Lucene search
+L

224887 matches found

AlmaLinux
AlmaLinux
added 2026/07/22 12:0 a.m.11 views

Important: acl security update

Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...

8.4CVSS5.3AI score0.00153EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/22 12:0 a.m.6 views

Plone 2.0.x < 2.1.3 Insecure Access Control

The version of Plone installed on the remote host is 2.0.x prior to 2.1.3. It is, therefore, affected by an insecure access control due to not restricting access to the changeMemberPortrait, deletePersonalPortrait, and testCurrentPassword methods. An unauthenticated, remote attacker can exploit...

5CVSS5.4AI score0.03891EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/22 12:0 a.m.5 views

Plone 5.2.3 XSS

The version of Plone installed on the remote host is 5.2.3. It is, therefore, affected by a stored cross-site scripting XSS vulnerability within the site-controlpanel due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this...

5.4CVSS6.2AI score0.00762EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/22 12:0 a.m.13 views

AlmaLinux 8 : acl (ALSA-2026:43420)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:43420 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370 Tenable...

8.4CVSS5.4AI score0.00153EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.32 views

PT-2026-63385

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.25.0 through 1.25.1 Description A memory corruption issue exists when the software is under pressure and configured with an access-control-view and either the respip or rpz modules, alongside a module capable of...

5.9CVSS5.8AI score0.00237EPSS
SaveExploits0References30
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.21 views

PT-2026-63387

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.6.0 through 1.25.1 Description The view local data and view local datas commands of unbound-control create a bare local zones tree for a configured named view that initially contains no local data. This process...

3.1CVSS5.8AI score0.0015EPSS
SaveExploits0References30
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.23 views

PT-2026-63504

Name of the Vulnerable Software and Affected Versions Articles Anywhere affected versions not specified Modules Anywhere affected versions not specified Description Content tags in the Articles Anywhere and Modules Anywhere extensions can use ignore flags or property overrides to render restricte...

9.1CVSS5.9AI score0.00246EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/22 12:0 a.m.14 views

AlmaLinux 10 : acl (ALSA-2026:42739)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42739 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370 Tenable...

8.4CVSS5.4AI score0.00153EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/22 12:0 a.m.6 views

ALSA-2026:43420 Important: acl security update

Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...

8.4CVSS5.3AI score0.00153EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/21 11:18 p.m.13 views

CVE-2026-63145

Incorrect Authorization CWE-863 in Kibana can lead to integrity compromise of Machine Learning audit and notification records via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A vulnerability exists in Kibana's Machine Learning functionality where a Machine Learning management...

4.3CVSS0.00161EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/21 11:10 p.m.8 views

CVE-2026-63971

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the sctpwaitforconnect function, where a socket lock is temporarily released and re-acquired. During this brief period, another process can move the SCTP association to a...

7.8CVSS5.3AI score0.00164EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/21 11:7 p.m.41 views

CVE-2026-63262 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level access control...

4.3CVSS0.00166EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/21 11:7 p.m.5 views

CVE-2026-63262 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level access control...

4.3CVSS5.5AI score
SaveExploits0References3
CVE
CVE
added 2026/07/21 10:31 p.m.20 views

CVE-2026-63145

Kibana Machine Learning (ML) functionality is affected by an Incorrect Authorization (CWE-863) vulnerability. A management endpoint performs only a coarse privilege check and does not verify that the requesting user has access to the specific ML job or notification resources referenced in the req...

4.3CVSS5.6AI score0.00161EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/07/21 10:31 p.m.13 views

CVE-2026-63145 Incorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise

Incorrect Authorization CWE-863 in Kibana can lead to integrity compromise of Machine Learning audit and notification records via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A vulnerability exists in Kibana's Machine Learning functionality where a Machine Learning management...

4.3CVSS5.7AI score
SaveExploits0References3
NVD
NVD
added 2026/07/21 10:17 p.m.7 views

CVE-2026-60304

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle...

6.5CVSS0.00287EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.7 views

CVE-2026-60300

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

9.8CVSS0.00473EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.6 views

CVE-2026-60233

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this...

4.3CVSS0.00354EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.6 views

CVE-2026-60209

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

9.8CVSS0.00473EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.7 views

CVE-2026-60210

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence...

9.8CVSS0.00473EPSS
SaveExploits0References1
Rows per page
Query Builder