Lucene search
+L

16907 matches found

Patchstack
Patchstack
added 2026/05/26 5:42 a.m.12 views

WordPress Rosaleen theme <= 2.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Rosaleen versions = 2.8...

5.8AI score0.00435EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2026/05/26 3:55 a.m.17 views

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

7.8CVSS6.2AI score0.00553EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/05/26 2:41 a.m.13 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.8CVSS5.8AI score0.00446EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/05/26 2:28 a.m.17 views

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this...

7.8CVSS7.4AI score0.00755EPSS
SaveExploits1References5
Amazon
Amazon
added 2026/05/26 12:0 a.m.21 views

Important: valkey

Issue Overview: Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from processCommandAndResetClient when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated...

8.8CVSS6.1AI score0.02995EPSS
SaveExploits5
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.12 views

PT-2026-43325

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod fastcgi module...

6.2CVSS5.8AI score0.00197EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/26 12:0 a.m.13 views

TencentOS Server 3: .NET 8.0 (TSSA-2026:0390)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0390 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

7.5CVSS6AI score0.02279EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.13 views

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. There are security vulnerabilities in versions prior to Apple macOS Sequoia 15.7, Sonoma 14.8, and Tahoe 26. These vulnerabilities stem from logical issues and could allow malicious applicatio...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/26 12:0 a.m.16 views

ALSA-2026:20693 Moderate: mysql8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. Security Fixes: mysql:...

6.5CVSS7.3AI score0.00323EPSS
SaveExploits0References40
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.12 views

IBM Web Server Plug-ins for IBM WebSphere Application Server and IBM WebSphere Liberty 环境问题漏洞

IBM Web Server Plug-ins for IBM WebSphere Application Server and IBM WebSphere Liberty are web server integration plugins developed by IBM. Versions 8.5 and 9.0 of these plugins contain environmental issues vulnerabilities. These vulnerabilities stem from improper input validation, which may lead...

9.8CVSS6.1AI score0.00488EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.14 views

IBM HTTP Server 资源管理错误漏洞

IBM HTTP Server is an enterprise-level web server software developed by International Business Machines IBM. Versions 8.5 and 9.0 of IBM HTTP Server contain resource management vulnerabilities that can lead to denial-of-service attacks when attackers have permission to write to certain server...

9.1CVSS5.8AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.9 views

IBM HTTP Server 安全漏洞

IBM HTTP Server is an enterprise-level web server software developed by International Business Machines IBM. Versions 8.5 and 9.0 of IBM HTTP Server contain security vulnerabilities; these vulnerabilities stem from the optional module modfastcgi, which may lead to denial-of-service attacks...

7.5CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.15 views

PT-2026-43367

Name of the Vulnerable Software and Affected Versions IBM HTTP Server version 8.5 IBM HTTP Server version 9.0 Description An issue exists that allows a denial of service via the optional module mod mem cache. Recommendations Restrict the use of the mod mem cache module to minimize the risk of...

7.5CVSS5.8AI score0.00359EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.17 views

PT-2026-43310

Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions prior to 1.2.10 Description An integer overflow exists in the BGP AS PATH attribute encoder. The IPv4UnicastAnnounce::get attributes function calculates the attribute length and stores it in a uint8 t fiel...

9.8CVSS5.7AI score0.00308EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.21 views

IBM HTTP Server 安全漏洞

IBM HTTP Server is an enterprise-level web server software developed by International Business Machines IBM. Versions 8.5 and 9.0 of IBM HTTP Server contain security vulnerabilities. These vulnerabilities are caused by buffer overflows, which could allow privileged users to execute remote code or...

8CVSS6.3AI score0.0026EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2026/05/26 12:0 a.m.82 views

May 26, 2026-KB5092430 Cumulative Update Preview for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2

None None...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/05/26 12:0 a.m.12 views

TencentOS Server 3: .NET 8.0 (TSSA-2026:0355)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0355 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.5CVSS7.1AI score0.02818EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/26 12:0 a.m.13 views

RHEL 8 : compat-libtiff3 (RHSA-2026:20583)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:20583 advisory. The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This...

7.8CVSS6.3AI score0.00553EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.15 views

IBM HTTP Server 安全漏洞

IBM HTTP Server is an enterprise-level web server software developed by International Business Machines IBM. Versions 8.5 and 9.0 of IBM HTTP Server contain security vulnerabilities. These vulnerabilities stem from invalid pointer dereferencing, which could allow privileged users to disclose...

7.3CVSS5.8AI score0.00252EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 10:5 p.m.32 views

CVE-2026-48837

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elements For Elementor: from n/a through 2.0.8...

8.5CVSS5.8AI score0.00373EPSS
SaveExploits0References2
Rows per page
Query Builder