Lucene search
+L
NvdMost viewed

380230 matches found

NVD
NVD
added 2026/06/11 4:16 p.m.61 views

CVE-2026-9648

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...

9.1CVSS0.00223EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/27 8:16 a.m.61 views

CVE-2026-40814

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files mb24configetTagAlarm function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

8.7CVSS0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/14 9:16 p.m.61 views

CVE-2026-44661

python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-Side Request Forgery SSRF caused by a trust-boundary inconsistency between manual discovery and tool invocation. registermanual validates the discovery URL against an HTTPS /...

4.7CVSS0.00168EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/13 4:16 p.m.61 views

CVE-2026-43488

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controller error HCE The xHCI controller reports a Host Controller Error HCE in UAS Storage Device plug/unplug scenarios on Android devices. HCE is checked in xhciirq function and causes...

5.5CVSS0.00114EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/12 10:16 p.m.61 views

CVE-2026-43948

wger is a free, open-source workout and fitness manager. Prior to 2.6, the resetuserpassword and gympermissionsuseredit views in wger perform a gym-scope authorization check using Python object comparison != that evaluates None != None as False, silently bypassing the guard when both the attacker...

9.9CVSS0.00371EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/11 12:16 a.m.61 views

CVE-2026-8252

A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function smfnsmfhandlecreatedatainhsmf of the component SMF. Executing a manipulation can lead to null pointer dereference. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized...

6.5CVSS0.00378EPSS
SaveExploits1References5
NVD
NVD
added 2026/05/07 10:16 p.m.61 views

CVE-2026-33109

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

9.9CVSS0.00711EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/27 5:16 p.m.61 views

CVE-2026-28369

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP standards, can be exploited by a remote attacker to perform...

9.1CVSS0.00677EPSS
SaveExploits0References4
NVD
NVD
added 2025/10/29 5:15 p.m.61 views

CVE-2025-12477

Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS0.00324EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/01 4:15 p.m.61 views

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

8.8CVSS0.00481EPSS
SaveExploits1References3
NVD
NVD
added 2025/09/11 8:15 a.m.61 views

CVE-2025-8422

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the sendemail function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which...

7.5CVSS0.00629EPSS
SaveExploits1References3
NVD
NVD
added 2025/08/26 4:15 p.m.61 views

CVE-2025-57813

traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an...

5.9CVSS0.00416EPSS
SaveExploits0References3
NVD
NVD
added 2025/07/28 2:15 p.m.61 views

CVE-2025-8279

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution...

9.8CVSS0.00415EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/18 1:15 a.m.61 views

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

7.5CVSS0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/09 6:15 p.m.61 views

CVE-2025-49651

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI...

8.1CVSS0.00286EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/13 1:15 a.m.61 views

CVE-2025-43010

SAP S/4HANA Cloud Private Edition or on Premise SCM Master Data Layer MDL allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation an...

8.3CVSS0.00457EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/10 5:15 a.m.61 views

CVE-2025-4496

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buff...

9.8CVSS0.01131EPSS
SaveExploits0References5
NVD
NVD
added 2025/05/08 8:15 p.m.61 views

CVE-2025-45789

TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules...

9.8CVSS0.00789EPSS
SaveExploits1References1
NVD
NVD
added 2025/02/14 8:15 p.m.61 views

CVE-2025-25296

Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's /projects/upload-example endpoint allows injection of arbitrary HTML through a GET request with an appropriately crafted labelconfig query parameter. By crafting a specially formatted XML label config with...

6.1CVSS0.01898EPSS
SaveExploits2References2
NVD
NVD
added 2025/01/03 4:15 p.m.61 views

CVE-2024-56408

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have no sanitization in the /vendor/phpoffice/phpspreadsheet/samples/Engineering/Convert-Online.php file, which leads to the possibility of a cross-site scripting attack...

8.3CVSS0.00403EPSS
SaveExploits1References5
NVD
NVD
added 2024/12/27 6:15 p.m.61 views

CVE-2024-12990

A vulnerability was found in ruifang-tech Rebuild 3.8.6. It has been classified as problematic. This affects an unknown part of the file /user/admin-verify of the component Admin Verification Page. The manipulation of the argument nexturl with the input http://localhost/evil.html leads to open...

5.3CVSS0.00335EPSS
SaveExploits0References4
NVD
NVD
added 2024/12/17 1:15 p.m.61 views

CVE-2024-50379

Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write non-default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from...

9.8CVSS0.44312EPSS
SaveExploits13References5
NVD
NVD
added 2024/12/04 4:15 a.m.61 views

CVE-2024-12099

The Dollie Hub – Build Your Own WordPress Cloud Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.2.0 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for...

4.3CVSS0.00273EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/12 3:15 p.m.61 views

CVE-2024-50386

Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker...

9.9CVSS0.01419EPSS
SaveExploits0References4
NVD
NVD
added 2024/10/02 8:15 p.m.61 views

CVE-2024-46977

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's openlocalfile method allows an authenticated user with adequate permissions to download any .txt via the ScreensControllersh...

