Lucene search
+L

380172 matches found

NVD
NVD
added last week7 views

CVE-2026-18171

Docker Sandboxes sbx applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its shared-export path, so unprivileged cod...

5.7CVSS0.00105EPSS
SaveExploits0References2
NVD
NVD
added last week6 views

CVE-2025-59324

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

9.1CVSS0.0015EPSS
SaveExploits0References3
NVD
NVD
added last week8 views

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

5.5CVSS0.00114EPSS
SaveExploits0References2
NVD
NVD
added last week8 views

CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

7.8CVSS0.00109EPSS
SaveExploits0References2
NVD
NVD
added last week7 views

CVE-2025-59322

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext...

7.5CVSS0.0036EPSS
SaveExploits0References3
NVD
NVD
added last week6 views

CVE-2025-59323

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cryptographic details. Crafted DataStore contents can impact service availability and/or allow for code execution in the...

8.4CVSS0.00104EPSS
SaveExploits0References3
NVD
NVD
added last week7 views

CVE-2025-59321

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...

9.8CVSS0.00535EPSS
SaveExploits0References3
NVD
NVD
added last week7 views

CVE-2025-59320

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM...

4.6CVSS0.00181EPSS
SaveExploits0References3
NVD
NVD
added last week7 views

CVE-2025-59319

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value. A crafted Linux partition could be inserted ahead of this intended target, allowing for code execution in the...

7.2CVSS0.00461EPSS
SaveExploits0References3
NVD
NVD
added last week11 views

CVE-2026-67285

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

9.2CVSS0.00375EPSS
SaveExploits0References1
NVD
NVD
added last week9 views

CVE-2026-47230

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php mode filerenamesave shares the same root-cause shape as the cross-folder move bug 05-documents-cross-folder-move-idor.md: the top-level rights check at lines 79-89 validates hasUploadRight on...

6.5CVSS0.00174EPSS
SaveExploits0References1
NVD
NVD
added last week10 views

CVE-2026-47232

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

4.3CVSS0.00105EPSS
SaveExploits0References3
NVD
NVD
added last week8 views

CVE-2026-47231

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls...

8.1CVSS0.00212EPSS
SaveExploits0References1
NVD
NVD
added last week9 views

CVE-2026-47227

Admidio is an open-source user management solution. modules/categories.php checks that the supplied type parameter ANN, EVT, ROL, USF, … corresponds to a module the actor administers. The follow-up "is this specific category editable by me" check at lines 56-61 is dead code because it compares...

6.5CVSS0.00235EPSS
SaveExploits0References1
NVD
NVD
added last week10 views

CVE-2026-47228

Admidio is an open-source user management solution. modules/registration.php mode sendlogin regenerates a random password for useruuidassigned, stores its bcrypt hash in admusers.usrpassword, and emails the cleartext to that user. Every other state-changing mode in the same file assignmember,...

5.2CVSS0.00108EPSS
SaveExploits0References1
NVD
NVD
added last week10 views

CVE-2026-47229

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/sso/clients.php validates an admcsrftoken on every state-changing branch except enable. The enable case loads the SAML or OIDC client by UUID, calls $client-enable$enabled, and persists the new state with no toke...

5.4CVSS0.00095EPSS
SaveExploits0References1
NVD
NVD
added last week9 views

CVE-2026-16999

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17...

6.3CVSS0.00128EPSS
SaveExploits0References1
NVD
NVD
added last week9 views

CVE-2025-59327

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

7.5CVSS0.0015EPSS
SaveExploits0References3
NVD
NVD
added last week6 views

CVE-2025-59326

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

9.8CVSS0.00448EPSS
SaveExploits0References3
NVD
NVD
added last week10 views

CVE-2025-59325

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of secrets and cryptographic details...

7.5CVSS0.00166EPSS
SaveExploits0References3
NVD
NVD
added last week7 views

CVE-2026-71407

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...

5.6CVSS0.00494EPSS
SaveExploits0References1
NVD
NVD
added last week6 views

CVE-2026-70467

A server-side request forgery ssrf vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all...

3.8CVSS0.00257EPSS
SaveExploits0References1
NVD
NVD
added last week8 views

CVE-2026-71408

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via...

5.3CVSS0.00556EPSS
SaveExploits0References1
NVD
NVD
added last week7 views

CVE-2026-70468

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker ...

8.1CVSS0.00587EPSS
SaveExploits0References1
NVD
NVD
added last week6 views

CVE-2026-70466

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via...

5.3CVSS0.00309EPSS
SaveExploits0References1
NVD
NVD
added last week8 views

CVE-2026-47226

Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload rights on any one folder can permanently delete files from folders where they have only view access. The authorization check at the top of modules/documents-files.php evaluates...

6.5CVSS0.00203EPSS
SaveExploits0References2
NVD
NVD
added last week9 views

CVE-2026-53996

NetBSD's hdaudio4 driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIOFGRPSETCONFIG ioctl without elevated permissions by exploiting the absence of an access check on /dev/hdaudioN device nodes. Attacker...

