|
3731
|
8.7 |
HIGH
Network
|
-
|
-
|
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Combined with the bridge's…
|
CWE-693
Protection Mechanism Failure
|
CVE-2026-47135
|
2026-06-13 01:03 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3732
|
10.0 |
CRITICAL
Network
|
-
|
-
|
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the combination nesting: t…
|
CWE-913
Improper Control of Dynamically-Managed Code Resources
|
CVE-2026-47137
|
2026-06-13 01:03 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3733
|
8.6 |
HIGH
Network
|
-
|
-
|
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target o…
|
CWE-693
Protection Mechanism Failure
|
CVE-2026-47209
|
2026-06-13 01:03 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3734
|
8.0 |
HIGH
Network
|
microsoft
|
sharepoint_server
|
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
|
CWE-285
Improper Authorization
|
CVE-2026-47298
|
2026-06-13 01:00 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3735
|
8.8 |
HIGH
Network
|
-
|
-
|
The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operat…
|
CWE-1284
Improper Validation of Specified Quantity in Input
|
CVE-2026-12059
|
2026-06-13 01:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3736
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim …
|
CWE-749
Exposed Dangerous Method or Function
|
CVE-2026-12060
|
2026-06-13 01:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3737
|
4.9 |
MEDIUM
Network
|
-
|
-
|
The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended director…
|
CWE-22
Path Traversal
|
CVE-2026-11844
|
2026-06-13 01:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3738
|
7.2 |
HIGH
Network
|
-
|
-
|
The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute …
|
CWE-78
OS Command
|
CVE-2026-11845
|
2026-06-13 01:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3739
|
8.1 |
HIGH
Network
|
-
|
-
|
The
iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit this vulnerability to del…
|
CWE-22
Path Traversal
|
CVE-2026-11846
|
2026-06-13 01:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3740
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The
iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerability to create direc…
|
CWE-22
Path Traversal
|
CVE-2026-11847
|
2026-06-13 01:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|