Lucene search
+L

1960 matches found

Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-4371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection...

8.2CVSS7.1AI score0.00641EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/03/20 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-4439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a sandbox escape via a...

8.8CVSS8.1AI score0.00355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/03/19 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-43441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe...

8.8CVSS6.2AI score0.0096EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/03/19 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2006-10003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in stserialstack. In the case stackptr == stacksize - 1, the stack will NOT be...

9.8CVSS8.1AI score0.00548EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/03/18 12:30 a.m.•19 views

EUVD-2026-12657

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission...

5.3CVSS5.8AI score0.00181EPSS
SaveExploits0References2
OSV
OSV
•added 2026/03/18 12:00 a.m.•30 views

UBUNTU-CVE-2026-3856

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could all...

9.1CVSS5.8AI score0.00181EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/03/17 11:16 p.m.•11 views

CVE-2026-3856

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission...

9.1CVSS5.8AI score0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/17 10:20 p.m.•9 views

CVE-2026-3856 IBM Db2 Recovery Expert Missing Integrity Check

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission...

5.3CVSS8AI score0.00181EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/03/17 6:34 p.m.•12 views

Security Bulletin: CVE-2026-3856 found in IBM Db2 Recovery Expert for Linux, UNIX and Windows v5.5

Summary IBM Db2 Recovery Expert for Linux, UNIX and Windows could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission. Vulnerability Details ID: CVE-2026-3856 DESCRIPTION: IBM DB2 Recovery Expert for Linux, UNIX...

9.1CVSS8.1AI score0.00181EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/02/27 10:09 p.m.•23 views

EUVD-2026-8909

Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix...

5.9CVSS6AI score0.00754EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/26 10:20 p.m.•7 views

CVE-2026-28208 Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix

Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in LocalFolderExtractor allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on Linux/Unix...

5.9CVSS6.5AI score0.00754EPSS
SaveExploits1References3
CVE
CVE
•added 2026/02/26 10:20 p.m.•70 views

CVE-2026-28208

Summary: Junrar is an open-source Java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in LocalFolderExtractor allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on L...

5.9CVSS6.5AI score0.00754EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/26 12:00 a.m.•1 views

CVE-2026-28208: Improper Limitation of a Pathname to a Restricted Directory

Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in LocalFolderExtractor allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on Linux/Unix...

5.9CVSS6.3AI score0.00754EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/26 12:00 a.m.•25 views

PT-2026-22207

Name of the Vulnerable Software and Affected Versions Junrar versions prior to 7.5.8 Description Junrar is an open source java RAR archive library. A path traversal flaw exists in the LocalFolderExtractor component. When processing a specially crafted RAR archive on Linux/Unix systems, an attacke...

5.9CVSS6.7AI score0.00754EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
•added 2026/02/19 1:28 a.m.•18 views

CVE-2025-27904

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

6.5CVSS5.5AI score0.00117EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/19 1:28 a.m.•18 views

CVE-2025-27903

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication channel that could allow an attacker to obtain sensitive information using man in the middle techniques...

5.9CVSS5.5AI score0.00138EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/18 7:30 p.m.•16 views

CVE-2025-14689

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

6.5CVSS5.5AI score0.00249EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/18 7:30 p.m.•18 views

CVE-2025-33124

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size...

6.5CVSS5.8AI score0.00249EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/18 7:30 p.m.•16 views

CVE-2025-33130

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack...

6.5CVSS5.8AI score0.00249EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/02/18 3:20 p.m.•31 views

Security Bulletin: IBM® Db2® is vulnerable to a denial of service due to insufficient validation in data query logic (CVE-2025-36427)

Summary IBM® Db2® is vulnerable to a denial of service due to insufficient validation in data query logic Vulnerability Details CVEID:CVE-2025-36427 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a user to cause a denial of service due to insufficient...

6.5CVSS6AI score0.00373EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder