Lucene search
+L

28443 matches found

OSV
OSV
•added 2026/08/13 9:49 a.m.•9 views

JLSEC-2026-1287

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS7.3AI score0.03222EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
•added 2026/08/13 12:00 a.m.•15 views

openSUSE 16 Security Update : perl-Date-Manip (openSUSE-SU-2026:21552-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21552-1 advisory. This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits...

7.5CVSS6AI score0.0063EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•4 views

PT-2026-80529

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

7.5CVSS5.8AI score0.03222EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2026/08/13 12:00 a.m.•17 views

CVE-2026-52066

TLS certificate notAfter validated against hardcoded 2025-01-01 string...

5.3AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/13 12:00 a.m.•16 views

CVE-2026-52060

TLS certificate notAfter validated against hardcoded 2025-01-01 string...

5.3AI score
SaveExploits0References1
NVD
NVD
•added 2026/08/12 6:17 p.m.•15 views

CVE-2026-44741

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS0.005EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/12 5:06 p.m.•116 views

CVE-2026-44741

Summary of CVE-2026-44741 / GHSA-h4ph-crvj-9h92: The Pimcore Admin Classic Bundle contains a SQL injection in the translation grid date filter where the user-supplied property field is interpolated into a SQL expression (UNIX_TIMESTAMP(DATE(FROM_UNIXTIME(...)))) without parameterization. Affected...

8.8CVSS5.8AI score0.005EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/12 5:06 p.m.•29 views

CVE-2026-44741 Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS0.005EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/08/12 5:06 p.m.•19 views

CVE-2026-44741

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS5.6AI score0.005EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/08/12 5:06 p.m.•17 views

EUVD-2026-57357

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS5.6AI score0.005EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/12 5:06 p.m.•12 views

CVE-2026-44741 Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS5.8AI score0.005EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/12 5:06 p.m.•9 views

CVE-2026-44741 Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS5.7AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/08/12 12:00 a.m.•16 views

SUSE SLED15 / SLES15 Security Update : perl-Date-Manip (SUSE-SU-2026:3551-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3551-1 advisory. - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric rang...

7.5CVSS6AI score0.0063EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/12 12:00 a.m.•6 views

CVE-2026-44741: Improper Neutralization of Special Elements used in an SQL Command

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS5.8AI score0.005EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2026/08/11 2:00 p.m.•39 views

Description of the security update for Office Online Server: July 14, 2026 (KB5002884)

None None...

8.8CVSS6.8AI score0.00922EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/11 12:00 a.m.•12 views

SUSE SLES12 Security Update : perl-Date-Manip (SUSE-SU-2026:3537-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3537-1 advisory. - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. -...

7.5CVSS6AI score0.0063EPSS
SaveExploits0References7
OSV
OSV
•added 2026/08/10 5:38 p.m.•18 views

OPENSUSE-SU-2026:21552-1 Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. - CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution ...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/10 5:37 p.m.•7 views

SUSE-SU-2026:23218-1 Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. - CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution ...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/10 5:37 p.m.•5 views

SUSE-SU-2026:23229-1 Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. - CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution ...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
•added 2026/08/10 4:38 p.m.•13 views

Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues: CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution in...

8.7CVSS5.9AI score0.0063EPSS
SaveExploits0References8
Rows per page
Query Builder