Lucene search
K

34 matches found

OSV
OSV
added 2026/05/13 3:15 p.m.0 views

MINI-MX49-6986-V68V

Bulletin has no description...

7.5CVSS5.7AI score0.00018EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-6986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mgaesgcmdecrypt of the file /src/tlsaes128.c of the...

6.3CVSS5AI score0.00007EPSS
Exploits1References2
Circl
Circl
added 2026/04/11 6:30 a.m.1 views

CVE-2025-6986

creationtimestamp| type| source ---|---|--- 2026-04-11 06:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj77kqm4jb2u...

6.5CVSS5.7AI score0.00148EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-6986 Malicious code in 1inch-p2p-sdk (npm)

The package 1inch-p2p-sdk was found to contain malicious code...

7.2AI score
Exploits0
NVD
NVD
added 2025/03/20 10:15 a.m.6 views

CVE-2024-6986

A Cross-site Scripting XSS vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the 'v-html' directive, which inserts the content of the 'fulltemplate' variable directly as HTML. This allows an attacker to execute maliciou...

5.5CVSS0.00156EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/20 10:10 a.m.3 views

CVE-2024-6986 Cross-site Scripting (XSS) in parisneo/lollms-webui

A Cross-site Scripting XSS vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the 'v-html' directive, which inserts the content of the 'fulltemplate' variable directly as HTML. This allows an attacker to execute maliciou...

5.5CVSS6.1AI score0.00156EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2024/09/30 12:0 a.m.17 views

Rocky Linux 8 : nano (RLSA-2024:6986)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:6986 advisory. nano: running chmod and chown on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file CVE-2024-5742...

6.7CVSS7.2AI score0.0008EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/09/24 12:0 a.m.21 views

Oracle Linux 8 : nano (ELSA-2024-6986)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6986 advisory. 2.9.8-3 - fix incomplete backport of the fix for the emergency file replacement vulnerability RHEL-35236 2.9.8-2 - fix emergency file replacement vulnerability...

6.7CVSS7.2AI score0.0008EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/09/04 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-6986-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.14584EPSS
Exploits0References2
OSV
OSV
added 2024/06/06 12:26 p.m.12 views

CGA-XH5C-4R65-6986

Bulletin has no description...

5.3CVSS6.2AI score0.00035EPSS
Exploits0
CVE
CVE
added 2024/01/03 6:41 a.m.49 views

CVE-2023-6986

The CVE-2023-6986 vulnerability affects the WordPress plugin EmbedPress (Embed PDF, YouTube, Google Docs, Vimeo, Wistia, etc.). It enables Stored Cross‑Site Scripting via the embed_oembed_html shortcode in all versions before 3.9.5 due to insufficient input sanitization and output escaping of use...

6.4CVSS5.2AI score0.00154EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:58 a.m.0 views

SUSE CVE-2016-6986

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...

8.8CVSS8AI score0.03502EPSS
Exploits3References4
CVE
CVE
added 2020/03/05 8:5 p.m.87 views

CVE-2020-6986

CVE-2020-6986 affects Omron PLC CJ Series (all versions). The vulnerability is described as Uncontrolled Resource Consumption (CWE-400) where an attacker can send a sequence of specific data packets in a short time, triggering a PLC Ethernet module error and resulting in a service-denied state. D...

7.8CVSS7.4AI score0.00665EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/01/28 3:0 p.m.61 views

CVE-2019-6986

CVE-2019-6986 describes a SPARQL Injection in VIVO Vitro v1.10.0 where a remote attacker can craft a request to the endpoint “/individual?uri=” to execute arbitrary SPARQL, leading to a Regular Expression Denial of Service (ReDoS) via crafted FILTER%20regex usage. Affected product/component: VIVO...

7.5CVSS7.8AI score0.01079EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2019/01/17 5:0 p.m.9 views

CVE-2018-6986

...

Exploits0
CVE
CVE
added 2019/01/17 5:0 p.m.27 views

CVE-2018-6986

CVE-2018-6986 is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
Exploits0
Cvelist
Cvelist
added 2017/05/22 4:54 a.m.18 views

CVE-2017-6986

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...

7.4AI score0.00239EPSS
Exploits0References2
CVE
CVE
added 2017/05/22 4:54 a.m.57 views

CVE-2017-6986

CVE-2017-6986 affects macOS Sierra/iBooks. Apple’s security content lists an iBooks memory corruption issue that could allow an unauthenticated app to escape the sandbox and gain privileges. The entry is tied to macOS Sierra 10.12.4 and later patches, addressed in macOS 10.12.5 Security Update (E...

7.8CVSS7.2AI score0.00239EPSS
Exploits0References2Affected Software1
Mageia
Mageia
added 2016/10/18 6:46 p.m.31 views

Updated flash-player-plugin package fixes security vulnerabilities

Adobe Flash Player 11.2.202.637 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves a type confusion vulnerability that could lead to code execution CVE-2016-6992. This...

9.3CVSS2.7AI score0.54828EPSS
Exploits4References2
Prion
Prion
added 2016/10/13 8:0 p.m.14 views

Memory corruption

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...

9.3CVSS9AI score0.54828EPSS
Exploits4References5Affected Software2
Rows per page
Query Builder