7.3CVSS0.00094EPSS
SaveExploits0References4
NVD
NVD
added last week6 views

CVE-2026-57858

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close th...

9.3CVSS0.00415EPSS
SaveExploits1References3
NVD
NVD
added last week11 views

CVE-2026-26035

An Improper Authentication vulnerability CWE-287 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthenticated attacker to login into the Fortiweb...

9.8CVSS0.0051EPSS
SaveExploits0References1
NVD
NVD
added last week11 views

CVE-2026-70465

A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute...

8.1CVSS0.00548EPSS
SaveExploits0References1
NVD
NVD
added last week12 views

CVE-2026-70560

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS0.00165EPSS
SaveExploits0References3
NVD
NVD
added last week6 views

CVE-2026-17008

The Quick Paypal Payments WordPress plugin through 5.7.50 does not verify the paid amount, receiver, or payment status in its PayPal IPN handler and marks an order paid on an order-token match alone, so a buyer who pays an arbitrary small amount can have a full-price order marked paid...

5.3CVSS0.00111EPSS
SaveExploits0References1
NVD
NVD
added last week7 views

CVE-2026-16990

The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount...

5.3CVSS0.00194EPSS
SaveExploits0References1
NVD
NVD
added last week8 views

CVE-2026-16747

The Kirki WordPress plugin before 6.2.1 does not properly authorise its front-end form submission REST routes and passes attacker-controlled input through shortcode execution, allowing unauthenticated users to run any shortcode registered on the site, which on a default install leads to disclosur...

6.5CVSS0.0022EPSS
SaveExploits0References1
NVD
NVD
added last week6 views

CVE-2026-18044

The Estatik Real Estate Plugin WordPress plugin before 4.3.4 does not validate the same recipient list that it later uses to address the message sent by its property request form, allowing unauthenticated users to send emails to arbitrary recipients with arbitrary subject, body and Reply-To on...

3.7CVSS0.001EPSS
SaveExploits0References1
NVD
NVD
added last week7 views

CVE-2026-15213

The Welcart e-Commerce WordPress plugin before 2.11.33 does not verify the authenticity of its convenience-store / bank-transfer settlement callback: an unauthenticated request can flip an order from unpaid to settled purely from an order number and a status flag, with no signature, amount, or...

5.3CVSS0.00111EPSS
SaveExploits0References1
NVD
NVD
added last week10 views

CVE-2026-16621

The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that payment actually succeeded before completing an order in its PayPal return handler: it reads attacker-controlled parameters, performs no amount comparison and no order-ownership check, and completes t...

5.3CVSS0.00114EPSS
SaveExploits0References1
NVD
NVD
added last week7 views

CVE-2026-15045

The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkou...

6.5CVSS0.00195EPSS
SaveExploits0References1
NVD
NVD
added last week6 views

CVE-2026-11325

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...

8.8CVSS0.00512EPSS
SaveExploits0References1
NVD
NVD
added last week7 views

CVE-2026-68868

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...

6.5CVSS0.0057EPSS
SaveExploits0References3
NVD
NVD
added last week9 views

CVE-2026-64955

When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV files arbitrary execution. Velociraptor fails to sanitize such cells when exporting to CSV from various places such as the GUI, offline collector or data exports. It is not...

6.1CVSS0.00224EPSS
SaveExploits0References1
NVD
NVD
added last week7 views

CVE-2026-64951

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile function...

3.5CVSS0.00163EPSS
SaveExploits0References1
NVD
NVD
added last week10 views

CVE-2026-67284

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.3 - Authenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on files owned by other users...

5.3CVSS0.00207EPSS
SaveExploits0References1
NVD
NVD
added last week9 views

CVE-2026-64952

The huntdelete VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only COLLECTCLIENT usually assigned to the "investigator" role instead of the "DELETERESULTS" permission usually only assigned to "administrators"...

6.5CVSS0.00174EPSS
SaveExploits0References1
NVD
NVD
added last week8 views

CVE-2026-18663

A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...

5.9CVSS0.00397EPSS
SaveExploits0References2
NVD
NVD
added last week10 views

CVE-2026-18652

Velociraptor allows reading Stacked result sets from the GUI. Velociraptor's multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes. In particular, a...

4.9CVSS0.00222EPSS
SaveExploits0References1
NVD
NVD
added last week8 views

CVE-2026-67283

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.2 - Unauthenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on every file managed within the extension...

6.9CVSS0.00247EPSS
SaveExploits0References1
NVD
NVD
added last week13 views

CVE-2026-67282

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model...

10CVSS0.00568EPSS
SaveExploits0References1
NVD
NVD
added last week9 views

CVE-2026-19566

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any prefix length matching 0|1-90-9 and passes it to width2bits, which builds the mask as '1' x $width + 8, one character per bit. The inc...

7.5CVSS0.0035EPSS
SaveExploits0References4
NVD
NVD
added last week7 views

CVE-2026-19426

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...

8.8CVSS0.00297EPSS
SaveExploits0References2
Total number of security vulnerabilities380172