Lucene search
K

22 matches found

Cvelist
Cvelist
added 2026/03/03 12:0 a.m.21 views

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...

0.00034EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:43 a.m.6 views

CVE-2022-26885

When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher...

7.5CVSS6.8AI score0.00659EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/05 1:37 p.m.14 views

CVE-2025-26885

Deserialization of Untrusted Data vulnerability in Beaver Builder WordPress Assistant assistant allows Object Injection.This issue affects WordPress Assistant: from n/a through = 1.5.1...

7.2CVSS7.2AI score0.00192EPSS
Exploits0References1
Circl
Circl
added 2025/03/03 2:30 p.m.3 views

CVE-2025-26885

creationtimestamp| type| source ---|---|--- 2025-03-03 14:30:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6219 2026-05-28 09:03:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmvnznhbnr2w...

7.2CVSS7.3AI score0.00192EPSS
Exploits0References2
CVE
CVE
added 2025/03/03 1:30 p.m.57 views

CVE-2025-26885

CVE-2025-26885 is a deserialization of untrusted data vulnerability in the Beaver Builder WordPress Assistant plugin (Assistant) <= 1.5.1. Root cause: PHP object injection via deserialization of untrusted data. Affected software: WordPress plugin Assistant – from n/a through

7.2CVSS7.2AI score0.00192EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.6 views

CVE-2025-26885 WordPress Assistant Plugin <= 1.5.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Beaver Builder WordPress Assistant assistant allows Object Injection.This issue affects WordPress Assistant: from n/a through = 1.5.1...

7.2CVSS8.6AI score0.00192EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/11/15 12:0 a.m.33 views

Ubuntu: Security Advisory (USN-7088-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS8.6AI score0.00495EPSS
Exploits6References2
Tenable Nessus
Tenable Nessus
added 2024/06/22 12:0 a.m.91 views

SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2135-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2135-1 advisory. The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following securit...

9.1CVSS7.4AI score0.02683EPSS
Exploits3References1343
CBLMariner
CBLMariner
added 2024/05/17 9:38 p.m.9 views

CVE-2024-26885 affecting package kernel for versions less than 6.6.29.1-3

CVE-2024-26885 affecting package kernel for versions less than 6.6.29.1-3. An upgraded version of the package is available that resolves this issue...

7.8CVSS6.8AI score0.00014EPSS
Exploits0
OSV
OSV
added 2024/04/17 10:27 a.m.4 views

CVE-2024-26885 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAPHASH overflow check on 32-bit arches The devmap code allocates a number hash buckets equal to the next power of two of the maxentries value provided when creating the map. When rounding up to the next power of two,...

7.8CVSS6.5AI score0.00014EPSS
Exploits0References13
Debian CVE
Debian CVE
added 2024/04/17 10:27 a.m.26 views

CVE-2024-26885

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAPHASH overflow check on 32-bit arches The devmap code allocates a number hash buckets equal to the next power of two of the maxentries value provided when creating the map. When rounding up to the next power of two,...

7.8CVSS8.2AI score0.00014EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/11/24 6:30 p.m.2 views

com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0 <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-alert (>=1.2.0 <=2.0.0-alpha) +10 more potentially affected by CVE-2022-26885 via org.apache.dolphinscheduler:dolphinscheduler-common (>=1.2.0 <=2.0.5)

org.apache.dolphinscheduler:dolphinscheduler-common MAVEN version =1.2.0, =1.1.0, =1.2.0, =2.0.1, =1.2.0, =1.2.0, =2.0.0, =2.0.2, =1.3.5, =1.2.0, =1.3.0, =1.3.6, =1.3.9, =2.0.5 Source cves: CVE-2022-26885 Source advisory: OSV:GHSA-JVC3-WJF6-7C6C...

7.5CVSS7.1AI score0.00659EPSS
Exploits0
Circl
Circl
added 2022/11/24 6:14 p.m.0 views

CVE-2022-26885

creationtimestamp| type| source ---|---|--- 2022-11-24 18:14:35+00:00| seen| https://t.me/cibsecurity/53481 2025-04-25 19:07:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13508...

7.5CVSS7.3AI score0.00659EPSS
Exploits0References2
CVE
CVE
added 2022/11/24 12:0 a.m.87 views

CVE-2022-26885

Apache Dolphin Scheduler is affected by CVE-2022-26885, where using tasks to read config files can disclose database passwords. The issue stems from improper handling of logs in LoggerRequestProcessor.java, per Veracode and related advisories. Affected product: Dolphin Scheduler server; vulnerabi...

7.5CVSS7.5AI score0.00659EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/11/24 12:0 a.m.21 views

CVE-2022-26885 Apache DolphinScheduler config file read by task risk

When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher...

7.7AI score0.00659EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/11/24 12:0 a.m.13 views

CVE-2022-26885 Apache DolphinScheduler config file read by task risk

When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher...

7.5AI score0.00659EPSS
Exploits0References1
CVE
CVE
added 2021/06/07 3:6 a.m.89 views

CVE-2020-26885

The CVE-2020-26885 entry relates to 2sic 2sxc prior to version 11.22, where an XSS vulnerability exists in the sxcver parameter of dnn/ui.html. The issue allows an attacker to craft a malicious URL that executes JavaScript in a victim’s browser. Public details indicate impact is limited to the br...

6.1CVSS5.8AI score0.00557EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2021/03/11 3:41 p.m.20 views

CVE-2021-26885 Windows WalletService Elevation of Privilege Vulnerability

...

7.8CVSS8.3AI score0.24544EPSS
Exploits0References1
CVE
CVE
added 2021/03/11 3:41 p.m.155 views

CVE-2021-26885

CVE-2021-26885 is a Windows WalletService elevation of privilege vulnerability described as a local privilege escalation that could impact a system’s confidentiality, integrity and availability. The public documents identify the affected component as Windows WalletService and classify the vulnera...

7.8CVSS7.6AI score0.24544EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/03/09 12:0 a.m.58 views

KB5000809: Windows 10 Version 1803 March 2021 Security Update

The remote Windows host is missing security update 5000809. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24107, CVE-2021-26869, CVE-2021-26884 - An memory...

8.8CVSS8.1AI score0.92473EPSS
Exploits3References33
Rows per page
Query Builder