|
1411
|
4.4 |
MEDIUM
Local
|
-
|
-
|
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, res…
|
CWE-124 CWE-191
Buffer Underflow Integer Underflow (Wrap or Wraparound)
|
CVE-2026-26204
|
2026-05-1 00:11 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1412
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API brute-force protection for POST /security…
|
CWE-307 CWE-362 CWE-367
mproper Restriction of Excessive Authentication Attempts Race Condition Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2026-26206
|
2026-05-1 00:11 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1413
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in print_hex_string() i…
|
CWE-121 CWE-400
Stack-based Buffer Overflow Uncontrolled Resource Consumption
|
CVE-2026-28221
|
2026-05-1 00:11 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1414
|
9.0 |
CRITICAL
Network
|
-
|
-
|
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazuh's cluster synchroniz…
|
CWE-22 CWE-73
Path Traversal External Control of File Name or Path
|
CVE-2026-30893
|
2026-05-1 00:11 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1415
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation.…
|
CWE-200 CWE-359
Information Exposure Exposure of Private Personal Information to an Unauthorized Actor
|
CVE-2026-7382
|
2026-05-1 00:09 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1416
|
8.1 |
HIGH
Network
|
-
|
-
|
Authorization bypass through User-Controlled key vulnerability in MeWare Software Development Inc. PDKS allows Privilege Abuse.
This issue affects PDKS: from V16.20200313 before VMYR_3.5.2025117.
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-7399
|
2026-05-1 00:09 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1417
|
8.1 |
HIGH
Network
|
-
|
-
|
Improper Control of Interaction Frequency vulnerability in MeWare Software Development Inc. PDKS allows Flooding.
This issue affects PDKS: from V16.20200313 before VMYR_3.5.2025117.
|
CWE-799
Improper Control of Interaction Frequency
|
CVE-2026-7402
|
2026-05-1 00:09 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1418
|
7.5 |
HIGH
Network
|
frappe
|
press
|
Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS).`press.api.account.create_api_secret` is prone to CSRF-like expl…
|
CWE-352
Origin Validation Error
|
CVE-2026-41317
|
2026-04-30 23:53 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1419
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in comm…
|
CWE-74 CWE-77
Injection Command Injection
|
CVE-2026-7469
|
2026-04-30 23:53 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1420
|
8.8 |
HIGH
Network
|
-
|
-
|
A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based…
|
CWE-119 CWE-121
Incorrect Access of Indexable Resource ('Range Error') Stack-based Buffer Overflow
|
CVE-2026-7470
|
2026-04-30 23:53 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|