Lucene search
+L
NvdMost viewed

378743 matches found

NVD
NVD
added 2014/01/21 4:6 p.m.48 views

CVE-2013-4200

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

5.8CVSS6.6AI score0.02286EPSS
SaveExploits2References5
NVD
NVD
added 2013/11/21 4:40 a.m.48 views

CVE-2013-6173

Multiple cross-site request forgery CSRF vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to...

6.8CVSS7.2AI score0.01296EPSS
SaveExploits0References5
NVD
NVD
added 2013/10/24 3:48 a.m.48 views

CVE-2013-5180

The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveragi...

4.3CVSS5.8AI score0.01086EPSS
SaveExploits0References1
NVD
NVD
added 2013/07/29 1:59 p.m.48 views

CVE-2011-1483

wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterpris...

5CVSS7AI score0.02664EPSS
SaveExploits0References3
NVD
NVD
added 2012/10/22 11:55 p.m.48 views

CVE-2012-4406

OpenStack Object Storage swift before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object...

9.8CVSS9.6AI score0.06518EPSS
SaveExploits0References11
NVD
NVD
added 2012/06/13 10:24 a.m.48 views

CVE-2011-1927

The ipexpire function in net/ipv4/ipfragment.c in the Linux kernel before 2.6.39 does not properly construct ICMPTIMEEXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service invalid pointer dereference via crafted fragmented packets...

5CVSS5.6AI score0.02591EPSS
SaveExploits2References4
NVD
NVD
added 2011/01/12 1:0 a.m.48 views

CVE-2011-0026

Integer signedness error in the SQLConnectW function in an ODBC API odbc32.dll in Microsoft Data Access Components MDAC 2.8 SP1 and SP2, and Windows Data Access Components WDAC 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name DSN and a crafted szDSN...

9.3CVSS7.5AI score0.34399EPSS
SaveExploits0References10
NVD
NVD
added 2010/06/15 2:4 p.m.48 views

CVE-2010-2263

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI...

5CVSS6.9AI score0.71926EPSS
SaveExploits6References4
NVD
NVD
added 2010/06/08 8:30 p.m.48 views

CVE-2010-1263

Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during...

9.3CVSS7.4AI score0.28561EPSS
SaveExploits1References7
NVD
NVD
added 2009/10/22 6:30 p.m.48 views

CVE-2009-1991

Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle...

3.6CVSS6.5AI score0.01712EPSS
SaveExploits0References6
NVD
NVD
added 2009/04/15 10:30 a.m.48 views

CVE-2009-0991

Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970...

5CVSS6AI score0.15637EPSS
SaveExploits7References7
NVD
NVD
added 2008/06/06 6:32 p.m.48 views

CVE-2008-2562

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

6.5CVSS7.9AI score0.00895EPSS
SaveExploits1References4
NVD
NVD
added 2007/09/19 6:17 p.m.48 views

CVE-2007-4978

Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 Decoder.php and 2 Encoder.php in WBXML/...

7.5CVSS7.7AI score0.02757EPSS
SaveExploits1References5
NVD
NVD
added 2007/03/06 1:19 a.m.48 views

CVE-2006-7119

PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distributed on comscripts.com, allows remote attackers to execute arbitrary PHP code via a URL in the CFGPHPGIGGLEROOT parameter...

7.5CVSS7.6AI score0.02301EPSS
SaveExploits1References2
NVD
NVD
added 2006/08/10 12:4 a.m.48 views

CVE-2006-4069

Multiple cross-site scripting XSS vulnerabilities in Elaine Aquino Online Zone Journals OZJournals 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 m and 2 c parameters in index.php, 3 a search action, and 4 a "submit comment" action...

4.3CVSS5.8AI score0.02393EPSS
SaveExploits1References6
NVD
NVD
added 2006/07/31 11:4 p.m.48 views

CVE-2006-3942

The server driver srv.sys in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service system crash via an SMBCOMTRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the...

7.8CVSS6.6AI score0.75027EPSS
SaveExploits5References14
NVD
NVD
added 2006/06/07 10:2 a.m.48 views

CVE-2006-2885

Multiple cross-site scripting XSS vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 fDocumentId parameter in view.php and the 2 fSearchableText parameter in /search/simpleSearch.php...

4.3CVSS5.8AI score0.01342EPSS
SaveExploits0References7
NVD
NVD
added 2006/05/10 2:10 a.m.48 views

CVE-2006-0027

Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted 1 vCal or 2 iCal Calendar properties...

7.5CVSS7.5AI score0.78679EPSS
SaveExploits2References12
NVD
NVD
added 2003/08/18 4:0 a.m.48 views

CVE-2003-0536

Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. dot dot sequences in the 1 template or 2 lng parameters...

3.6CVSS6.4AI score0.01473EPSS
SaveExploits2References3
NVD
NVD
added 2026/07/08 2:16 p.m.47 views

CVE-2026-22927

Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability...

7.8CVSS0.0017EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/09 5:17 p.m.47 views

CVE-2026-42908

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...

7.5CVSS0.00871EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/28 10:16 a.m.47 views

CVE-2026-46227

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctpsendmsgtoasoc in SCTPSENDALL The SCTPSENDALL path in sctpsendmsg iterates ep-asocs with listforeachentrysafe, which caches the next entry in @tmp before the loop body runs. The body calls...

7.8CVSS0.00104EPSS
SaveExploits0References23
NVD
NVD
added 2026/05/25 4:16 p.m.47 views

CVE-2026-9470

A security vulnerability has been detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This affects the function confirmloggedin of the file studenttrans.php. Such manipulation of the argument FIRSTNAME/LastName/EMAIL leads to sql injection. It is possibl...

7.5CVSS0.00319EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/17 7:16 a.m.47 views

CVE-2026-8736

A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the function request.getParameter of the file LocalFileClient.java of the component RestController. Performing a manipulation of the argument uniqueFileName results in path traversal. The attack may be...

4.3CVSS0.00216EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/15 3:16 a.m.47 views

CVE-2025-66660

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVCHECKTACOMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior...

1.8CVSS0.00101EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/14 9:16 p.m.47 views

CVE-2026-44700

Elixir WebRTC is an Elixir implementation of the W3C WebRTC API. Prior to 0.15.1 and 0.16.1, missing DTLS peer certificate fingerprint validation in the DTLS client active role removes one side of WebRTC's mutual authentication. The bug is not independently exploitable for media interception in...

8.7CVSS0.00255EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/12 6:17 p.m.47 views

CVE-2026-42141

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.1, an authenticated Server-Side Request Forgery SSRF vulnerability in the Xibo CMS allows users with Library upload permissions to make arbitrary HTTP requests fr...

7.7CVSS0.00369EPSS
SaveExploits1References1
NVD
NVD
added 2026/05/12 7:16 a.m.47 views

CVE-2026-0541

ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if a...

7.3CVSS0.00096EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/12 6:16 a.m.47 views

CVE-2026-41530

The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation feature enabled, and a product user tries to extract an archive file which has a crafted file name,...

4.6CVSS0.0015EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/11 11:20 p.m.47 views

CVE-2026-8345

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this issue is the function sub445E7C of the file /goform/singlePortForward. Such manipulation of the argument ipaddress leads to command injection. It is possible to launch the attack remotely. The...

8.8CVSS0.03156EPSS
SaveExploits1References5
NVD
NVD
added 2026/05/11 10:22 p.m.47 views

CVE-2026-43873

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite/cloneClient.json.php echoes the local CloneSite shared secret $objClone-myKey, a constant md5$global'systemRootPath' . $global'salt' into the HTTP response body on every unauthenticated request. T...

7.5CVSS0.00255EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/11 7:16 p.m.47 views

CVE-2026-42866

Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's writetxt, writecsv, writejson, and commented-but-shipping scanfile helpers open their output as openf"user.", where user comes unsanitized from the -u CLI flag or any line of a -U usernames file. A userna...

6.7CVSS0.00145EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/11 6:16 p.m.47 views

CVE-2026-42860

The Open edx Enterprise Service app provides enterprise features to the Open edX platform. From 7.0.2 to 7.0.4, the syncproviderdata endpoint in SAMLProviderDataViewSet fetches SAML metadata from a URL stored in SAMLProviderConfig.metadatasource. An authenticated user with the Enterprise Admin ro...

8.5CVSS0.00301EPSS
SaveExploits1References1
NVD
NVD
added 2026/05/11 4:17 p.m.47 views

CVE-2026-44197

Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisions of the page through the revision compare view if they knew the primary key of two revisions. This could potentially result in...

6.5CVSS0.00204EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/10 11:16 p.m.47 views

CVE-2026-8250

A vulnerability has been found in Open5GS up to 2.7.7. This affects the function smfn4buildqosflowtomodifylist of the file /src/smf/n4-build.c of the component SMF. Such manipulation leads to denial of service. The attack can be executed remotely. The exploit has been disclosed to the public and...

6.5CVSS0.00372EPSS
SaveExploits1References5
NVD
NVD
added 2026/05/10 1:16 p.m.47 views

CVE-2022-50964

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via...

6.1CVSS0.00252EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/10 6:16 a.m.47 views

CVE-2026-7263

In PHP versions 8.4. before 8.4.21 and 8.5. before 8.5.6, DOMNode::C14N method may process the XML data incorrectly, causing a circular linked list in the data structure representing the XML document. This may cause subsequent processing of the XML document to enter infinite loop, causing denial ...

7.5CVSS0.00353EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/08 2:16 p.m.47 views

CVE-2026-43302

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Set DMA segment size to avoid debug warnings When using V3D rendering with CONFIGDMAAPIDEBUG enabled, the kernel occasionally reports a segment size mismatch. This is because 'maxsegsize' is not set. The kernel defaults ...

5.5CVSS0.00123EPSS
SaveExploits0References7
NVD
NVD
added 2026/05/08 10:16 a.m.47 views

CVE-2026-7650

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the e2pdf-download shortcode in all versions up to, and including, 1.32.17. This is due to insufficient input sanitization and output escaping on the shortcode...

6.4CVSS0.00244EPSS
SaveExploits0References6
NVD
NVD
added 2026/05/08 4:16 a.m.47 views

CVE-2026-42208

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An...

9.8CVSS0.8942EPSS
SaveExploits8References6
NVD
NVD
added 2026/05/07 6:16 a.m.47 views

CVE-2026-7252

The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the unscheduledoriginalfiledeletion function in all versions up to, and including, 4.5.2 Th...

8.1CVSS0.0095EPSS
SaveExploits0References9
NVD
NVD
added 2026/05/06 12:16 p.m.47 views

CVE-2026-43256

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access in vfeisrregupdate vfeisr iterates using MSMVFEIMAGEMASTERSNUM7 as the loop bound and passes the index to vfeisrregupdate. However, vfe-line array is defined with VFELINENUMMAX4:...

7.8CVSS0.00129EPSS
SaveExploits0References6
NVD
NVD
added 2026/05/05 12:16 p.m.47 views

CVE-2026-43529

OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed function that allows local attackers to bypass workspace boundary checks. An attacker with workspace write access can race-condition swap the target file between validation and...

2.5CVSS0.00079EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/04 8:16 a.m.47 views

CVE-2026-7741

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be us...

6.5CVSS0.00192EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/03 11:16 p.m.47 views

CVE-2026-7707

A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udrnudrdrhandlesubscriptioncontext of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the argument pei results in denial of service. The attack can be launched remotely. The exploit has been made...

5.3CVSS0.00407EPSS
SaveExploits0References7
NVD
NVD
added 2026/04/22 9:17 p.m.47 views

CVE-2026-40882

OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.0, the Velbus asset import path parses attacker-controlled XML without explicit XXE hardening. An authenticated user who can call the import endpoint may trigger XML external entity processing, which can lead to...

7.6CVSS0.00258EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/22 1:16 p.m.47 views

CVE-2026-4115

A vulnerability was detected in PuTTY 0.83. Affected is the function eddsaverify of the file crypto/ecc-ssh.c of the component Ed25519 Signature Handler. The manipulation results in improper verification of cryptographic signature. The attack may be performed from remote. The attack requires a hi...

6.3CVSS0.00534EPSS
SaveExploits1References9
NVD
NVD
added 2025/11/26 2:15 a.m.47 views

CVE-2025-66020

Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJIREGEX used in the emoji action is vulnerable to a Regular Expression Denial of Service ReDoS attack. A short, maliciously crafted string e.g., 100 characters can cause the regex engine to consume excessive CPU...

7.5CVSS0.00326EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/20 4:15 p.m.47 views

CVE-2025-40017

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...

0.00219EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/09 8:15 a.m.47 views

CVE-2025-11522

The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeover in all versions up to, and including, 2.7. This is due to insufficient user validation in the searchandgoelatedcheckfacebookuser function This makes it possible for...

9.8CVSS0.00522EPSS
SaveExploits0References2
Total number of security vulnerabilities5000