Lucene search
+L

3894 matches found

Tenable Nessus
Tenable Nessus
•added 2026/08/15 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-72147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and...

5.6AI score0.00209EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/15 12:00 a.m.•14 views

PT-2026-72717

In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer bindings tipc update nametbl inserts a binding advertised by a peer node using the lower and upper service-range bounds taken directly from the wire, without checking that lower uppe...

5.4AI score0.007EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/15 12:00 a.m.•50 views

PT-2026-72973

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp stops comparing at the first NUL byte, so different ClientGUID values can incorrectly be treated as equa...

5.3AI score0.00522EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/15 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-74521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: use memcmp to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NUL bytes. strncmp stops comparing at the first NUL...

9.1CVSS8AI score0.00522EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/15 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-74281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: reject inverted service ranges from peer bindings tipcupdatenametbl inserts a binding advertised by a peer node using the lower and upper service-range...

7.5CVSS5.6AI score0.007EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/14 11:40 a.m.•12 views

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in Jackson Data Binding, Jackson Core, Postgresql, Scram Client, Apache MINA SSHD, Jansi Vulnerability Details CVEID:CVE-2026-59888 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and...

8.7CVSS5.7AI score0.00619EPSS
SaveExploits0Affected Software1
Veracode
Veracode
•added 2026/08/14 9:00 a.m.•16 views

Expression Language (SpEL) Injection

Spring Data MongoDB is vulnerable to Expression Language SpEL Injection. The vulnerability is due to improper handling of user-supplied values during parameter binding in @Query repository methods using a capture-all placeholder, which allows an attacker to inject and execute malicious SpEL...

8.1CVSS5.3AI score0.00421EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2026/08/14 7:30 a.m.•13 views

Denial Of Service

Spring Security is vulnerable to Denial Of Service. The vulnerability is due to an unbounded writer inflating compressed SAML payloads into memory when processing SAML 2.0 Login or Logout requests using the REDIRECT binding, allowing an attacker to exhaust application memory...

7.5CVSS4.6AI score0.0046EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/14 12:00 a.m.•17 views

PT-2026-72127

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description An issue exists in the external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during the authentication process, the system fails ...

4.8CVSS5.2AI score0.0031EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/13 10:17 p.m.•19 views

CVE-2026-72849

Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link handoff endpoint that allows attackers to bind an external chat identity to a victim's account. Attackers can craft a phishing page that auto-submits a POST request with a leaked confirmation token to bind...

8.7CVSS0.00162EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/13 8:17 p.m.•12 views

CVE-2026-16713

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

5.3CVSS0.00463EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/13 7:40 p.m.•39 views

CVE-2026-16713

IBM Documentation Offline 1.0.0–1.4.1 is affected by CVE-2026-16713, a security misconfiguration where the embedded Node.js server binds to an unrestricted IP address, enabling a remote attacker on the network to obtain sensitive information. The IBM bulletin (and NVD entry) describe this as an i...

5.3CVSS5.3AI score0.00463EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/08/13 7:40 p.m.•12 views

EUVD-2026-58366

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

4.3CVSS5.3AI score0.00463EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/13 7:40 p.m.•12 views

CVE-2026-16713 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

4.3CVSS5.3AI score0.00463EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/13 7:40 p.m.•37 views

CVE-2026-16713 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

4.3CVSS0.00463EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/08/13 2:51 p.m.•13 views

com.ongres.scram/scram-client: com.ongres.scram/scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack

A flaw was found in the SCRAM Salted Challenge Response Authentication Mechanism client and common libraries. An attacker performing a man-in-the-middle MITM attack on a Transport Layer Security TLS connection can silently downgrade the authentication process. This vulnerability allows the attack...

8.2CVSS5.4AI score0.0026EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/08/13 2:51 p.m.•13 views

org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A remote attacker who can intercept a TLS Transport Layer Security connection can silently downgrade connections configured to require channel binding from SCRAM-SHA-256-PLUS to plain SCRAM-SHA-256. This downgrade bypasses the...

8.2CVSS5.4AI score0.00236EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/08/13 2:50 p.m.•16 views

com.ongres.scram/scram-client: com.ongres.scram/scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack

A flaw was found in the SCRAM Salted Challenge Response Authentication Mechanism client and common libraries. An attacker performing a man-in-the-middle MITM attack on a Transport Layer Security TLS connection can silently downgrade the authentication process. This vulnerability allows the attack...

8.2CVSS5.3AI score0.0026EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/08/13 2:50 p.m.•12 views

org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A remote attacker who can intercept a TLS Transport Layer Security connection can silently downgrade connections configured to require channel binding from SCRAM-SHA-256-PLUS to plain SCRAM-SHA-256. This downgrade bypasses the...

8.2CVSS5.3AI score0.00236EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/13 1:26 p.m.•10 views

Security Bulletin: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

Summary IBM Documentation Offline is a desktop application that bundles an Electron-based viewer and an embedded Node.js web server to serve product documentation locally on the user's workstation. Multiple vulnerabilities have been identified in the embedded server component spanning three...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder