Lucene search
+L

399545 matches found

NVD
NVD
•added 2026/09/22 6:17 p.m.•15 views

CVE-2026-82010

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

9.9CVSS0.00427EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•16 views

CVE-2026-82011

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthoriz...

9.1CVSS0.00553EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•16 views

CVE-2026-82003

Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the...

8.5CVSS0.0046EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•12 views

CVE-2026-77605

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

7.8CVSS0.00213EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•10 views

CVE-2026-77271

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, validatesafepath defaults its base directory to os.getcwd, and affected Confluence attachment call sites omit basedir, allowing attacker-selected writes within the working directory...

8.8CVSS0.0053EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•13 views

CVE-2026-7866

Stack-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.0 before...

10CVSS0.00311EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•12 views

CVE-2026-77274

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, validateurlforssrf has a backslash authority confusion because it interprets the authority differently from the Requests connection layer in the header-based Jira and Confluence URL...

8.8CVSS0.00324EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•13 views

CVE-2026-77252

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, caller-supplied projectsfilter and spacesfilter arguments can replace administrator-configured allowlists, and caller-provided project or space clauses can suppress the configured...

6.5CVSS0.00298EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•11 views

CVE-2026-77265

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a...

7.5CVSS0.00261EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•12 views

CVE-2026-77260

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Confluence and Jira uploadattachment implementations accept an unconstrained filepath and open the referenced server-local file. A permitted MCP caller can upload sensitive host...

8.3CVSS0.00323EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•9 views

CVE-2026-77261

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, makessrfsafehook is omitted from JiraFetcher and ConfluenceFetcher sessions created through the basic-auth and oauthpat branches. If an attacker-controlled or compromised configured...

8.5CVSS0.00321EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•12 views

CVE-2026-77267

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by processauthenticationheaders and used to construct Atlassian fetchers without calling...

8.3CVSS0.00335EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•10 views

CVE-2026-77270

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-controlled filepath values as trusted server-local paths. The server opens the selected file and uploads it to an Atlassia...

6.5CVSS0.00374EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•20 views

CVE-2026-77258

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, uploadattachment in src/mcpatlassian/confluence/attachments.py accepts a caller-controlled filepath and opens the selected server-local file without restricting it to the workspace. A...

7.7CVSS0.00327EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•14 views

CVE-2026-77250

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the user's .mcp-atlassian directory using process-default permissions. On systems with a...

6.1CVSS0.00117EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•13 views

CVE-2026-77244

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the HTTP transport accepts requests without a verified user identity and downstream fetcher construction falls back to the operator's globally configured Jira or Confluence credential...

10CVSS0.00277EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•9 views

CVE-2026-77251

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of project syntax, Confluence search uses an incomplete case-sensitive space check, and Jira boa...

8.3CVSS0.00246EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•18 views

CVE-2026-77243

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

8.8CVSS0.0036EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•17 views

CVE-2026-77242

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, validateurlforssrf checks a hostname's resolved addresses, but Requests and urllib3 resolve the hostname again when connecting. A caller can use a short-lived DNS answer that is publi...

7.5CVSS0.00293EPSS
SaveExploits1References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•12 views

CVE-2026-75723

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

10CVSS0.01166EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•11 views

CVE-2026-75721

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS0.01248EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•16 views

CVE-2026-75728

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

9.1CVSS0.01038EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•13 views

CVE-2026-75699

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS0.01248EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•15 views

CVE-2026-73369

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS0.01248EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•13 views

CVE-2026-75703

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS0.01248EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•17 views

CVE-2026-43642

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

9.2CVSS0.0096EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•18 views

CVE-2026-43643

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

8.7CVSS0.00623EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•14 views

CVE-2026-43641

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to execute arbitrary commands as root by bypassing authentication through specific parameter combinations. Attackers can...

9.8CVSS0.03026EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 6:17 p.m.•10 views

CVE-2026-18462

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional Core Libraries allows Shared Resource Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1...

7.3CVSS0.00081EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•11 views

CVE-2026-18626

Out-of-bounds Read vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.0 before 5.2., from...

6.8CVSS0.00104EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•9 views

CVE-2026-18461

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional Core Libraries allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6...

9.2CVSS0.00207EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•10 views

CVE-2026-18457

Heap-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.3 before 5.2...

8.3CVSS0.00257EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•12 views

CVE-2026-18458

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before...

6.8CVSS0.00104EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•10 views

CVE-2026-18459

Incorrect Calculation vulnerability in RTI Connext Professional Core Libraries allows Abuse Existing Functionality. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.0...

8.7CVSS0.00253EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•9 views

CVE-2026-18460

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

6.9CVSS0.00253EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•11 views

CVE-2026-11388

Double Free vulnerability in RTI Connext Professional Core Libraries allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6...

6.9CVSS0.00104EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•7 views

CVE-2026-11389

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before...

6.8CVSS0.00104EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 5:17 p.m.•12 views

CVE-2026-95818

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...

3.6CVSS0.00129EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/22 5:17 p.m.•10 views

CVE-2026-94456

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

9.1CVSS0.00522EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 5:17 p.m.•10 views

CVE-2026-94455

An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authentication middleware is bound only to an explicit list of controllers, and the enterprise controller is not on that list, so no authentication runs for these routes. The...

7.1CVSS0.00263EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 5:17 p.m.•14 views

CVE-2026-87902

An unauthenticated attacker can make getpagetemplate page-template resolution include a chosen readable local .php file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE...

8.1CVSS0.19756EPSS
SaveExploits29References3
NVD
NVD
•added 2026/09/22 5:17 p.m.•8 views

CVE-2026-85740

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, validatedaddresses in lightrag/parser/markdown/parser.py evaluates the literal resolved address with ipaddress.isglobal without consistently classifying an IPv4 address embedded in an IPv6 transition wrapper. A call...

7.1CVSS0.00217EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/22 5:17 p.m.•10 views

CVE-2026-86062

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightragwebui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with react-markdown, rehypeRaw, and skipHtml=false without an HTML sanitizer. An attacker who can add a document can store r...

6.1CVSS0.00246EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 5:17 p.m.•10 views

CVE-2026-85709

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in documentroutes.py, graphroutes.py, queryroutes.py, ollamaapi.py, and lightragserver.py. The detail=stre, detail=strexc, and equivalent...

5.3CVSS0.00386EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/22 5:17 p.m.•9 views

CVE-2026-86059

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy organization members without Git provider access can retrieve plaintext provider credentials through github.one, gitlab.one, gitea.one, and bitbucket.one because those protected procedures return full provider...

9.6CVSS0.00487EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 5:17 p.m.•9 views

CVE-2026-85734

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightragserver.py does not impose a rate limit, account lockout, delay, or counter for failed authentication attempts. A network attacker can submit password guesses at full...

9.1CVSS0.00355EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 5:17 p.m.•10 views

CVE-2026-85725

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verifypassword in lightrag/api/passwords.py compares plaintext AUTHACCOUNTS password values with Python's == operator. The comparison can return after the first mismatching byte, creating response-time differences...

5.9CVSS0.00359EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 5:17 p.m.•9 views

CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

6.5CVSS0.00357EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 5:17 p.m.•9 views

CVE-2026-83803

Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes...

7.7CVSS0.00605EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 5:17 p.m.•8 views

CVE-2026-83603

Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...

8.4CVSS0.0032EPSS
SaveExploits0References4
Total number of security vulnerabilities399545