Lucene search
+L

385643 matches found

Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•15 views

PT-2026-108042

Name of the Vulnerable Software and Affected Versions Obsidian Desktop versions prior to 1.14.0 Description Insufficient sanitization of the data-background-iframe attribute allows the bypass of DOMPurify. This issue is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin,...

8.5CVSS6.3AI score0.00257EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•13 views

PT-2026-108109

Name of the Vulnerable Software and Affected Versions JHipster versions 7.0.0 through 9.3.x Description Reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database are susceptible to SQL injection. The issue occurs because the sort request parameter in paginated...

8.8CVSS6.3AI score0.00341EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•7 views

CVE-2026-84246: Buffer Copy without Checking Size of Input

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

9.8CVSS7.1AI score0.00381EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•16 views

PT-2026-108266

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A path traversal issue in the Sniffer component allows a remote attacker to execute arbitrary code. Path traversal is a flaw that allows an attacker to access files and...

9.8CVSS6.8AI score0.0058EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•16 views

PT-2026-108161

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description The WfpMonitor kernel driver contains an improper validation of user-supplied pointers. Specifically, certain METHOD NEITHER IOCTL handlers dereference user-controlled pointer...

5.1CVSS5.7AI score0.00111EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•12 views

PT-2026-108160

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated high-privileged user can execute arbitrary commands with root privileges due to a command injection flaw in the SUID-root ssh config wrapper component. This occurs when...

7.2CVSS6.4AI score0.02249EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•6 views

CVE-2026-84274: Exposure of Sensitive Information to an Unauthorized Actor

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References3
Redos
Redos
•added 2026/10/08 12:00 a.m.•7 views

ROS-20261008-73-0167

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.4CVSS8.4AI score0.00139EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/08 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-98315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfsnonresidentattrshrink calls runlist...

7.8CVSS6.1AI score0.00129EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•13 views

PT-2026-108179

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A signature verification bypass exists in the patch installer. This flaw allows an attacker with local access to execute arbitrary code with root privileges, which is the highest level of...

7.8CVSS6.6AI score0.00072EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•12 views

PT-2026-108175

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.1 Description A heap-based buffer overflow exists in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that...

9.8CVSS6.7AI score0.00396EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•11 views

PT-2026-108182

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An unauthenticated attacker can exploit a path traversal issue within the GIM file-upload functionality to write arbitrary files to the Collector. Path traversal is a technique that allows ...

7.5CVSS6AI score0.00329EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•12 views

PT-2026-108225

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description An SQL injection flaw allows a remote authenticated attacker to modify data and cause a denial of service. SQL...

5.4CVSS5.7AI score0.00208EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•11 views

PT-2026-108274

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overrun exists in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker can send a specially crafted TDS PRELOGIN packet to a network monitored by a...

8.1CVSS6.5AI score0.0037EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•10 views

PT-2026-108280

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.2 and 12.2.2 Description A missing authentication requirement for a critical function allows a remote attacker to execute arbitrary management operations. Recommendations At the moment, there is no...

9.8CVSS6.5AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•15 views

PT-2026-108270

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description An issue exists where a remote attacker can delete arbitrary files. This occurs because the software fails to properly limit pathnames to a...

8.1CVSS6.1AI score0.00382EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•13 views

PT-2026-108267

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description An issue exists that allows a remote attacker to execute unauthorized SQL statements on security database appliances. This is caused by SQL injection, a technique where...

9.8CVSS6.3AI score0.00317EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•9 views

PT-2026-108273

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description Remote attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when...

8.1CVSS6.3AI score0.00387EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•11 views

PT-2026-108276

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description Improper neutralization of special elements used in an SQL command allows a remote attacker to execute arbitrary SQL commands. This issue is caus...

9.8CVSS6.8AI score0.00319EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•13 views

PT-2026-108176

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Stored cross-site scripting XSS exists in the Quick Search results grid. An unauthenticated attacker capable of influencing monitored database traffic can execute malicious scripts within t...

9.3CVSS5.8AI score0.00175EPSS
SaveExploits0References5
Rows per page
Query Builder