|
2011
|
4.7 |
MEDIUM
Network
|
-
|
-
|
A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function getUserByWeixinCode of the file jshERP-boot/src/main/java/com/jsh/erp/service/UserService.java of …
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-8320
|
2026-05-13 01:38 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2012
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. P…
|
CWE-287
CWE-288
Improper Authentication
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2026-8321
|
2026-05-13 01:38 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2013
|
- |
|
-
|
-
|
CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in ra…
|
CWE-1188
Insecure Default Initialization of Resource
|
CVE-2026-6866
|
2026-05-13 01:38 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2014
|
4.4 |
MEDIUM
Local
|
-
|
-
|
An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a sh…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2026-7431
|
2026-05-13 01:38 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2015
|
7.8 |
HIGH
Local
|
-
|
-
|
A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM
|
CWE-362
Race Condition
|
CVE-2026-7432
|
2026-05-13 01:38 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2016
|
6.5 |
MEDIUM
Network
|
-
|
-
|
An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.
|
CWE-749
Exposed Dangerous Method or Function
|
CVE-2026-8109
|
2026-05-13 01:38 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2017
|
7.8 |
HIGH
Local
|
-
|
-
|
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2026-8110
|
2026-05-13 01:38 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2018
|
8.8 |
HIGH
Network
|
-
|
-
|
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.
|
CWE-89
SQL Injection
|
CVE-2026-8111
|
2026-05-13 01:38 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2019
|
8.8 |
HIGH
Network
|
pi-hole
|
ftldns
|
Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. In versions before 6.6.1, the `dns.interface` configuration field in Pi-hole FTL accepted newline charac…
|
CWE-93
CRLF Injection
|
CVE-2026-39849
|
2026-05-13 01:27 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2020
|
8.8 |
HIGH
Network
|
anthropic
|
claude_code
|
In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft a malicious reposi…
|
CWE-20
CWE-77
NVD-CWE-noinfo
Improper Input Validation
Command Injection
|
CVE-2026-40068
|
2026-05-13 01:21 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
