Lucene search
+L

1926 matches found

Snyk
Snyk
added 2026/03/19 12:00 a.m.8 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the analyzestring function of the infocmp -i routine. An attacker can execute unauthorized code, cause denial of service, corrupt data, or access sensitive information by supplying specially crafted input ...

9.8CVSS6AI score0.00447EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.12 views

CVE-2026-21743

A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow a read-only user to make modification to local users via a file upload to an unprotecte...

7.2CVSS5.5AI score0.00336EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:00 a.m.9 views

Siemens SCALANCE and RUGGEDCOM Stack-based Buffer Overflow (CVE-2025-6141)

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocesstermcap of the file tinfo/parseentry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to...

4.8CVSS5.2AI score0.00172EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:00 a.m.9 views

EulerOS Virtualization 2.10.1 : ncurses (EulerOS-SA-2026-1132)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the...

4.8CVSS5.4AI score0.00172EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/29 3:30 p.m.37 views

CVE-2026-0936

CVE-2026-0936 affects B&R PVI client versions prior to 6.5. It describes an Insertion of Sensitive Information into Log File vulnerability where an authenticated local attacker could access credentials processed by the PVI client due to information written into logs. The logging function is disab...

5.1CVSS5.9AI score0.00107EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/19 3:52 p.m.15 views

CVE-2025-11043

An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges...

9.1CVSS5.5AI score0.00214EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 11:39 a.m.14 views

CVE-2003-1595

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors...

10CVSS7.1AI score0.01669EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:16 a.m.13 views

CVE-2019-2678

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

6.5CVSS6.3AI score0.00533EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:14 a.m.13 views

CVE-2019-2574

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

6.5CVSS6.4AI score0.00533EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:14 a.m.13 views

CVE-2019-2781

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: XML Interface. Supported versions that are affected are 8.9.6, 8.10.2 and 8.11-8.14. Easily exploitable vulnerability allows low privileged attacker with network access via TCP/IP to compromi...

6.5CVSS6.2AI score0.01348EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:20 a.m.16 views

CVE-2021-2294

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIO...

6.5CVSS6.5AI score0.01297EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 1:11 p.m.12 views

WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Maximum Products per User for WooCommerce versions = 4.4.3...

6.5CVSS5.9AI score0.00155EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/30 4:15 p.m.14 views

WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Yada Wiki versions = 3.5...

6.5CVSS5.9AI score0.00155EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:00 a.m.7 views

EulerOS Virtualization 2.13.0 : ncurses (EulerOS-SA-2025-2589)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the...

4.8CVSS4.2AI score0.00172EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/11/14 7:59 p.m.11 views

CVE-2022-4984

ZenTao Biz 6.5, ZenTao Max 3.0, ZenTao Open Source Edition 16.5, and ZenTao Open Source Edition 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database...

8.7CVSS8.1AI score0.0045EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/11/12 12:00 a.m.8 views

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2025-2368)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8CVSS4.1AI score0.00172EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:00 a.m.5 views

EulerOS 2.0 SP12 : ncurses (EulerOS-SA-2025-2337)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function...

4.8CVSS4.1AI score0.00172EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/28 12:00 a.m.23 views

IBM DB2 High Performance Unload 安全漏洞

IBM DB2 High Performance Unload is a database data export program from International Business Machines IBM. A security vulnerability exists in IBM DB2 High Performance Unload, which stems from a buffer size calculation error that could cause the program to crash. The following versions are...

6.5CVSS6.7AI score0.00285EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/24 12:00 a.m.10 views

EulerOS 2.0 SP13 : ncurses (EulerOS-SA-2025-2272)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function...

4.8CVSS4.1AI score0.00172EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/10/17 1:51 p.m.12 views

WordPress Memberlite Shortcodes plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Memberlite Shortcodes versions = 1.4.1...

6.5CVSS6AI score0.0025EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder