Lucene search
+L

506004 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•19 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Beets vulnerability (USN-8747-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8747-1 advisory. It was discovered that Beets incorrectly escaped untrusted media metadata in its web interface. An attacker could...

6CVSS6.3AI score0.00529EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•0 views

CVE-2026-90444: Improper Neutralization of Special Elements used in an OS Command

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitra...

8.7CVSS6.2AI score0.00396EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•0 views

CVE-2026-72708: Improper Neutralization of Special Elements used in an SQL Command

SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauthenticated attackers to inject arbitrary SQL by supplying a crafted annee parameter value matching a word character followed by an open parenthesis, which bypasses escaping...

8.7CVSS6AI score0.00518EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•9 views

RockyLinux 8 : ansible-core (RLSA-2026:66248)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66248 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...

7.8CVSS6.2AI score0.00222EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-88034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file...

8.3CVSS5.7AI score0.00455EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•12 views

PT-2026-90512

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitra...

8.7CVSS6.2AI score0.00396EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•20 views

PT-2026-89883

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

7.8CVSS5.8AI score0.00842EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•26 views

PT-2026-89849

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a CSV formula injection vulnerability in the myComments.download.php endpoint that fails to sanitize spreadsheet formula prefixes in comment text. Authenticated users can inject formulas starting with =, +, -, or @...

5.4CVSS5.8AI score0.00235EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•22 views

PT-2026-90023

Unauthenticated PHP Object Injection in Masteriyo - LMS = 3.4.0 versions...

8.8CVSS5.7AI score0.00518EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•18 views

PT-2026-90020

Unauthenticated PHP Object Injection in Everest Forms = 3.6.0 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/09/11 12:00 a.m.•5 views

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37989)

Sales and Inventory System is a business resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability, which stems from the improper validation of the companyname parameter in the /pages/suptransac.php file...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•19 views

PT-2026-89884

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java keystore passwd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which ...

8.6CVSS6AI score0.01286EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•18 views

PT-2026-89911

SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the public sitemap endpoint where the MySQL escaper spip mysql cite in ecrire/req/mysql.php returns values unescaped when the target column is a date type and the supplied value matches the pattern of a word...

8.7CVSS5.9AI score0.00518EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•18 views

PT-2026-89867

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

3.3CVSS5.8AI score0.00122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•26 views

PT-2026-89784

The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of anyone who views t...

6AI score0.00431EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•9 views

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : PHP vulnerabilities (USN-8743-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8743-1 advisory. It was discovered that PHP incorrectly handled backslash escaping in the...

9.8CVSS6.3AI score0.00426EPSS
SaveExploits4References4
CVE
CVE
•added 2026/09/11 12:00 a.m.•30 views

CVE-2026-79362

Certain Woltlab products are vulnerable to Remote Code Execution (RCE) via Cache Poisoning in the WCF component. The flaw affects versions WCF >= 6.1.0 until = 6.2.0 until

5.8AI score0.00628EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-88036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file...

8.3CVSS5.8AI score0.00476EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-88058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

8.6CVSS5.8AI score0.00875EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•20 views

SQL Server Management Studio (September 2026)

The SQL Server Management Studio installation on the remote host is missing a security update. It is, therefore, affected by an other vulnerability: - Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to...

9.6CVSS6AI score0.00882EPSS
SaveExploits0References2
Rows per page
Query Builder