Lucene search
+L

15800 matches found

CNNVD
CNNVD
added 2026/02/25 12:00 a.m.22 views

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. Versions of GitLab CE/EE prior to 18.9.1 contained a security...

7.5CVSS5.8AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/25 12:00 a.m.9 views

PT-2026-21928

Name of the Vulnerable Software and Affected Versions KrakenD-CE versions prior to 2.13.1 KrakenD-EE versions prior to 2.13.0 Description An improper resource shutdown or release issue exists in KrakenD, specifically within the CircuitBreaker modules of both KrakenD-CE and KrakenD-EE. The issue...

5.3CVSS5.2AI score0.00256EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/02/25 12:00 a.m.21 views

GitLab EE 安全漏洞

GitLab Enterprise Edition EE is a content management system provided by the American company GitLab. There were security vulnerabilities in versions of GitLab EE from 17.11 to 18.7.5, as well as in versions 18.8 to 18.8.5 and 18.9 to 18.9.1. These vulnerabilities stemmed from the possibility that...

4.3CVSS5.8AI score0.00229EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/25 12:00 a.m.12 views

PT-2026-21995

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 14.4 through 18.7.4 GitLab CE/EE versions 18.8 through 18.8.4 GitLab CE/EE versions 18.9 through 18.9.0 Description An unauthenticated user could potentially cause a denial-of-service condition by sending specially crafte...

7.5CVSS5.2AI score0.00357EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/02/25 12:00 a.m.14 views

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. Versions of GitLab CE/EE prior to 18.7.5, 18.8.5, and 18.9.1 containe...

7.5CVSS5.8AI score0.00357EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/25 12:00 a.m.19 views

PT-2026-21997

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.11 through 18.7.4 GitLab EE versions 18.8 through 18.8.4 GitLab EE versions 18.9 through 18.9.0 Description A flaw existed in GitLab EE that, under specific circumstances, could have allowed Developer-role users with...

4.3CVSS5.2AI score0.00229EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2026/02/25 12:00 a.m.19 views

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. Versions of GitLab CE/EE prior to 18.7.5, 18.8.5, and 18.9.1 containe...

4.3CVSS5.8AI score0.0019EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/25 12:00 a.m.19 views

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. Versions of GitLab CE/EE prior to 18.7.5, 18.8.5, and 18.9.1 containe...

7.5CVSS5.8AI score0.0035EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/25 12:00 a.m.15 views

GitLab CE/EE 跨站脚本漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. Versions of GitLab CE/EE prior to 18.7.5, 18.8.5, and 18.9.1 containe...

8CVSS5.8AI score0.00309EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/24 10:05 p.m.6 views

CVE-2026-26351

GetSimpleCMS Community Edition CE versions prior to 3.3.22 3.3.16 tested contains a stored cross-site scripting XSS vulnerability in the Theme to Components functionality within components.php. User-supplied input provided to the "slug" field of a component is stored without proper output encodin...

4.8CVSS5.9AI score0.00295EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/02/24 10:05 p.m.37 views

CVE-2026-26351 GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php

GetSimpleCMS Community Edition CE versions prior to 3.3.22 3.3.16 tested contains a stored cross-site scripting XSS vulnerability in the Theme to Components functionality within components.php. User-supplied input provided to the "slug" field of a component is stored without proper output encodin...

4.8CVSS0.00295EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/24 4:39 p.m.24 views

Security Bulletin: Security vulnerability affects IBM® SDK, Java™ Technology Edition (CVE-2026-1188)

Summary Security vulnerability has been addressed in IBM® SDK, Java™ Technology Edition. Vulnerability Details CVEID:CVE-2026-1188 DESCRIPTION: In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not...

9.8CVSS5.7AI score0.005EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/22 1:28 a.m.13 views

CVE-2026-24892

openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. openITCOCKPIT Community Edition 5.3.1 and earlier contains an unsafe PHP deserialization pattern in the processing of changelog entries. Serialized changelog data derived fro...

8.8CVSS6.2AI score0.00813EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/02/20 10:56 p.m.8 views

CVE-2019-25447 OrientDB 3.0.17 Cross-Site Request Forgery

OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endpoints like /database/, /command/, and /document/. Attackers can create or delete databases, modify schema classes,...

5.3CVSS5.1AI score0.0013EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/02/19 1:27 a.m.12 views

CVE-2026-22762

Dell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912, contain an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this...

6.5CVSS5.8AI score0.00325EPSS
SaveExploits0References1
Amazon
Amazon
added 2026/02/19 12:00 a.m.21 views

Important: java-1.8.0-openjdk

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK:...

7.5CVSS5.8AI score0.00879EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/18 10:05 p.m.13 views

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by a vulnerability that could provide weaker than expected security (CVE-2025-13333)

Summary IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by a vulnerability that could provide weaker than expected security when enabling AES-256 password encryption. Vulnerability Details Refer to the security bulletins listed in the...

4.9CVSS5.5AI score0.0031EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/17 7:53 p.m.5 views

CVE-2026-22762

Dell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912, contain an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this...

6.5CVSS5.9AI score0.00325EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/17 12:00 a.m.28 views

Dell Avamar Server和Dell Avamar Virtual Edition 路径遍历漏洞

Dell Avamar Server and Dell Avamar Virtual Edition are data backup and recovery software developed by the American company Dell. Both products have a path traversal vulnerability, particularly in versions prior to 19.10 SP1 with CHF338912. This vulnerability stems from improper restrictions on...

6.5CVSS5.9AI score0.00325EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2026/02/16 7:17 p.m.18 views

GHSA-W487-9R9P-6P96 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce-fips, gitlab-pages-fips...

5.9AI score
SaveExploits0
Rows per page
Query Builder