|
2051
|
3.1 |
LOW
Adjacent
|
-
|
-
|
A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component BLE/WiFi. Such manipulation leads to authentication bypass b…
|
CWE-287
CWE-294
Improper Authentication
Authentication Bypass by Capture-replay
|
CVE-2026-9398
|
2026-05-27 04:57 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2052
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromPPTPUserSetting of the file /goform/PPTPUserSetting. Such manipulation of the argument delno leads to stack-b…
|
CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error')
Stack-based Buffer Overflow
|
CVE-2026-9428
|
2026-05-27 04:57 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2053
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. Performing a manipulation of the argument delno…
|
CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error')
Stack-based Buffer Overflow
|
CVE-2026-9429
|
2026-05-27 04:57 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2054
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability was determined in Tenda F1202 1.2.0.20(408). Affected by this issue is the function formGstDhcpSetSer of the file /goform/GstDhcpSetSerof. Executing a manipulation of the argument dip…
|
CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error')
Stack-based Buffer Overflow
|
CVE-2026-9430
|
2026-05-27 04:57 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2055
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument opttype leads to stack-based b…
|
CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error')
Stack-based Buffer Overflow
|
CVE-2026-9431
|
2026-05-27 04:57 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2056
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was determined in calcom cal.diy up to 4.9.4. Affected by this issue is the function getServerSideProps of the file apps/web/modules/bookings/views/bookings-single-view.getServerSideP…
|
CWE-200
CWE-284
Information Exposure
Improper Access Control
|
CVE-2026-9349
|
2026-05-27 04:54 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2057
|
3.5 |
LOW
Network
|
-
|
-
|
A vulnerability was found in vBulletin 6.x. This impacts an unknown function of the component Login. Performing a manipulation results in cross site scripting. It is possible to initiate the attack r…
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-9357
|
2026-05-27 04:54 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2058
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was determined in postcss up to 7.1.1. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead t…
|
CWE-404
CWE-674
Improper Resource Shutdown or Release
Uncontrolled Recursion
|
CVE-2026-9358
|
2026-05-27 04:54 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2059
|
5.6 |
MEDIUM
Network
|
-
|
-
|
A security vulnerability has been detected in ItzCrazyKns Vane up to 1.12.1. Affected by this issue is some unknown functionality of the file route.ts of the component API. The manipulation leads to …
|
CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function
|
CVE-2026-9371
|
2026-05-27 04:54 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2060
|
3.7 |
LOW
Network
|
-
|
-
|
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/…
|
CWE-759
CWE-760
Use of a One-Way Hash without a Salt
Use of a One-Way Hash with a Predictable Salt
|
CVE-2026-9370
|
2026-05-27 04:54 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