6.5CVSS0.00912EPSS
SaveExploits0References3
NVD
NVD
added 2024/09/20 8:15 a.m.61 views

CVE-2024-8853

The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it possible for unauthenticated attackers to make themselves administrators by registering with a...

9.8CVSS0.00642EPSS
SaveExploits0References3
NVD
NVD
added 2024/09/13 3:15 p.m.61 views

CVE-2024-5789

The Triton Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the theme's Button shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

6.4CVSS0.00257EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/29 11:15 a.m.61 views

CVE-2024-43986

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9...

5.9CVSS0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/21 2:15 p.m.61 views

CVE-2024-8007

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform RHOSP director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a...

8.1CVSS0.00392EPSS
SaveExploits0References4
NVD
NVD
added 2024/08/06 10:15 p.m.61 views

CVE-2024-38206

An authenticated attacker can bypass Server-Side Request Forgery SSRF protection in Microsoft Copilot Studio to leak sensitive information over a network...

8.5CVSS0.12341EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/03 9:15 a.m.61 views

CVE-2024-7031

The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'njtfssaveSettingRestrictions' function in all versions up to, and including, 1.8.2. This makes it possible for authenticated attackers, with a role tha...

8.8CVSS0.00619EPSS
SaveExploits0References4
NVD
NVD
added 2024/07/24 8:15 a.m.61 views

CVE-2023-32471

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits...

6CVSS0.00167EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/23 4:15 p.m.61 views

CVE-2024-6714

An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege...

8.8CVSS0.00263EPSS
SaveExploits1References3
NVD
NVD
added 2024/07/09 7:15 p.m.61 views

CVE-2024-39899

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was to allow using the YOURLs URL shortener without running the YOURLs instance without authentication and/or exposing the authentication toke...

5.3CVSS0.00627EPSS
SaveExploits0References3
NVD
NVD
added 2024/07/01 3:15 p.m.61 views

CVE-2024-21482

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image...

7.8CVSS0.00109EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/25 9:16 p.m.61 views

CVE-2024-5018

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.Wug.Controllers.SessionController.LoadNMScript. This allows allows reading of any file from the applications web-root directory...

7.5CVSS0.00771EPSS
SaveExploits0References2
NVD
NVD
added 2024/06/19 12:15 p.m.61 views

CVE-2023-46146

Missing Authorization vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5...

8.8CVSS0.00364EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/10 8:15 p.m.61 views

CVE-2024-36412

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

10CVSS0.05692EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/06 7:16 p.m.61 views

CVE-2024-5480

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
NVD
NVD
added 2024/05/20 10:15 a.m.61 views

CVE-2024-35968

In the Linux kernel, the following vulnerability has been resolved: pdscore: Fix pdsccheckpcihealth function to use work thread When the driver notices fwstatus == 0xff it tries to perform a PCI reset on itself via pciresetfunction in the context of the driver's health thread. However,...

7.8CVSS6.3AI score0.00158EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/16 6:15 p.m.61 views

CVE-2023-40000

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7...

8.3CVSS8.2AI score0.54872EPSS
SaveExploits5References2
NVD
NVD
added 2024/02/26 5:15 p.m.61 views

CVE-2024-27081

ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the dashboard component of ESPHome version 2023.12.9 command line installation allows authenticated remote attackers to read and write arbitrary files under the configuration...

8.8CVSS7.3AI score0.01535EPSS
SaveExploits1References2
NVD
NVD
added 2024/02/02 2:15 a.m.61 views

CVE-2023-48793

Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature...

9.8CVSS10AI score0.06951EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/11 9:15 a.m.61 views

CVE-2023-6634

The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the getcontent function. This is due to the plugin making use of the calluserfunc function with user input. This makes it possible for unauthenticated attackers to execute any...

9.8CVSS9.5AI score0.08544EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/12 3:15 p.m.61 views

CVE-2023-46454

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

9.8CVSS0.23466EPSS
SaveExploits4References1
NVD
NVD
added 2023/11/20 6:15 p.m.61 views

CVE-2023-48292

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacker to execute arbitrary shell commands ...

9.6CVSS0.22938EPSS
SaveExploits2References3
NVD
NVD
added 2023/11/02 2:15 p.m.61 views

CVE-2023-26456

Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...

5.4CVSS5.3AI score0.00383EPSS
SaveExploits0References2
NVD
NVD
added 2023/08/02 11:15 p.m.61 views

CVE-2023-1437

All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute...

9.8CVSS9.9AI score0.02798EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/11 7:15 p.m.61 views

CVE-2023-37280

Pimcore Admin Classic Bundle provides a Backend UI for Pimcore based on the ExtJS framework. An admin who has not setup two factor authentication before is vulnerable for this attack, without need for any form of privilege, causing the application to execute arbitrary scripts/HTML content. This...

6.1CVSS5.9AI score0.00578EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/01 1:15 p.m.61 views

CVE-2023-22647

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, but their read-level permissions to the secret being preserved. When this...

9.9CVSS9.1AI score0.00715EPSS
SaveExploits0References2
Total number of security vulnerabilities5000