Lucene search
+L

15955 matches found

Microsoft Secure
Microsoft Secure
added 2026/09/09 9:30 p.m.25 views

Threat matrix: Mapping threats across cloud web applications

In this article 1. Overview 2. Technique Catalog 3. Privilege Escalation 4. Mitigation and protection guidance 5. References 6. Learn more Microsoft introduces the cloud web applications threat matrix, a MITRE ATT &CK-aligned framework that helps defenders understand, prioritize, and mitigate...

6.5AI score
SaveExploits0
EUVD
EUVD
added 2026/09/08 3:13 p.m.7 views

EUVD-2026-72863

AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream keys and m3u8 URLs by accessing the endpoint without authentication. Attackers can enumerate private, unlisted, and group-restricted live...

8.7CVSS5.7AI score0.00308EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.11 views

PT-2026-86961

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

9.4CVSS5.7AI score0.00294EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/04 11:16 p.m.9 views

shannon v3.1.0

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

6AI score
SaveExploits0References39
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libbpf: Handling of size overflow for ringbuf mmap The maximum size of the ringbuf on x86-64 hosts is 2GB. Therefore, 2 maxentries will cause an overflow of type u32 when mapping producer pages and data pages. Simply casting...

7.8CVSS6.2AI score0.00276EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability in Firefox

Malicious websites may have been able to confirm user intent through tapjacking. This could have led users to approve the launch of external applications without realizing it, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox 133 and Thunderbird 133...

8.1CVSS6.5AI score0.00478EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in Ruby-Rack

There is a denial-of-service vulnerability in the Content-Disposition parsing component of Rack, which was fixed in versions 2.0.9.2, 2.1.4.2, 2.2.4.1, and 3.0.0.1. This vulnerability could allow an attacker to create an input that causes the Content-Disposition header parsing in Rack to take an...

7.5CVSS6.6AI score0.01503EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Hotspot. The supported versions affected by this vulnerability are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,...

5.9CVSS6.7AI score0.00864EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/20 9:30 a.m.15 views

Important: Red Hat Security Advisory: yelp security update

An update for yelp is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.1CVSS5.5AI score0.00179EPSS
SaveExploits0References2
Circl
Circl
added 2026/08/19 4:52 p.m.12 views

CVE-2026-70797

creationtimestamp| type| source ---|---|--- 2026-08-19 16:52:11+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

7.2CVSS4.8AI score0.00339EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/19 2:21 p.m.14 views

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent

Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVEs: CVE-2026-41254, CVE-2026-47057, CVE-2026-47058, CVE-2026-47063 and CVE-2026-8400 Vulnerability Details CVEID:CVE-2026-47057...

9.8CVSS5.5AI score0.00463EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2026/08/18 9:17 p.m.16 views

CVE-2026-70681

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: JRI and other Java utils. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/18 9:17 p.m.12 views

CVE-2026-62454

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications...

7.8CVSS0.00161EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/18 9:00 p.m.14 views

EUVD-2026-61635

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

7.1CVSS5.2AI score0.00376EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/18 9:00 p.m.15 views

EUVD-2026-61636

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: JRI and other Java utils. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS5.3AI score0.00239EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/18 5:17 p.m.14 views

CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

6.3CVSS5.9AI score0.00372EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/18 5:16 p.m.11 views

UBUNTU-CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

5.9AI score0.00299EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/08/18 5:16 p.m.12 views

CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

5.9AI score0.00299EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/18 4:57 p.m.15 views

Important: Red Hat Security Advisory: Migration Toolkit for Applications

A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...

8.9CVSS6.2AI score0.0068EPSS
SaveExploits3References14
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.20 views

PT-2026-77527

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Cloud Manager versions 22.3 through 26.6 Description A flaw in the Siebel CRM Cloud Applications product allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation c...

8.1CVSS5.2AI score0.00337EPSS
SaveExploits0References4
Rows per page
Query Builder