Lucene search
+L

417921 matches found

CVE
CVE
•added 2026/10/09 9:15 a.m.•12 views

CVE-2026-62049

The Crocoblock JetBlocks For Elementor WordPress plugin (versions

6.5CVSS5.7AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/09 9:15 a.m.•17 views

CVE-2026-78025

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Missing Authentication for Critical Function vulnerability (CWE-306). An unauthenticated attacker with remote access can exploit this flaw to achieve Information disclosure , Protection mechanism byp...

7.5CVSS5.8AI score0.00404EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 9:10 a.m.•20 views

CVE-2026-78024

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). A high privileged attacker with remote access could exploit this flaw to cause information disclosure , protection mechanism bypass , server-side...

8.7CVSS5.8AI score0.00195EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 9:06 a.m.•19 views

CVE-2026-78023

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . No specific exploi...

8.8CVSS5.8AI score0.00186EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 9:05 a.m.•21 views

CVE-2026-107935

A path traversal vulnerability exists in gvproxy , the network forwarder component of the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint fails to validate caller-supplied socket paths, which could allow an attacker to delete arbitrary files on the host system. E...

9.3CVSS5.9AI score0.00298EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/09 8:59 a.m.•21 views

CVE-2026-78022

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to a Not Failing Securely ('Failing Open') condition. This flaw occurs when a security control fails in a manner that permits access rather than denying it. A low privileged attacker with remote access co...

8.1CVSS5.8AI score0.00198EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:55 a.m.•47 views

CVE-2026-107655

A vulnerability exists in CUPS where improper handling of specific IPP attributes while processing embedded job ticket comments leads to an unhandled null pointer dereference . An unauthenticated attacker capable of submitting jobs to a shared printer queue can exploit this by sending a crafted I...

4CVSS5.5AI score0.00128EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/09 8:55 a.m.•14 views

CVE-2026-78021

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to a Generation of Error Message Containing Sensitive Information (CWE-209). An unauthenticated attacker with remote access can exploit this flaw to cause information disclosure and information exposur...

5.3CVSS5.8AI score0.00179EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:51 a.m.•24 views

CVE-2026-78020

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains an Improper Certificate Validation vulnerability (CWE-295). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Remote execution , Information disclosure , and Denia...

8.8CVSS5.9AI score0.0018EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:45 a.m.•25 views

CVE-2026-78019

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Inclusion of Functionality from Untrusted Control Sphere (CWE-829). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges , Filesystem access , and ...

8.8CVSS5.9AI score0.00347EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:42 a.m.•21 views

CVE-2026-78018

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , is vulnerable to an Initialization of a Resource with an Insecure Default (CWE-1188). This flaw could allow a low privileged attacker with local access to cause information disclosure . To remediate this vulnerabilit...

7.1CVSS5.7AI score0.00089EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:38 a.m.•17 views

CVE-2026-78017

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to an Improper Check for Unusual or Exceptional Conditions vulnerability (CWE-754). A high privileged attacker with remote access could exploit this flaw to achieve Information tampering and a Protection...

3.8CVSS5.8AI score0.00203EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:34 a.m.•16 views

CVE-2026-78016

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could exploit this flaw to cause Information exposure and Information tampering . No specific...

4.3CVSS5.8AI score0.00159EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:30 a.m.•29 views

CVE-2026-78015

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , is affected by a Use of Less Trusted Source vulnerability (CWE-348). An unauthenticated attacker with remote access could potentially exploit this flaw to cause information tampering . No specific exploit details or ...

5.3CVSS5.8AI score0.001EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:26 a.m.•16 views

CVE-2026-78013

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Initialization of a Resource with an Insecure Default (CWE-1188). A high privileged attacker with local access could exploit this flaw to cause a Denial of service , Information disclosure , and Pro...

6.3CVSS5.7AI score0.00105EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:22 a.m.•23 views

CVE-2026-76779

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Improper Restriction of Excessive Authentication Attempts (CWE-307). An unauthenticated attacker with remote access can exploit this flaw to bypass protection mechanisms, achieve Elevation of privil...

9.8CVSS5.8AI score0.00269EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:17 a.m.•24 views

CVE-2026-104635

The elixir-protobuf library (version 0.8.0 and onward) is vulnerable to uncontrolled recursion during JSON decoding. Specifically, the Protobuf.JSON.decode/3, Protobuf.JSON.decode!/3, and Protobuf.JSON.from_decoded/3 functions fail to increment or check the depth counter when processing user-defi...

8.2CVSS6AI score0.00387EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/09 8:16 a.m.•19 views

CVE-2026-76769

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to a Missing Authorization vulnerability. A low-privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . To mitigate this risk, it is recommended to update the ...

8.8CVSS5.8AI score0.00189EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/09 8:06 a.m.•16 views

CVE-2026-84220

The Kirki WordPress plugin prior to version 6.3.2 is vulnerable to unauthenticated arbitrary shortcode execution . The issue occurs because the plugin fails to prevent the execution of shortcodes contained within comments when they are rendered, and it displays these comments regardless of their ...

4.8CVSS5.7AI score0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/09 8:06 a.m.•19 views

CVE-2026-84224

The Kirki WordPress plugin versions prior to 6.3.2 is vulnerable to a Blind SSRF flaw. The issue exists because the plugin fails to validate the host of a URL provided via a Remote Template URL before fetching it. This allows users with editor-level access or higher to force the site to issue req...

4.1CVSS5.7AI score0.00179EPSS
SaveExploits0References1
Rows per page
Query Builder