Lucene search
+L

14886 matches found

Vulnrichment
Vulnrichment
•added 2026/07/09 7:23 a.m.•11 views

CVE-2026-31985 Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0

When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided to enable it. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the...

8.3CVSS6.1AI score0.00203EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/09 7:23 a.m.•67 views

CVE-2026-31985 Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0

When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided to enable it. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the...

8.3CVSS0.00203EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/09 7:23 a.m.•15 views

CVE-2026-31985

When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided to enable it. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the...

8.3CVSS6AI score0.00203EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/09 7:23 a.m.•45 views

CVE-2026-31985

CVE-2026-31985 affects the Remote Collector when configuring a Guardian or CMC via n2os-tui. The generated configuration disables TLS certificate verification, with no option to re-enable it, enabling MITM and potentially theft of the sync token, impersonation of the server, injection of spoofed ...

8.3CVSS6AI score0.00203EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/09 12:00 a.m.•2 views

CVE-2026-43752: Unrestricted Upload of File with Dangerous Type

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1...

4.9CVSS6.3AI score0.0049EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/09 12:00 a.m.•26 views

PT-2026-56892

Name of the Vulnerable Software and Affected Versions FileMaker Server versions prior to 26.0.1 Description An authenticated administrator can achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console...

4.9CVSS6.4AI score0.0049EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•16 views

The vulnerability of Sun’s console-based graphic editor ImageMagick decoder allows a hacker to execute arbitrary code.

The vulnerability of the Sun console-based graphic editor ImageMagick relates to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code...

10CVSS7.4AI score0.00412EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•14 views

The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, allowing attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of the protected information...

7.1CVSS7.7AI score0.00155EPSS
SaveExploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•19 views

The vulnerability of the MSL format processor in the ImageMagick console graphics editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the MSL format processor in the ImageMagick console-based graphics editor is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

10CVSS7.5AI score0.00371EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•15 views

The vulnerability of the reading module for FTXT format graphic files in the console-based graphic editor ImageMagick allows a hacker to induce a service failure.

The vulnerability of the FTXT graphic file reading module in the console-based graphic editor ImageMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.3AI score0.00435EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•15 views

The vulnerability of the DestroyXMLTree function in the console-based ImageMagick graphics editor allows a hacker to cause a service failure.

The vulnerability of the “DestroyXMLTree” function in the console-based ImageMagick graphics editor is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6AI score0.007EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•18 views

The vulnerability of the -sample operation in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the -sample command in the console-based image editing tool ImageMagick is related to reading data beyond the allowable range of memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

7.1CVSS6AI score0.00201EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•17 views

The vulnerability of the DecodeImage() function in the ImageMagick console-based graphics editor allows a hacker to cause a service failure.

The vulnerability of the DecodeImage function in the console-based image editing tool ImageMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS7.4AI score0.00457EPSS
SaveExploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•17 views

The vulnerability of the msl.c file in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the msl.c file in the console-based image editing tool ImageMagick is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.2AI score0.00483EPSS
SaveExploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•18 views

The vulnerability of the implementation of security policies for the console-based graphic editor ImageMagick, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the ImageMagick console-based graphic editor’s security implementation is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.00154EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•17 views

The vulnerability of the parser of the console-based graphic editor ImageMagick allows a hacker to execute arbitrary code, gain unauthorized access to confidential information, and cause service failures.

The vulnerability of the console-based graphic editor ImageMagick relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, gain unauthorized access to confidential information, and cause service failures...

10CVSS7AI score0.00515EPSS
SaveExploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•16 views

The vulnerability of the JBIG decoder in the console-based image editing software ImageMagick allows a hacker to induce a service failure.

The vulnerability of the JBIG decoder in the ImageMagick console-based graphics editor is related to the lack of checking for the returned value. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.2AI score0.0063EPSS
SaveExploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•18 views

The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

7.8CVSS7.8AI score0.00153EPSS
SaveExploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•12 views

The vulnerability of the IPTCTEXT mechanism in the console-based ImageMagick graphic editor allows a hacker to trigger a service failure.

The vulnerability of the IPTCTEXT mechanism in the console-based ImageMagick graphic editor is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7AI score0.0035EPSS
SaveExploits0References11Affected Software7
PyPA
PyPA
•added 2026/07/07 4:03 p.m.•23 views

badkeys vulnerable to ASCII control character injection on console via malformed input

ImpactAn attacker may inject content with ASCII control characters like vertical tabs, ANSI escape sequences, etc., that can create misleading output of the badkeys command-line tool. This impacts scanning DKIM keys both --dkim and --dkim-dns, SSH keys --ssh-lines mode, and filenames in various...

5.3CVSS5.8AI score0.00331EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder