Lucene search
+L

8645 matches found

Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•23 views

PT-2026-62876

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor...

3.1CVSS7AI score0.00211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•29 views

PT-2026-62478

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions 21.3 through 21.21 Oracle GoldenGate versions 23.4 through 23.26.1 Description A flaw in the Distribution Server executable allows a high privileged attacker with network access via HTTPS to compromise the system...

7.2CVSS7.1AI score0.00486EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/07/21 12:00 a.m.•18 views

The vulnerability of the SPDY framework for developing network applications, servers, and client protocols using Netty allows attackers to induce service failures.

The vulnerability of the SPDY framework for developing network applications, servers, and client protocols related to Netty is related to the uncontrolled distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS5.3AI score0.00665EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/20 12:00 a.m.•18 views

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows a hacker to trigger a service failure

The vulnerability of the HTTP.sys driver on Windows operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS5.4AI score0.01174EPSS
SaveExploits0References2Affected Software14
Fedora
Fedora
•added 2026/07/19 5:48 a.m.•25 views

[SECURITY] Fedora 44 Update: erlang-26.2.5.21-4.fc44

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

8.8CVSS6.5AI score0.00497EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/07/17 12:00 a.m.•31 views

Routing Ceilings Are Domain-Independent: Structural Prior Injection in Code Security Vulnerability Detection

Large language models LLMs exhibit a well-documented gap between latent capability and consistent activation: the router hypothesis posits that models possess the knowledge to solve a task but lack reliable internal routing to activate it. Prior work in formal mathematical reasoning SAIR, C�zares...

5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•18 views

The vulnerability of Rockwell Automation’s communication adapter software models 1718-AENTR and 1719-AENTR lies in their susceptibility to unlimited resource distribution, which allows a hacker to trigger a service failure.

The vulnerability of Rockwell Automation’s communication adapter software models 1718-AENTR and 1719-AENTR lies in their susceptibility to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

9.4CVSS5.3AI score0.00428EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•15 views

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers lies in the unlimited distribution of resources, which allows a hacker to trigger a service failure.

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in service operations...

7.4CVSS7.3AI score0.00265EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•22 views

The vulnerability of Rockwell Automation’s 1734 POINT I/O microprogramming system, related to unlimited resource distribution, allows a hacker to trigger a service failure.

The vulnerability of Rockwell Automation’s 1734 POINT I/O software lies in its unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.3AI score0.00208EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/07/16 12:00 a.m.•17 views

SUSE SLES15 Security Update : distribution (SUSE-SU-2026:3049-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3049-1 advisory. This update for distribution rebuilds it against the current go security release. Tenable has extracted the preceding description block...

6.2AI score
SaveExploits0References1
OSV
OSV
•added 2026/07/15 5:53 p.m.•24 views

MAL-2026-10690 Malicious code in qwen-asr-pvt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8b2f6db0443a648cdf03348c8dd9351568469f84b8d61022f1ed1da2a330e The package's pyproject.toml declares an unpinned runtime dependency on transformers4576, a lookalike of the widely used HuggingFace transformers...

6.1AI score
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/07/15 1:08 p.m.•19 views

Security update for distribution

This update for distribution rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...

6.1AI score
SaveExploits0
OSV
OSV
•added 2026/07/15 1:08 p.m.•11 views

SUSE-SU-2026:3049-1 Security update for distribution

This update for distribution rebuilds it against the current go security release...

6.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•2 views

PT-2026-64780

This update for distribution rebuilds it against the current go security release...

5.9AI score
SaveExploits0References2
OSV
OSV
•added 2026/07/14 8:55 a.m.•33 views

BIT-SETUPTOOLS-2026-59890 setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unico...

6.1CVSS7AI score0.00405EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•21 views

PT-2026-58929

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unico...

6.1CVSS7.1AI score0.00405EPSS
SaveExploits1References5
Redos
Redos
•added 2026/07/14 12:00 a.m.•17 views

ROS-20260714-73-0046

The vulnerability in libde265 is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.3CVSS6.2AI score0.00327EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/14 12:00 a.m.•20 views

The vulnerability of the Undertow web server, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Undertow web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS8.5AI score0.02325EPSS
SaveExploits1References4Affected Software9
OSV
OSV
•added 2026/07/13 10:07 p.m.•20 views

MAL-2026-10506 Malicious code in node-fsagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0392a3ddea9b6099e8501fdb827f586a410323cecea214aa50fc1be42183b The package tarball ships archive-sender.js, which archives the host path /root/.codex, splits the tar into 200MB chunks, reconstructs an npm registr...

6.1AI score
SaveExploits0References10
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/13 10:07 p.m.•44 views

Malicious code in node-fsagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0392a3ddea9b6099e8501fdb827f586a410323cecea214aa50fc1be42183b The package tarball ships archive-sender.js, which archives the host path /root/.codex, splits the tar into 200MB chunks, reconstructs an npm registr...

6.1AI score
SaveExploits0References10
Rows per page
Query Builder