Lucene search
+L

408973 matches found

CVE
CVE
•added 2026/09/24 8:58 p.m.•31 views

CVE-2026-14441

A logic flaw in the Java cache key handling of Brocade SANnav allows for improper identifier resolution when processing specific user account structures. This vulnerability exists in SANnav versions before 3.0.1a . The issue has been remediated by updating the internal comparison routines to ensu...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 8:40 p.m.•36 views

CVE-2026-14442

Brocade SANnav versions before 3.0.1a are susceptible to an information exposure vulnerability in the job scheduling component . When scheduled support save jobs or related operational tasks are executed, the system fails to properly mask sensitive parameters, leading to the logging of cleartext ...

6.9CVSS5.9AI score0.00157EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 8:39 p.m.•25 views

CVE-2026-95699

The iSteamX mobile application (MrSteam) contains an improper isolation or compartmentalization vulnerability due to a flaw in its AWS policy . This policy allowed authenticated users to access wildcard MQTT topics , potentially exposing other users' device data and profile information. An attack...

9.6CVSS5.8AI score0.00296EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/24 8:30 p.m.•23 views

CVE-2026-97368

A weakness exists in chillzhuang SpringBlade versions up to 5.0.2 , specifically within the UserServiceImpl.userInfo function located in the blade-service/blade-system/src/main/java/org/springblade/system/service/impl/UserServiceImpl.java file of the user-auth-info Endpoint . An attacker can remo...

7.5CVSS6.2AI score0.0023EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/24 8:29 p.m.•30 views

CVE-2026-93353

The copyparty SFTP front end contains a volume restriction bypass vulnerability. Authenticated SFTP users can exploit three specific handlers—_mkdir , _rmdir , and _chattr —to bypass xvol volflag enforcement. The root cause is that these handlers construct destination paths using vfs.get(), vn.ca...

3.1CVSS6AI score0.00274EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/24 8:28 p.m.•36 views

CVE-2026-82585

The Botslab G980H dash camera firmware contains a vulnerability where it transmits sensitive information over unencrypted HTTP and RTSP connections . An attacker capable of intercepting communications on the device's WiFi network could capture stored recordings, live video, location data, images,...

7.1CVSS5.8AI score0.00125EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:25 p.m.•32 views

CVE-2026-79959

The Botslab G980H dash camera firmware is vulnerable to use of hard-coded credentials because it contains a root account password that cannot be modified by the user. An attacker with physical access to the device or the ability to obtain the firmware can recover these credentials to gain root ac...

7CVSS5.8AI score0.00174EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:21 p.m.•38 views

CVE-2026-82708

The Botslab G980H dash camera firmware contains a path traversal vulnerability within its HTTP server . An attacker with access to the device's WiFi network can submit a crafted request to bypass directory restrictions and access files on the device's removable storage . This could lead to the ex...

7.1CVSS5.8AI score0.00214EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:17 p.m.•29 views

CVE-2026-87118

The Botslab G980H dash camera firmware is susceptible to an out-of-bounds write vulnerability within its command processing functionality . An authenticated attacker with adjacent network access can submit crafted command data to corrupt memory. This could lead to the disruption of the authentica...

6.9CVSS5.9AI score0.00235EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:15 p.m.•29 views

CVE-2026-97366

A security flaw exists in jhen0409 react-native-debugger versions up to 0.14.0 . The vulnerability is located in the openDevTools function within the electron/window.js file of the Open in Editor Handler component. By manipulating the host argument, an attacker can trigger an os command injection...

7.5CVSS6.3AI score0.01154EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/24 8:14 p.m.•41 views

CVE-2026-81630

The Botslab G980H dash camera firmware is vulnerable due to insufficient verification of data authenticity during the firmware update process. The device retrieves updates via an unprotected connection and validates them using a supplied integrity value rather than a trusted cryptographic signatu...

9.2CVSS6AI score0.00194EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:11 p.m.•31 views

CVE-2026-75558

The Botslab G980H dash camera firmware contains a vulnerability due to the use of a hard-coded cryptographic key and initialization vector. This flaw is used to protect WiFi credentials communicated by the device. An attacker capable of extracting cryptographic material from the firmware and obta...

6CVSS5.9AI score0.00162EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:07 p.m.•37 views

CVE-2026-84403

The Botslab G980H dash camera firmware contains a vulnerability where it fails to require authenticated pairing or client binding for Bluetooth Low Energy (BLE) communications and GATT characteristics . This allows an unauthenticated attacker within physical Bluetooth range to intercept or retrie...

6.9CVSS5.8AI score0.00122EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:06 p.m.•34 views

CVE-2026-14443

Brocade SANnav versions before 3.0.1a are vulnerable to incomplete log sanitization during bulk IPsec policy collection. This flaw allows extension switch pre-shared keys to be written to system logs. Attackers with read access to container logs or support archives can retrieve these keys, potent...

8.4CVSS5.7AI score0.00112EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 8:02 p.m.•32 views

CVE-2026-82716

The Botslab G980H dash camera firmware contains a vulnerability where diagnostic logs generated during the support process include sensitive configuration information , such as WiFi credentials . These logs remain accessible on removable storage after the support operation is finished. An unauthe...

5.1CVSS5.8AI score0.00169EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:00 p.m.•25 views

CVE-2026-97365

A path traversal vulnerability exists in chonkie-inc littrs versions 0.6.1 and 0.6.2 . The flaw is located in the Sandbox::mount function within the file crates/littrs/src/lib.rs , where manipulating the relative argument can allow an attacker to traverse paths. This vulnerability can be triggere...

6.5CVSS6.3AI score0.00353EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/24 8:00 p.m.•28 views

CVE-2026-62956

Technical details for CVE-2026-62956 are not publicly available in the provided documents. Action: monitor for updates.

SaveExploits0References1
CVE
CVE
•added 2026/09/24 7:59 p.m.•35 views

CVE-2026-88956

The Botslab G980H dash camera firmware is vulnerable to an authentication vulnerability involving the root account accessible via the device's UART interface . Because the account does not require a password, an unauthenticated attacker with physical access to the device can connect to the UART i...

7CVSS5.9AI score0.00218EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 7:58 p.m.•25 views

CVE-2026-93354

Versions of Taskview Community before 1.56.0 are vulnerable to a missing authentication flaw in the OAuth 2.0 Dynamic Client Registration endpoint. Because this endpoint is enabled by default without authentication, unauthenticated attackers can submit a POST request to obtain a client_id and cli...

8.5CVSS6.1AI score0.00265EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/24 7:55 p.m.•49 views

CVE-2026-88761

The Botslab G980H dash camera firmware contains a vulnerability where the default WiFi password is generated using predictable device information . Portions of this information are advertised by the product, potentially allowing an unauthenticated attacker within WiFi range to determine the remai...

6CVSS5.9AI score0.00169EPSS
SaveExploits0References3
Rows per page
Query Builder