Lucene search
K

5058 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/24 12:0 a.m.4 views

Mozilla Thunderbird < 148.0

The version of Thunderbird installed on the remote Windows host is prior to 148.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-16 advisory. - Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory...

10CVSS7.7AI score0.00145EPSS
Exploits2References51
RedhatCVE
RedhatCVE
added 2026/02/22 1:27 a.m.4 views

CVE-2019-25454

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...

6.1CVSS5.6AI score0.00117EPSS
Exploits1References1
NVD
NVD
added 2026/02/20 11:16 p.m.6 views

CVE-2019-25454

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...

6.1CVSS0.00117EPSS
Exploits1References3
OSV
OSV
added 2026/02/20 11:16 p.m.4 views

CVE-2019-25454

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...

6.1CVSS5.9AI score0.00117EPSS
Exploits1References3
CVE
CVE
added 2026/02/20 10:57 p.m.10 views

CVE-2019-25454

phpMoAdmin 1.1.5 is affected by a stored cross-site scripting (XSS) vulnerability in the collection parameter. An unauthenticated attacker can craft GET requests to moadmin.php during collection creation to inject arbitrary JavaScript, which executes in users’ browsers. The issue arises from stor...

6.1CVSS5.6AI score0.00117EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/02/20 10:57 p.m.26 views

CVE-2019-25454 phpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...

6.1CVSS0.00117EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/02/20 10:57 p.m.6 views

CVE-2019-25454 phpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...

6.1CVSS5.4AI score0.00117EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.6 views

PT-2026-21322

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...

7.2CVSS5.6AI score0.00117EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.6 views

phpMoAdmin 跨站脚本漏洞

phpMoAdmin is a MongoDB database management tool developed by Valentin Hilbig. Version 1.1.5 of phpMoAdmin contains a cross-site scripting vulnerability, which stems from improper cleaning of collection parameters. This vulnerability may lead to storage-based cross-site scripting attacks...

6.1CVSS5.6AI score0.00117EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2026/02/18 12:25 a.m.0 views

SUSE CVE-2026-23139

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high...

5.5CVSS5.9AI score0.00036EPSS
Exploits0References19
Amazon
Amazon
added 2026/02/18 12:0 a.m.5 views

Important: firefox

Issue Overview: Spoofing issue in the Downloads Panel component. This vulnerability affects Firefox 146. CVE-2025-14327 Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7. CVE-2026-0877 Sandbox escape due to incorrec...

9.8CVSS6AI score0.0002EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/02/16 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-23139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that i...

7.5CVSS7AI score0.00036EPSS
Exploits0References3
NVD
NVD
added 2026/02/14 4:15 p.m.4 views

CVE-2026-23139

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high...

7.5CVSS0.00036EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2026/02/14 4:15 p.m.1 views

CVE-2026-23139

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high...

7.5CVSS5.9AI score0.00036EPSS
Exploits0References15
OSV
OSV
added 2026/02/14 4:15 p.m.5 views

UBUNTU-CVE-2026-23139

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high...

7.5CVSS5.7AI score0.00036EPSS
Exploits0References17
Debian CVE
Debian CVE
added 2026/02/14 3:22 p.m.5 views

CVE-2026-23139

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high...

7.5CVSS5.1AI score0.00036EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/02/14 3:22 p.m.4 views

CVE-2026-23139

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high...

5.2AI score0.00036EPSS
Exploits0References8Affected Software1
EUVD
EUVD
added 2026/02/14 3:22 p.m.4 views

EUVD-2026-5898

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high...

5.2AI score0.00036EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/02/14 3:22 p.m.23 views

CVE-2026-23139 netfilter: nf_conncount: update last_gc only when GC has been performed

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: update lastgc only when GC has been performed Currently lastgc is being updated everytime a new connection is tracked, that means that it is updated even if a GC wasn't performed. With a sufficiently high...

7.5CVSS0.00036EPSS
Exploits0References7
CVE
CVE
added 2026/02/14 3:22 p.m.13 views

CVE-2026-23139

CVE-2026-23139 affects the Linux kernel netfilter nf_conncount code. The root cause was that the last_gc timestamp was updated every time a connection was tracked, even when a garbage collection (GC) was not performed, enabling potential GC bypass under high packet rates and unbounded growth of t...

7.5CVSS5.2AI score0.00036EPSS
Exploits0References7Affected Software1
Rows per page
Query Builder