Root cause: insufficien...

7.4CVSS5.6AI score0.00294EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago16 views

CVE-2026-65841

CVE-2026-65841 affects Jodit Editor prior to version 4.13.6, where the clean-html denyTags filter fails to normalize foreign SVG/MathML script node names, allowing a [removed] element nested inside SVG (or MathML) to survive and execute when content is loaded. The issue stems from insufficient no...

5.3CVSS5.6AI score0.003EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago9 views

CVE-2026-62324

Technical details about CVE-2026-62324 are not publicly available in the provided documents. Monitor for updates.

5.4CVSS5.6AI score0.0018EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago11 views

CVE-2026-55825

CVE-2026-55825 (Contao) : Affected are Contao core-bundle versions 5.7.0–5.7.6. An authenticated backend user who can access one job can craft an attachment identifier containing ../ segments to have the job attachment download endpoint read a file from another job directory inside var/job-attach...

3.1CVSS5.4AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago17 views

CVE-2026-55824

Contao CVE-2026-55824 affects the crawler in versions 4.13.40–5.3.46 and 5.7.0-RC1–5.7.6. The issue arises because the crawler’s cleanup logic preserves root-origin options but strips out non-Symfony option names basic_auth and bearer_auth instead of Symfony’s auth_basic and auth_bearer, leaving ...

2.6CVSS5.5AI score0.00154EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago13 views

CVE-2026-53502

Thumbor (open-source image thumbnail service by globo.com) is affected by a path traversal in file_loader prior to version 7.8.0. The issue occurs because file_loader decodes percent-encoded path segments after root-boundary validation, allowing traversal outside FILE_LOADER_ROOT_PATH via waterma...

8.7CVSS5.5AI score0.00357EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago19 views

CVE-2026-53505

Thumbor (open-source photo thumbnail service by globo.com) is affected prior to version 7.8.0. The filters:proportion() function does not enforce an upper bound on and executes during the post-transform phase, enabling extremely large resizes that can exhaust CPU/memory and cause a denial of ser...

7.5CVSS5.5AI score0.00339EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago9 views

CVE-2026-53504

Thumbor contains a Regex Denial of Service (ReDoS) vulnerability in the convolution filter that triggers exponential backtracking on crafted repeated numeric input. This affects versions prior to 7.8.0 and can cause a URL request to exhaust processing time. The issue is fixed in 7.8.0. Per the co...

7.5CVSS5.5AI score0.00335EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago11 views

CVE-2026-53503

Thumbor CVE-2026-53503 documents a vulnerability in the filters:convolution filter prior to 7.8.0 where the user-supplied columns value is passed to a C extension (thumbor/ext/filters/_convolution.c) as a divisor without validating that columns > 0. If columns is 0, the C code triggers undefin...

7.5CVSS5.7AI score0.00417EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago16 views

CVE-2026-53501

Thumbor (open-source image thumbnail service by globo.com) is affected prior to version 7.8.0. The vulnerability stems from using Python’s .replace() to strip the signature from the URL before HMAC validation, which removes all occurrences of the substring. An attacker can insert the same signatu...

8.2CVSS5.5AI score0.00208EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago15 views

CVE-2026-53500

Thumbor (open-source image service by globo.com) is affected prior to version 7.8.0 where ALLOWED_SOURCES is applied by re.match() to unescaped strings, enabling a hostname with dot-position differences to bypass the allowlist. Root cause: unescaped patterns treated as normal strings in a regex m...

8.2CVSS5.5AI score0.00287EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago20 views

CVE-2026-57232

CVE-2026-57232 affects Contao core-bundle's Feed Reader module. From versions 5.3.35–5.3.47 and 5.7.0-RC1–5.7.8, FeedReaderController::getResponse() passes feed URLs directly to the HTTP client via feedIo->read() without validating schemes or private addresses, enabling a backend user with mod...

3.1CVSS5.5AI score0.00182EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago9 views

CVE-2026-63725

Technical details for CVE-2026-63725 are not publicly available in the provided documents. Monitor for updates; no affected product, vulnerability type, or remediation can be determined from the current data.

SaveExploits0References1
CVE
CVE
added 2 days ago10 views

CVE-2026-25552

The CVE-2026-25552 entry concerns Ghost CLI before 1.30.1, where an IP spoofing vulnerability allows unauthenticated remote attackers to bypass rate-limiting on self-hosted Ghost instances. The underlying issue is misusing the X-Forwarded-For header in combination with a misconfigured Nginx setup...

6.3CVSS5.7AI score0.00173EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago9 views

CVE-2026-18481

CVE-2026-18481 describes a stored cross-site scripting flaw in the AWS Ops Wheel project, affecting the participant_url handling. The issue, triggered by a crafted participant_url value with a dangerous URI scheme, could allow an authenticated remote user to steal session tokens and escalate to f...

7.3CVSS5.3AI score0.00282EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago13 views

CVE-2026-18321

CVE-2026-18321 describes a buffer overflow in NTPsec’s Zyfer refclock that can crash ntpd via a local attack. The CVE is listed as a classic buffer overflow (Buffer Copy without Checking Size of Input) affecting ntpsec, but the provided documents do not specify affected versions, exact vulnerable...

4.7CVSS5.5AI score0.00084EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago7 views

CVE-2026-54737

The CVE refers to @phun-ky/defaults-deep, a lodash-like defaultsDeep library. Before 2.0.5, defaultsDeep() recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype (prototype pollution). Affected version ra...

7.3CVSS5.4AI score0.00262EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago17 views

CVE-2026-54725

The vault-secrets-webhook Kubernetes mutating webhook is vulnerable prior to version 1.23.1, allowing direct secret injection into Pods via parseVaultConfig() accepting vault-addr annotation and related webhook behavior. The vault-serviceaccount setting can cause a ServiceAccount JWT to be sent t...

9.6CVSS5.5AI score0.0032EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago16 views

CVE-2026-34497

CVE-2026-34497 affects Johnson Controls FM Systems Employee prior to 2025.3.1, with an improper neutralization of Script-Related HTML tags in a web page that enables basic XSS. The CVSS 4.0 vector: AV:N/AC:L/PR:H/UI:P/VI:N/VO:N/SA:N/SI:N/VM:N, base score 4.8 (MEDIUM). No exploitation details are ...

4.8CVSS5.4AI score0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago8 views

CVE-2026-34495

Johnson Controls FM Systems Employee web application is affected by CVE-2026-34495, a Stored XSS due to improper neutralization of input during web page generation. Affects FM Systems Employee before 2025.3.1. CVSS v4.0 base score 4.8 (Medium) with network access, low attack complexity, no privil...

4.8CVSS5.4AI score0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago7 views

CVE-2026-21662

CVE-2026-21662 describes an "Unrestricted upload of file with dangerous type" vulnerability in Johnson Controls FM Systems Employee, affecting versions before 2025.3.1. The issue involves uploading potentially dangerous files, enabling use of malicious files. The official metrics list a CVSS v4.0...

4.8CVSS5.4AI score0.00409EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago19 views

CVE-2026-34490

CVE-2026-34490 affects the XAAP Android application (pre-1.53). The issue is cleartext storage of sensitive data in an unencrypted local database on the device, allowing a local attacker on a jailbroken or otherwise compromised device to retrieve sensitive information. CVSS v4.0 base score 4.8 (M...

4.8CVSS5.5AI score0.00101EPSS
SaveExploits0References1
Total number of security vulnerabilities377923