Lucene search
+L

4188 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/08 12:08 p.m.9 views

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...

10CVSS5.5AI score
SaveExploits0Affected Software1
Nuclei
Nuclei
added 2026/09/08 9:11 a.m.46 views

Leantime < 2.4 - Authenticated SQL Injection

Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...

6.5CVSS6.4AI score0.01872EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 1:17 a.m.5 views

CVE-2026-76968

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

6.5CVSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/08 12:12 a.m.1 views

CVE-2026-76968 Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

6.5CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/08 12:12 a.m.9 views

CVE-2026-76968 Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

6.5CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/08 12:12 a.m.8 views

CVE-2026-76963

SAP NetWeaver and ABAP Platform (Application Server ABAP) is affected by a missing authorization check that allows an authenticated attacker with low privileges to gain unauthorized access to sensitive system configuration information. Successful exploitation could expose security-relevant settin...

4.3CVSS5.8AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/08 12:12 a.m.6 views

CVE-2026-76963 Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

4.3CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/08 12:11 a.m.7 views

EUVD-2026-72578

SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external entity declarations. Successful exploitation could allow the...

8.5CVSS5.7AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/08 12:10 a.m.7 views

CVE-2026-44766 SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)

SAP S/4HANA Intercompany Matching and Reconciliation allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the user to access sensitive information, resulting in high impact o...

6.5CVSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.4 views

PT-2026-86960

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

6.5CVSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.5 views

PT-2026-86953

SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external entity declarations. Successful exploitation could allow the...

8.5CVSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/07 5:21 a.m.4 views

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 描述 Oracle Fusion Middleware 的 Oracle WebLogic Server 产品(组件:Core)中存在漏洞。受支持的受影响版本为 12.2.1.4.0 和 14.1.1.0.0。该漏洞易于利用,允许未经身份验证的攻击者通过 T3、IIOP 网络访问破坏 Oracle WebLogic Server。成功利用此漏洞的攻击可导致未经授权访问关键数据,或完全访问所有 Oracle WebLogic Server 可访问的数据。CVSS 3.1 基础评分为 7.5(影响机密性)。CVSS...

7.5CVSS6.9AI score0.07854EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2026/09/04 12:00 a.m.4 views

The vulnerability of the unix_stream_bpf_update_proto() function in the net/unix/unix_bpf.c module, which implements networking functions in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the unixstreambpfupdateproto function in the net/unix/unixbpf.c module, which implements networking functions in the Linux operating system’s kernel, is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an...

7CVSS5.3AI score0.00128EPSS
SaveExploits0References12Affected Software3
OPENSUSE Linux
OPENSUSE Linux
added 2026/09/04 12:00 a.m.5 views

mcphost-0.34.0-10.1 on GA media (moderate)

mcphost-0.34.0-10.1 on GA media Announcement ID: openSUSE-SU-2026:11670-1 Rating: moderate Cross-References: CVE-2026-41178 CVE-2026-81092 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-81092 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N...

7.6CVSS5.6AI score0.00336EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 10:27 a.m.6 views

CVE-2020-1611

Juniper Junos Space 19.4R1之前版本的本地文件包含漏洞(CVE-2020-1611)(PoC) Juniper Junos Space 19.4R1之前版本存在一个本地文件包含漏洞。具有普通用户权限的攻击者可以利用此漏洞。 “下载报告”功能存在漏洞。 基础评分:6.5 向量:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 链接: https://nvd.nist.gov/vuln/detail/CVE-2020-1611...

6.5CVSS6.8AI score0.01667EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.9 views

Fedora 44 : hcloud (2026-dd9ec8b0c2)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dd9ec8b0c2 advisory. Update to 1.67.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

9.1CVSS6.9AI score0.00621EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-47889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8...

7.5CVSS5.9AI score0.00253EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.8 views

Fedora 44 : subfinder (2026-6f9cef7bfe)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f9cef7bfe advisory. Update to 2.16.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

6.1CVSS6.8AI score0.00223EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.14 views

GitLab 18.3 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-4398)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-4398 Note that Nessus has not tested for this issue but has instead relied only on the application'...

5.4CVSS5.9AI score0.00242EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/26 9:34 p.m.3 views

Security Bulletin: QRadar contains hard-coded credentials

Summary QRadar contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Vulnerability Details CVEID:CVE-2026-5522 DESCRIPTION: QRadar contains hard-cod...

6.7CVSS5.4AI score0.0009EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder