Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-3322

Privilege escalation via request replaying in Lobster_pro

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.

CVSS 4.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Lobster Gmbh
Products
Lobster Pro
CVE-2024-13971

Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Lobster Lobster-world Lobster Gmbh
Products
Lobster Pro Lobster Pro Lobster Pro