|
71
|
- |
|
-
|
-
|
An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Mod…
New
|
-
|
CVE-2025-66369
|
2026-05-6 01:16 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
72
|
- |
|
-
|
-
|
Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._red…
New
|
CWE-601
Open Redirect
|
CVE-2025-61669
|
2026-05-6 01:16 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
73
|
- |
|
-
|
-
|
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.
New
|
-
|
CVE-2025-52206
|
2026-05-6 01:16 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
74
|
4.9 |
MEDIUM
Network
|
sonicwall
|
sonicos
|
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.
Update
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-0206
|
2026-05-6 01:12 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
75
|
6.8 |
MEDIUM
Adjacent
|
sonicwall
|
sonicos
|
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
Update
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2026-0205
|
2026-05-6 01:12 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
76
|
8.0 |
HIGH
Adjacent
|
sonicwall
|
sonicos
|
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
Update
|
CWE-306 CWE-1390
Missing Authentication for Critical Function Weak Authentication
|
CVE-2026-0204
|
2026-05-6 01:11 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
77
|
5.5 |
MEDIUM
Local
|
wireshark
|
wireshark
|
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4
Update
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-6525
|
2026-05-6 00:42 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
78
|
7.8 |
HIGH
Local
|
entechtaiwan
|
tvicport
|
An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests.
Update
|
CWE-20 CWE-269
Improper Input Validation Improper Privilege Management
|
CVE-2026-30769
|
2026-05-5 23:31 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
79
|
4.3 |
MEDIUM
Network
|
jenkins
|
azure_ad
|
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
Update
|
CWE-601
Open Redirect
|
CVE-2026-42525
|
2026-05-5 23:25 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
80
|
8.8 |
HIGH
Network
|
agilonhealth
|
minerva
|
An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their …
Update
|
CWE-285
Improper Authorization
|
CVE-2026-5781
|
2026-05-5 23:24 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|