Lucene search
+L

398880 matches found

NVD
NVD
•added 2026/09/15 10:17 p.m.•17 views

CVE-2026-76866

Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...

8.6CVSS0.00572EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 p.m.•12 views

CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboottimerset.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submitting crafted input to the affected endpoint to corrupt stack memory...

8.6CVSS0.00572EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 p.m.•16 views

CVE-2026-76867

Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability in routing and NAT configuration CGI components including routingtabaddcgi, routingtablelistshowcgi, routepolicyaddcgi, and routepolicyparameshowcgi. Attackers can inject persistent script payloads...

5.4CVSS0.00235EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 p.m.•15 views

CVE-2026-76864

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

4.8CVSS0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 p.m.•16 views

CVE-2026-76860

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wakeupset.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

8.8CVSS0.00549EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 p.m.•17 views

CVE-2026-76862

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntoolsstartsetcgi, ntoolstcpdumpstartsetcgi, exedefault, and ntoolsproc components. Attackers can inject crafted arguments into these tcpdump launch routines ...

8.8CVSS0.00549EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 p.m.•16 views

CVE-2026-76859

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the userpassshow.cgi component. Low-privilege attackers can exploit this flaw via uiconfig2.xml and misc.js to disclose router credentials...

7.1CVSS0.0036EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 p.m.•16 views

CVE-2026-76863

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the modqosbandwidth plan.json handling within filterconnsdumpcgi.c and IGDCgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond their...

5.3CVSS0.00281EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 p.m.•15 views

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntoolstcpdumpstartset.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...

8.8CVSS0.00676EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:16 p.m.•14 views

CVE-2026-76855

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7webauthlogdumpcgi.c, auditgetcgi.c, and moddispatchauth/plan.json. Attackers can query these audit components to obtain other users' session and browsing history data...

7.1CVSS0.00392EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:16 p.m.•19 views

CVE-2026-76857

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddnswanlistshow.cgi endpoint and related DDNSsetcgi, IGDGetCgiHandler, and IGDCgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing...

7.1CVSS0.0036EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:16 p.m.•18 views

CVE-2026-76854

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7webauthusershow.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated network...

7.1CVSS0.00391EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:16 p.m.•15 views

CVE-2026-76858

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddnswanlistshow.cgi caused by unsafe eval handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewed...

4.8CVSS0.00297EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:16 p.m.•18 views

CVE-2026-76853

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parameputfile.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in putparamefilecgi.c to bypass restricted restore archive handling...

8.1CVSS0.00256EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:16 p.m.•16 views

CVE-2026-76856

Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wanconfigsetcgi, wannumsetcgi, and lanipchangecgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network configuration...

8.1CVSS0.0019EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:16 p.m.•20 views

CVE-2026-73807

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions...

9.8CVSS0.00778EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/15 10:16 p.m.•14 views

CVE-2026-76852

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtdwrite allowing forged firmware authenticity checks. Attackers can exploit putfile.cgi and checkimageuuid.c to bypass firmware signature validation and load unauthorized firmware images...

8.8CVSS0.00271EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:16 p.m.•27 views

CVE-2026-73444

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header IP-AH authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the...

5.3CVSS0.00299EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 10:16 p.m.•15 views

CVE-2026-73437

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper address, and the relay agent would forward it to...

9.6CVSS0.00207EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 10:16 p.m.•17 views

CVE-2026-61560

@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode SSE=true exposes all MCP tools without any authentication. The uploadmarkdown tool reads arbitrary files from the server's local filesystem via an unsanitized filepath parameter and...

9.8CVSS0.00809EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/15 10:16 p.m.•15 views

CVE-2026-10149

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
NVD
NVD
•added 2026/09/15 10:16 p.m.•19 views

CVE-2026-10144

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser function in packages/core/src/server/open.ts passes the URL...

7.8CVSS0.01648EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/15 10:16 p.m.•15 views

CVE-2026-10145

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
NVD
NVD
•added 2026/09/15 10:16 p.m.•14 views

CVE-2026-10150

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
NVD
NVD
•added 2026/09/15 9:16 p.m.•11 views

CVE-2026-92237

Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...

6.5CVSS0.00371EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 9:16 p.m.•9 views

CVE-2026-92234

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

5.4CVSS0.00314EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/15 9:16 p.m.•12 views

CVE-2026-92000

adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives with highly compressible entries declaring zero size to exhaust memory and cause denial of service...

8.7CVSS0.00684EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00339EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91939

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize without allowedclasses restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads ...

9.8CVSS0.00978EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/15 9:16 p.m.•12 views

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

3.1CVSS0.00247EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•25 views

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS0.00377EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•11 views

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

8.3CVSS0.00228EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•12 views

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS0.00228EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•13 views

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00252EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•11 views

CVE-2026-91744

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

5.3CVSS0.00232EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•12 views

CVE-2026-91739

Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

4.2CVSS0.00193EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91738

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS0.00339EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91741

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00444EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•13 views

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS0.00248EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91742

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. Chromium security severity: Medium...

4.8CVSS0.00195EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00339EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•13 views

CVE-2026-91735

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00311EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00339EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•26 views

CVE-2026-91728

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS0.00407EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91732

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

8.1CVSS0.00261EPSS
SaveExploits1References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•12 views

CVE-2026-91730

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS0.00227EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•12 views

CVE-2026-91731

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00444EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•10 views

CVE-2026-91733

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00315EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•11 views

CVE-2026-91729

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS0.00339EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 9:16 p.m.•13 views

CVE-2026-91734

Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

7.4CVSS0.00104EPSS
SaveExploits0References2
Total number of security vulnerabilities398880