Lucene search
+L

14033 matches found

ATTACKERKB
ATTACKERKB
added 2026/06/24 11:14 p.m.6 views

CVE-2026-39951

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graphnameregexp in the Reports feature. This issue has been fixed in version 1.2.31...

7.6CVSS5.9AI score0.00221EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/06/24 11:14 p.m.7 views

CVE-2026-39951

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graphnameregexp in the Reports feature. This issue has been fixed in version 1.2.31...

8.8CVSS5.9AI score0.00221EPSS
SaveExploits0
OSV
OSV
added 2026/06/24 11:14 p.m.6 views

CVE-2026-39951 Cacti: Stored SQL Injection via graph_name_regexp in Reports feature

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graphnameregexp in the Reports feature. This issue has been fixed in version 1.2.31...

7.6CVSS6AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/24 6:43 p.m.8 views

CVE-2026-13034

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

4.7CVSS5.8AI score0.00143EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/06/24 4:28 p.m.21 views

CVE-2026-52978

The CVE-2026-52978 issue affects the Linux kernel PSP networking code. The netlink operations dev-set and key-rotate modify sensitive PSP state (version configuration and cryptographic keys) but did not require CAP_NET_ADMIN; access was only checked by psp_dev_check_access() for netns membership....

5.5CVSS5.7AI score0.00126EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
added 2026/06/24 4:16 p.m.9 views

Deserialization of Untrusted Data

Overview feast is a Python SDK for Feast Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the ApplyFeatureView handler of registryserver.py, which calls FeatureView.fromproto and deserializes the feature view's embedded user-defined function before the appl...

9.8CVSS6.2AI score0.01143EPSS
SaveExploits2References2
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.11 views

Astra Linux – Vulnerability in qBittTorrent

All versions of the qBittorrent client up to 4.5.5 use default credentials when the web user interface is enabled. Administrators are not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and...

9.8CVSS6AI score0.00908EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/24 2:49 p.m.7 views

CVE-2026-56121 Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. The userdefinedfunction.body field of an OnDemandFeatureView spec is decoded from...

9.3CVSS6.8AI score
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2026/06/24 2:49 p.m.22 views

CVE-2026-56121 Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. The userdefinedfunction.body field of an OnDemandFeatureView spec is decoded from...

9.8CVSS6.8AI score0.01143EPSS
SaveExploits2References4
NVD
NVD
added 2026/06/24 7:16 a.m.21 views

CVE-2026-9619

The Reviews and Rating – Docplanner plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

4.3CVSS0.00298EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/06/24 5:33 a.m.13 views

EUVD-2026-38666

The Reviews and Rating – Docplanner plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

4.3CVSS5.7AI score0.00298EPSS
SaveExploits0References6
CVE
CVE
added 2026/06/24 5:33 a.m.17 views

CVE-2026-9619

CVE-2026-9619 affects the Reviews and Rating – Docplanner WordPress plugin, vulnerable in all versions up to 1.1.4 due to insufficient authorization checks for an action (sync_reviews AJAX). This allows authenticated users with subscriber-level access and above to trigger outbound scraping, write...

4.3CVSS5.7AI score0.00298EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.14 views

IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.7 (7277536)

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7277536 advisory. - IBM WebSphere Application Server Liberty is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled. CWE:...

7.5CVSS6.2AI score0.00262EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/24 12:0 a.m.11 views

PT-2026-51698

Name of the Vulnerable Software and Affected Versions Reviews and Rating – Docplanner plugin for WordPress versions prior to 1.1.5 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers wi...

4.3CVSS5.6AI score0.00298EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/06/24 12:0 a.m.34 views

PT-2026-51837

Name of the Vulnerable Software and Affected Versions Feast versions prior to 0.63.0 Description An unsafe deserialization issue exists in the registry server that allows unauthenticated or unauthorized attackers to achieve remote code execution. By sending a crafted gRPC request, an attacker can...

9.8CVSS6.3AI score0.01143EPSS
SaveExploits2References10
NVD
NVD
added 2026/06/23 9:17 p.m.14 views

CVE-2026-54516

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, POJOPropertiesCollector.renameProperties allows a property with @JsonProperty"renamed" on the getter and @JsonIgnore on the setter to be renamed...

5.3CVSS0.00283EPSS
SaveExploits0References5
Chainguard
Chainguard
added 2026/06/23 8:21 p.m.15 views

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, rancher-agent, gpu-operator, cadvisor, gpu-operator-fips, node-feature-discovery-fips, k8s-device-plugin, rancher, podman, sriov-network-device-plugin, k8s-device-plugin-fips, node-feature-discovery, podman-fips, prometheus-podman-exporter, buildah,...

3.3CVSS7.6AI score0.00186EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/06/23 8:21 p.m.19 views

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, rancher-agent, gpu-operator, cadvisor, gpu-operator-fips, node-feature-discovery-fips, k8s-device-plugin, rancher, podman, sriov-network-device-plugin, k8s-device-plugin-fips, node-feature-discovery, podman-fips, prometheus-podman-exporter, buildah,...

5.4AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/23 8:20 p.m.14 views

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, buildah, cadvisor, sriov-network-device-plugin, k8s-device-plugin, nvidia-container-toolkit, podman...

5.4AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/23 8:20 p.m.19 views

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, buildah, cadvisor, sriov-network-device-plugin, k8s-device-plugin, nvidia-container-toolkit, podman...

3.3CVSS7.6AI score0.00186EPSS
SaveExploits0
Rows per page
Query Builder