CVE-2022-29071

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ...

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords might be leaked to other authenticated users.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Arista

Products

Cloudvision Portal

CVE-2021-46678

Vulnerability XSS in service form name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the service name field.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Pandorafms

Products

Pandora Fms

CVE-2021-46680

Vulnerability XSS in module form name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Pandorafms

Products

Pandora Fms

CVE-2021-46677

Vulnerability XSS in Event filter name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the event filter name field.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Pandorafms

Products

Pandora Fms

CVE-2026-44467

Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH remote development feature verified only whether a hostname existed in ~/.ssh/known_hosts without comparing the server's presented host key against the stored key. This allowed a network-positioned attacker to present an arbitrary SSH host key and have the connection silently accepted, enabling a man-in-the-middle attack on remote development sessions. Successful exploitation required the attacker to be in a network position to intercept SSH traffic (e.g., via ARP spoofing, rogue Wi-Fi, or DNS poisoning) and the target hostname to already have an entry in the victim's known_hosts file. This vulnerability is fixed in 1.4304.0.

CVSS 4.0 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Anthropic Anthropics

Products

Claude Desktop Claude Code

CVE-2026-44345

BentoML: Dockerfile command injection via docker.base_image

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/_internal/container/frontend/dockerfile/templates/base_v2.j2 interpolates docker.base_image raw with no escaping, newline filtering, or validation. A malicious bento.yaml with a multi-line docker.base_image value smuggles arbitrary Dockerfile directives into the generated Dockerfile, and bentoml containerize then runs docker build which executes the injected RUN directives on the victim host. This vulnerability is fixed in 1.4.39.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Bentoml

Products

Bentoml

CVE-2021-46676

Vulnerability XSS in Transaction Map name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the transactional maps name field.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Pandorafms

Products

Pandora Fms

CVE-2021-46679

Vulnerability XSS in service elements

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Pandorafms

Products

Pandora Fms

CVE-2021-46681

Vulnerability XSS in module mass operation name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via module massive operation name field.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Artica

Products

Pandora Fms

CVE-2026-34906

Server-Side Template Injection (SSTI) in Wirtualna Uczelnia

Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpoint redirectToUrl and parameter redirectUrlParameter, insufficient input validation permits injection of arbitrary template expressions that are executed on the server. Successful exploitation can allow an attacker to run remote commands, including establishing a reverse shell. This issue affects Wirtualna Uczelnia versions up to wu#2016.437.295#0#20260327_105545

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Simple Sa

Products

Wirtualna Uczelnia

CVE-2026-34907

Reflected Cross-Site Scripting (XSS) in Wirtualna Uczelnia

Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling of the locale parameter across multiple endpoints. An attacker can craft a malicious URL with JavaScript embedded in the locale parameter and send it to a victim. When the victim opens the link, the injected script will be executed in their browser. This issue affects Wirtualna Uczelnia versions up to wu#2016.437.295#0#20260327_105545

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Simple Sa

Products

Wirtualna Uczelnia

CVE-2022-34768

Synel - eHarmony Stored XSS

insert HTML / js code inside input how to get to the vulnerable input : Workers &gt; worker nickname &gt; inject in this input the code.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Supersmart

Products

Supersmart.me - Walk Through

CVE-2026-42070

MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, the mc_issue_update() function in MantisBT allows users having update_bug_threshold access (UPDATER, with default settings) to edit, change view state, and modify time tracking on bugnotes belonging to other users — bypassing the default DEVELOPER (level 55) threshold required by the dedicated mc_issue_note_update() function. This vulnerability is fixed in 2.28.2.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Mantisbt

Products

Mantisbt

CVE-2026-44346

BentoML: Dockerfile command injection via envs[*].name in bentofile.yaml

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected value in envs[*].name produces unquoted RUN directives in the BentoML-generated Dockerfile. When the victim runs bentoml containerize on the imported bento, those RUN directives execute on the host during docker build. This vulnerability is fixed in 1.4.39.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Bentoml

Products

Bentoml

CVE-2022-22786

Update package downgrade in Zoom Client for Meetings for Windows

The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process. This issue could be used in a more sophisticated attack to trick a user into downgrading their Zoom client to a less secure version.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Zoom

Products

Meetings Rooms

CVE-2026-44378

Botan: Quadratic complexity decoding BER indefinite length encodings

Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which prohibits indefinite length encodings. This vulnerability is fixed in 3.12.0.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Botan Project Randombit

Products

Botan Botan

CVE-2026-3870

Upnp AddPortMapping Buffer Overflow Causes Temporary Denial of Service in Zyxel VMG4005-B50B

A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the affected device.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zyxel

Products

Vmg4005-b50b Firmware

CVE-2026-3871

Buffer Overflow in Zyxel VMG4005‑B50B UPnP DeletePortMapping Leading to Temporary DoS

A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the affected device.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Zyxel

Products

Vmg4005-b50b Firmware

CVE-2026-10288

code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Code-projects

Products

Hotel And Tourism Reservation System

CVE-2026-10581

DedeCMS download.php base64_decode server-side request forgery

A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64_decode of the file /plus/download.php?open=1. This manipulation of the argument Link causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and may be used.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Dedecms

Products

Dedecms