Lucene search
+L

40 matches found

Tenable Nessus
Tenable Nessus
•added 2026/03/19 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-4147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS5.5AI score0.00364EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/17 6:30 p.m.•18 views

EUVD-2026-12586

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/17 4:16 p.m.•13 views

CVE-2026-4147

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS0.00364EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/17 4:16 p.m.•14 views

UBUNTU-CVE-2026-4147

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/17 3:50 p.m.•5 views

CVE-2026-4147

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/03/17 3:50 p.m.•19 views

CVE-2026-4147 Stack memory disclosure in filemd5 command

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS5.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/17 3:50 p.m.•42 views

CVE-2026-4147 Stack memory disclosure in filemd5 command

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS0.00364EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/17 3:50 p.m.•99 views

CVE-2026-4147

The CVE-2026-4147 entry describes an issue where an authenticated user with the read role can read limited amounts of uninitialized stack memory through specially crafted issuances of the filemd5 command. Root cause: exposure of uninitialized stack memory during filemd5 handling. Impact: potentia...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/17 3:50 p.m.•10 views

CVE-2026-4147 Stack memory disclosure in filemd5 command

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References1
MongoDB
MongoDB
•added 2026/03/17 3:50 p.m.•15 views

Stack memory disclosure in filemd5 command

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2026/03/17 12:00 a.m.•16 views

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/17 12:00 a.m.•0 views

CVE-2026-4147: Use of Uninitialized Variable

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/17 12:00 a.m.•27 views

PT-2026-25906

Name of the Vulnerable Software and Affected Versions versions prior to 2026-4147 Description An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command. This can occur through invocations of the filemd5...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References9
OSV
OSV
•added 2025/12/02 1:08 a.m.•14 views

GHSA-JRHG-82W2-VVJ7 Gin-vue-admin has an arbitrary file deletion vulnerability

Impact Attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder The affected code: Affected interfaces: /api/fileUploadAndDownload/removeChunk POC: You can specify the...

8.7CVSS6.8AI score0.00579EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/12/02 1:08 a.m.•18 views

Gin-vue-admin has an arbitrary file deletion vulnerability

Impact Attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder The affected code: Affected interfaces: /api/fileUploadAndDownload/removeChunk POC: You can specify the...

9.1CVSS6.9AI score0.00579EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2025/12/01 11:15 p.m.•18 views

CVE-2025-66410

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder...

9.1CVSS0.00579EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/01 10:28 p.m.•12 views

CVE-2025-66410 Gin-vue-admin has an arbitrary file deletion vulnerability

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder...

8.7CVSS6.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•1 views

CVE-2025-66410: Improper Limitation of a Pathname to a Restricted Directory

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder...

9.1CVSS5.8AI score0.00579EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•14 views

Gin-Vue-Admin 路径遍历漏洞

Gin-Vue-Admin is flipped-aurora open source a full-stack predevelopment infrastructure platform based on Vue and Gin development. A path traversal vulnerability exists in Gin-Vue-Admin version 2.8.6 and earlier, which stems from an attacker being able to control the FileMd5 parameter to delete...

9.1CVSS6.6AI score0.00579EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/12/01 12:00 a.m.•9 views

PT-2025-48577

Name of the Vulnerable Software and Affected Versions Gin-vue-admin versions prior to 2.8.6 Description Gin-vue-admin, a backstage management system based on vue and gin, is affected by a file deletion issue. Attackers can delete any file on the server, potentially causing damage or unavailabilit...

9.1CVSS5.4AI score0.00579EPSS
SaveExploits1
Rows per page
Query Builder