Lucene search
+L

18834 matches found

Fedora
Fedora
added 2026/03/25 1:39 a.m.12 views

[SECURITY] Fedora 43 Update: python-multipart-1.3.1-1.fc43

This module provides a fast incremental non-blocking parser for multipart/form-data HTML5, RFC7578, as well as blocking alternatives for easier use in WSGI or CGI applications...

7.5CVSS5.9AI score0.00718EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/03/25 12:00 a.m.12 views

PT-2026-28070

Kiteworks is a private data network PDN. Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally...

4.9CVSS5.8AI score0.00237EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/03/25 12:00 a.m.7 views

The vulnerability of the erspan_fb_xmit() function in the net/ipv4/ip_gre.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the erspanfbxmit function in the net/ipv4/ipgre.c module of the Linux kernel exposes confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00282EPSS
SaveExploits0References19Affected Software3
EUVD
EUVD
added 2026/03/24 9:31 p.m.22 views

EUVD-2026-15025

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used...

4.8CVSS5.8AI score0.00164EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/24 9:16 p.m.11 views

CVE-2026-4433

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used...

4.8CVSS0.00164EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/24 8:26 p.m.8 views

CVE-2026-4433

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used...

4.8CVSS5.8AI score0.00164EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/24 8:26 p.m.36 views

CVE-2026-4433

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used...

4.8CVSS0.00164EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/24 8:26 p.m.4 views

CVE-2026-4433

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used...

4.8CVSS5.8AI score0.00164EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/24 8:26 p.m.49 views

CVE-2026-4433

Tenable OT contains an SSH misconfiguration that can allow exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could enable an attacker to gather system details and potentially aid host compromise. Affected item is the SSH configuration; the vulnerab...

4.8CVSS5.8AI score0.00164EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/24 1:23 p.m.8 views

Security Bulletin: A heap-based buffer overflow flaw affects CICS Transaction Gateway for Multiplatforms container (CVE-2022-0185)

Summary A heap-based buffer overflow flaw affects CICS Transaction Gateway for Multiplatforms container. CICS Transaction Gateway for Multiplatforms container has documented how to address the applicable vulnerability. Vulnerability Details CVEID:CVE-2022-0185 DESCRIPTION: A heap-based buffer...

8.4CVSS7AI score0.25151EPSS
SaveExploits11Affected Software1
The Hacker News
The Hacker News
added 2026/03/24 5:59 a.m.13 views

Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks

Citrix has released security updates to address two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical flaw that could be exploited to leak sensitive data from the application. The vulnerabilities are listed below - CVE-2026-3055 CVSS score: 9.3 - Insufficient input...

9.8CVSS5.9AI score0.99999EPSS
SaveExploits43
EUVD
EUVD
added 2026/03/24 12:30 a.m.22 views

EUVD-2026-14588

OpenClaw before 2026.2.19 contains a local command injection vulnerability in Windows scheduled task script generation that allows attackers to execute arbitrary commands by injecting cmd metacharacters into unsafe gateway.cmd arguments. Attackers with control over service script generation value...

8.5CVSS6.3AI score
SaveExploits0References4
EUVD
EUVD
added 2026/03/24 12:30 a.m.18 views

EUVD-2026-14578

OpenClaw before 2026.2.22 contains an authorization bypass vulnerability in allowlist mode where allow-always persistence at wrapper-level enables approval-bypass execution of different payloads. Attackers can approve benign wrapped system.run commands to broaden trust boundaries and execute...

5.4CVSS6.2AI score
SaveExploits0References4
CNVD
CNVD
added 2026/03/24 12:00 a.m.24 views

OpenClaw has an unspecified vulnerability (CNVD-2026-14832)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that is caused by failing to pass the senderIsOwner flag when processing Discord voice transcription in agentCommand. An attacker could exploit the vulnerability to cause a voi...

5.9CVSS5.9AI score0.00139EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/03/24 12:00 a.m.15 views

OpenClaw Authentication Bypass Vulnerability (CNVD-2026-14840)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an authentication bypass vulnerability that originates from allowing clients authenticated with a shared gateway token to connect as a role=node without device authentication. An attacker could use thi...

5.4CVSS5.9AI score0.00268EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/03/24 12:00 a.m.16 views

OpenClaw Authentication Bypass Vulnerability

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw there is an authentication bypass vulnerability , the vulnerability stems from the gateway authentication there is a path normalization mismatch problem , an attacker can use the vulnerability to bypass...

6.5CVSS5.9AI score0.00192EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/03/24 12:00 a.m.13 views

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) access control systems relates to synchronization errors when using shared resources. This vulnerability allows a malicious individual to gain unauthorized access to the system.

The vulnerability of NetScaler ADC formerly Citrix ADC and the NetScaler Gateway access control system formerly Citrix Gateway is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the system remotely...

9CVSS5.7AI score0.03618EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.13 views

PT-2026-27518

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used...

4.8CVSS5.8AI score0.00164EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/03/24 12:00 a.m.32 views

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) access control systems relates to reading values beyond the allowed range in memory. This allows attackers to bypass existing security mechanisms.

The vulnerability of NetScaler ADC formerly Citrix ADC and the NetScaler Gateway access control system formerly Citrix Gateway relates to reading data beyond the allowed range in memory. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms by sending...

10CVSS5.8AI score0.87166EPSS
SaveExploits7References4Affected Software4
CNVD
CNVD
added 2026/03/24 12:00 a.m.50 views

OpenClaw OS Command Injection Vulnerability (CNVD-2026-15059)

OpenClaw is an automation tool for executing system commands. An authentication bypass vulnerability exists in versions prior to OpenClaw 2026.2.21 that stems from the system failing to enforce secure authentication when the allowInsecureAuth setting is explicitly enabled and the gateway is expos...

8.1CVSS5.9AI score0.00381EPSS
SaveExploits0References1
Rows per page
Query Builder