Lucene search
K

1104 matches found

Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.2 views

PT-2026-35826

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument default...

6.3CVSS5.1AI score0.0002EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/04/27 7:23 p.m.1 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.2AI score0.00023EPSS
Exploits0References1
NVD
NVD
added 2026/04/26 4:16 a.m.2 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS0.00023EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/04/26 3:30 a.m.28 views

CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS0.00023EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/04/26 3:30 a.m.1 views

CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.3AI score0.00023EPSS
Exploits0References8
EUVD
EUVD
added 2026/04/26 3:30 a.m.3 views

EUVD-2026-25693

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.3AI score0.00023EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/26 3:30 a.m.2 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS4.7AI score0.00023EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.1 views

PT-2026-35199

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.2AI score0.00023EPSS
Exploits0References9
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/24 4:22 p.m.5 views

Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub

Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.3.1 Patch 3 Vulnerability Details CVEID:CVE-2025-14923 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected...

9.8CVSS5.9AI score0.00035EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/22 4:51 p.m.2 views

Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty (CVE-2024-29371, CVE-2025-14923)

Summary IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty CVE-2024-29371, CVE-2025-14923. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2024-29371 DESCRIPTION: In jose4j before 0.9.6, an attacker can...

9.8CVSS5.7AI score0.00036EPSS
Exploits1Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/04/21 6:27 a.m.2 views

Multiple vulnerabilities in silex technology SD-330AC and AMC Manager

Overview SD-330AC and AMC Manager provided by silex technology, Inc. contain multiple vulnerabilities listed below. Stack-based buffer overflow in processing the redirect URLs CWE-121 - CVE-2026-32955 Heap-based buffer overflow in processing the redirect URLs CWE-122 - CVE-2026-32956 Missing...

9.8CVSS6.9AI score0.17699EPSS
Exploits1References27
EUVD
EUVD
added 2026/04/20 9:30 a.m.0 views

EUVD-2026-23787

A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component File Upload Endpoint. Performing a manipulation of the argument SECRETKEY results in use of hard-coded cryptographic key . Remote exploitation o...

3.1CVSS4.9AI score0.00035EPSS
Exploits0References5
NVD
NVD
added 2026/04/20 7:16 a.m.0 views

CVE-2026-6611

A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component File Upload Endpoint. Performing a manipulation of the argument SECRETKEY results in use of hard-coded cryptographic key . Remote exploitation o...

3.1CVSS0.00035EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/20 6:0 a.m.26 views

CVE-2026-6611 liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key

A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component File Upload Endpoint. Performing a manipulation of the argument SECRETKEY results in use of hard-coded cryptographic key . Remote exploitation o...

3.1CVSS0.00035EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/20 6:0 a.m.0 views

CVE-2026-6611

A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component File Upload Endpoint. Performing a manipulation of the argument SECRETKEY results in use of hard-coded cryptographic key . Remote exploitation o...

3.1CVSS5AI score0.00035EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2026/04/20 4:16 a.m.0 views

CVE-2026-32958

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS0.00033EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/20 3:19 a.m.2 views

CVE-2026-32958

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS5.7AI score0.00033EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/20 3:19 a.m.32 views

CVE-2026-32958

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS0.00033EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/20 3:19 a.m.0 views

CVE-2026-32958

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS5.7AI score0.00033EPSS
Exploits0References4Affected Software2
CVE
CVE
added 2026/04/20 3:19 a.m.8 views

CVE-2026-32958

Affected products: SD-330AC and AMC Manager by silex technology, Inc. The issue stems from a hard-coded cryptographic key, enabling an administrative user to be directed to apply a fake firmware update. According to the provided data, impact is high on integrity, with no confidentiality impact, a...

6.9CVSS5.7AI score0.00033EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder