Lucene search
+L

53901 matches found

Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.37 views

PT-2026-35369

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.19.0 through 4.19.x Apache Camel versions 4.18.0 through 4.18.1 Description The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of .key files in the configured key directory using...

7.8CVSS6.6AI score0.00246EPSS
SaveExploits1References26
Packet Storm
Packet Storm
added 2026/04/27 12:0 a.m.196 views

📄 Sequelize 6.37.7 SQL Injection

A remote SQL injection vulnerability exists Sequelize versions 6.37.7 and below in the JSON/JSONB where clause processing. When Sequelize parses a JSON path key containing ::, the value after :: is treated as a SQL cast type and is inserted into the generated SQL without proper validation. If an...

7.5CVSS5.8AI score0.00422EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-42033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with...

7.4CVSS7.1AI score0.00808EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-42044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution Gadget...

9.1CVSS5.9AI score0.00586EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/04/26 3:30 a.m.46 views

CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS0.00338EPSS
SaveExploits0References8
CVE
CVE
added 2026/04/26 3:30 a.m.26 views

CVE-2026-7018

Datavane Datavines (up to build 13607645e14a4982468cfdbcf75c85cde63bae71) exposes a vulnerability in the JWT Token Handler component, specifically in TokenManager.java. Manipulation of the tokenSecret parameter can cause use of a hard-coded cryptographic key. The issue is exploitable remotely wit...

6.3CVSS5.3AI score0.00338EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/26 3:30 a.m.6 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS4.7AI score0.00338EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/04/26 12:0 a.m.24 views

Datavines 加密问题漏洞

Datavines is a data quality monitoring and evaluation platform developed by Datavane. Versions of Datavines from 13,607,45e14a4982468cfdbcf75c85cde63bae71 onwards have a security vulnerability related to encryption. This vulnerability stems from the handling of the tokenSecret parameter in the...

6.3CVSS6.2AI score0.00338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.19 views

PT-2026-35199

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.2AI score0.00338EPSS
SaveExploits0References9
Snyk
Snyk
added 2026/04/25 4:11 p.m.10 views

Prototype Pollution

Overview org.webjars.npm:jsondiffpatch is a JSON diff & patch object and array diff, text diff, multiple output formats Affected versions of this package are vulnerable to Prototype Pollution via the jsondiffpatch.patch and jsondiffpatch/formatters/jsonpatch.patch APIs. An attacker can perform...

8.8CVSS6.3AI score0.00378EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/04/25 10:49 a.m.16 views

CVE-2026-22748

A flaw was found in Spring Security. When an application is configured to decode JSON Web Tokens JWTs using NimbusJwtDecoder or NimbusReactiveJwtDecoder, it may not properly validate these tokens if an OAuth2TokenValidator is not explicitly configured. This oversight could allow an attacker with...

6.5CVSS5.3AI score0.00203EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/04/25 7:31 a.m.142 views

SafeVault

SafeVault - Security and Authentication Capstone Project A pr...

6.5AI score
SaveExploits0
Fedora
Fedora
added 2026/04/25 1:58 a.m.13 views

[SECURITY] Fedora 44 Update: jq-1.8.1-3.fc44

lightweight and flexible command-line JSON processor jq is like sed for JSON data =E2=80=93 you can use it to slice and filter and map and transform structured data with the same ease that sed, awk, grep and friends let you play with text. It is written in portable C, and it has zero runtime...

8.2CVSS5.3AI score0.00559EPSS
SaveExploits4
Positive Technologies
Positive Technologies
added 2026/04/25 12:0 a.m.15 views

PT-2026-37190

Name of the Vulnerable Software and Affected Versions n8n-mcp versions prior to 2.47.13 Description When running in HTTP transport mode, authenticated tools/call requests have their full arguments and JSON-RPC parameters written to server logs by the request dispatcher and related code paths befo...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.9 views

SUSE SLES15 Security Update : tomcat10 (SUSE-SU-2026:1603-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1603-1 advisory. Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open...

9.1CVSS7.3AI score0.82933EPSS
SaveExploits9References32
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.8 views

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2026-33947)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33947 advisory. - jq is a command-line JSON processor. In versions 1.8.1 and below, functions jvsetpath,...

6.2CVSS5.7AI score0.00234EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.17 views

SUSE SLES15 Security Update : tomcat (SUSE-SU-2026:1604-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1604-1 advisory. Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open...

9.1CVSS7.3AI score0.82933EPSS
SaveExploits9References32
NVD
NVD
added 2026/04/24 9:16 p.m.19 views

CVE-2026-41472

CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by overwriting the findingsjson field of...

6.1CVSS0.00504EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/04/24 8:40 p.m.14 views

EUVD-2026-25630

CyberPanel versions prior to 2.4.4 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by overwriting the findingsjson field of...

5.3CVSS6.1AI score0.00504EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/24 8:40 p.m.8 views

CVE-2026-41472 CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard

CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by overwriting the findingsjson field of...

5.3CVSS6AI score
SaveExploits0References6
Rows per page
Query Builder