Lucene search
+L

3995 matches found

Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•13 views

PT-2026-62756

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

6.6CVSS7.1AI score0.00375EPSS
SaveExploits0References107
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•13 views

PT-2026-62267

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

6.6CVSS7.1AI score0.00375EPSS
SaveExploits0References106
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•18 views

PT-2026-62271

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

6.6CVSS7.1AI score0.00375EPSS
SaveExploits0References106
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•0 views

CVE-2026-60747: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows...

6.2CVSS5.7AI score0.00173EPSS
SaveExploits0References3
Veeam
Veeam
•added 2026/07/14 12:00 a.m.•36 views

Veeam Management Pack for Microsoft System Center / Veeam Backup & Replication 13 Compatibility

Article Applicability The patch on this article only enables monitoring of Windows-based Veeam Backup & Replication 13.x deployments. Veeam Management Pack for Microsoft System Center 9a does not support monitoring Veeam Software Appliance. Challenge After Veeam Backup & Replication is upgraded t...

5.9AI score
SaveExploits0Affected Software2
CNVD
CNVD
•added 2026/07/08 12:00 a.m.•18 views

IBM WebSphere eXtreme Scale deserialization injection vulnerability

IBM WebSphere eXtreme Scale is an elastic data caching and object grid platform developed by American company IBM. IBM WebSphere eXtreme Scale has a deserialization injection vulnerability, allowing attackers to execute arbitrary code on the grid replication layer...

8.8CVSS6.3AI score0.00546EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/07/06 10:29 p.m.•17 views

Security Bulletin: Vulnerable Version of Software in Use

Summary Prior versions include vulnerable version of openssl. Vulnerability Details CVEID:CVE-2026-28390 DESCRIPTION: Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that...

7.5CVSS7.2AI score0.00805EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/03 7:48 a.m.•13 views

CVE-2026-47896 Apache Lucene.Net: Unauthenticated arbitrary file read on the Lucene.Net.Replicator replication server

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Lucene.Net Lucene.Net.Replicator library. This issue affects Apache Lucene.Net.Replicator: from 4.8.0-beta00005 through 4.8.0-beta00017. Users are recommended to upgrade to version 4.8.0-beta00018...

8.9CVSS5.9AI score0.00808EPSS
SaveExploits0References1
Virtuozzo
Virtuozzo
•added 2026/07/02 12:00 a.m.•27 views

Virtuozzo Infrastructure 7.2 Hotfix 3 (7.2.0-263)

This update delivers important security and stability fixes. Vulnerability id: VSTOR-123887 Stale S3 lifecycle timestamps could cause objects to expire at incorrect times. Vulnerability id: VSTOR-126525, VSTOR-131507 Extended usage reporting could omit CPU, RAM, storage tier, VPN, floating IP, an...

8.8CVSS7AI score0.04169EPSS
SaveExploits303
NVD
NVD
•added 2026/06/30 11:17 p.m.•22 views

CVE-2026-50110

Storage Concentrator SC & SCVM contains hardcoded credentials for numerous internal services embedded within a configuration file. While the credentials are stored in an encoded format, the encoding can be reversed to plaintext. The exposed credentials span a broad range of internal services,...

9.3CVSS0.00175EPSS
SaveExploits0References3
CVE
CVE
•added 2026/06/30 7:24 p.m.•44 views

CVE-2026-13759

CVE-2026-13759 affects IBM WebSphere eXtreme Scale (WebSphere Extreme Scale) 8.6.1.0–8.6.1.6. The root cause is insecure deserialization: three ObjectInputStream subclasses (WsObjectInputStream, ObjectStreamPool$ReusableInputStream, ObjectInputStreamResolver) ship without a JEP-290 class filter. ...

8.8CVSS6.2AI score0.00546EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•101 views

PT-2026-54432

Name of the Vulnerable Software and Affected Versions Storage Concentrator SC & SCVM affected versions not specified Description Storage Concentrator SC & SCVM contains hardcoded credentials for various internal services within a configuration file. Although these credentials use encoding, the...

9.3CVSS5.8AI score0.00175EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•37 views

PT-2026-53942

Name of the Vulnerable Software and Affected Versions IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.1.6 Description Three ObjectInputStream subclasses WsObjectInputStream, ObjectStreamPool$ReusableInputStream, and ObjectInputStreamResolver do not install a JEP-290 class filter, which i...

8.8CVSS6.9AI score0.00546EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/06/30 12:00 a.m.•21 views

The vulnerability of the Remote Function Call module in the infrastructure for extracting and replicating SAP Operational Data Provisioning Data Replication API (ODP-RFC) allows a perpetrator to disclose protected information or cause service interruptions.

The vulnerability of the Remote Function Call module in the SAP Operational Data Provisioning Data Replication API ODP-RFC infrastructure is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

6.6CVSS5.7AI score0.00349EPSS
SaveExploits0References2
Rockylinux
Rockylinux
•added 2026/06/28 12:01 a.m.•24 views

mysql:8.0 security, bug fix, and enhancement update

An update is available for module.mecab-ipadic, mecab, mecab-ipadic, module.mecab. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user,...

7.5CVSS6.4AI score0.43403EPSS
SaveExploits0
OSV
OSV
•added 2026/06/28 12:01 a.m.•16 views

RLSA-2023:3087 Important: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.32. BZ2177734, BZ2177735, BZ2177736 Security Fixes: mysql: Server:...

7.5CVSS5.8AI score0.43403EPSS
SaveExploits0References43
NVD
NVD
•added 2026/06/26 8:17 p.m.•19 views

CVE-2026-55188

RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, RustFS contains an authorization bypass in the bucket replication admin API. The ListRemoteTargetHandler handler for listing remote replication targets only checks whether request credentials exist...

8.2CVSS0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/26 8:03 p.m.•11 views

CVE-2026-55188 RustFS: ListRemoteTargetHandler authorization bypass leaks replication target credentials

RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, RustFS contains an authorization bypass in the bucket replication admin API. The ListRemoteTargetHandler handler for listing remote replication targets only checks whether request credentials exist...

8.2CVSS5.8AI score0.00297EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/26 8:03 p.m.•23 views

EUVD-2026-39866

RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, RustFS contains an authorization bypass in the bucket replication admin API. The ListRemoteTargetHandler handler for listing remote replication targets only checks whether request credentials exist...

8.2CVSS5.8AI score0.00297EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/26 8:03 p.m.•13 views

CVE-2026-55188

RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, RustFS contains an authorization bypass in the bucket replication admin API. The ListRemoteTargetHandler handler for listing remote replication targets only checks whether request credentials exist...

8.2CVSS5.8AI score0.00297EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder