Lucene search
+L

8582 matches found

Vulnrichment
Vulnrichment
•added 2026/09/18 7:28 p.m.•9 views

CVE-2026-81669 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

7.2CVSS6.2AI score0.01322EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 7:28 p.m.•46 views

CVE-2026-81669 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

7.2CVSS0.01322EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 7:28 p.m.•14 views

EUVD-2026-83307

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

7.2CVSS6.2AI score0.01322EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 7:28 p.m.•29 views

CVE-2026-81669

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input , achieving command execution with root privileges . The CVSS 3.1 score is 7....

7.2CVSS6.2AI score0.01322EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
•added 2026/09/18 12:23 a.m.•11 views

SUSE CVE-2026-89665

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

8.2CVSS6AI score0.00621EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•8 views

CVE-2026-10030: Improper Authorization

IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks...

7.1CVSS5.8AI score0.00226EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•4 views

PT-2026-95627

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated privileged CLI user can execute arbitrary shell commands with root privileges. This occurs due to a command injection flaw in the create csr wildcard CLI command via the...

7.2CVSS6.3AI score0.01322EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•6 views

PT-2026-95645

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The create partition time function reads the time encoder value from the part config table and interpolates it into a dynamically executed SELECT statement without proper identifier quoting. A use...

9.9CVSS5.9AI score0.00804EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-81669: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

7.2CVSS6.2AI score0.01322EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•6 views

CVE-2026-61552: Improper Control of Generation of Code

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

7.2CVSS5.8AI score0.00901EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/17 6:08 p.m.•19 views

rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

7.8CVSS6.4AI score0.00176EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/17 4:08 p.m.•47 views

CVE-2026-90277 md/md-llbitmap: prevent create failure bitmap UAF

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: prevent create failure bitmap UAF llbitmapcreate publishes mddev-bitmap before reading the bitmap superblock. This is needed because llbitmapreadsb can initialize a new bitmap and flush it through helpers that use...

0.00206EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•4 views

PT-2026-94501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the smb check perm dacl function incorrectly bounds its Access Control Entry ACE walks by the remaining NT security descriptor NTSD length acl...

8.1CVSS5.8AI score0.00478EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•5 views

PT-2026-94413

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/smc component where IPPROTO SMC sockets fail to release an internal TCP sock, referred to as clcsock, when socket creation fails after the proto-init hook has...

5.5AI score0.00209EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•3 views

PT-2026-94678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the logitech-hidpp driver where the hidpp ff init function fails to properly clean up resources during an initialization failure. Specifically, if allocations for the...

5.6AI score0.00198EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-94478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vdpa sim component where the vdpasim create function leaves vdpasim-worker as an ERR PTR an error pointer if kthread run worker fails. The subsequent error path...

5.7AI score0.002EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-94625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the md/md-llbitmap component. The llbitmap create function publishes mddev-bitmap before reading the bitmap superblock. If the llbitmap read sb...

5.7AI score0.00206EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•2 views

PT-2026-94783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the RDMA/mlx5 component when the set user buf size function calculates the Queue Pair QP buffer size. The function performs a left-shift operation on...

8.8CVSS7.3AI score0.007EPSS
SaveExploits0References324
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•2 views

PT-2026-94932

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device reference count leak exists during MHI device creation. The function mhi ep create device allocates references for the UL and DL channels; however, if dev set name or device add...

8.8CVSS5.6AI score0.007EPSS
SaveExploits0References322
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•4 views

PT-2026-94733

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.3 Description An issue exists in the md/raid1 component where adding a new rdev to an existing RAID1 array with the serialize policy enabled can lead to a system crash. This occurs because the bind rdev to array...

8.8CVSS7AI score0.007EPSS
SaveExploits0References320
Rows per page
Query Builder