Lucene search
+L

9157 matches found

Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.50 views

PT-2026-50463

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager affected versions not specified Description An improper neutralization of special elements used in an SQL command, known as SQL Injection, allows a low privileged attacker with adjacent network access to potentially caus...

5.7CVSS5.8AI score0.00192EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.27 views

PT-2026-50435

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager versions prior to 5.1.0.1 Description An improper access control issue exists where a low privileged attacker with adjacent network access could potentially exploit the flaw to achieve elevation of privileges and gain...

8CVSS5.8AI score0.0015EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/16 7:27 p.m.10 views

CVE-2026-46848

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where WebLogic Server executes to...

7.9CVSS5.8AI score0.00141EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/06/16 10:16 a.m.20 views

CVE-2026-10825

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot...

7.1CVSS0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/16 8:51 a.m.38 views

CVE-2026-10825 Improper JSON Input Validation in WebSocket API Leads to Denial of Service

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot...

7.1CVSS0.0024EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/16 8:18 a.m.26 views

EUVD-2026-37042

Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise...

8.8CVSS5.5AI score0.00771EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/16 8:18 a.m.26 views

CVE-2026-5416

The CVE-2026-5416 entry describes a command injection in a Managed Ethernet Switch caused by improper neutralization of special elements in a name parameter. It results in full system compromise with network-based, low-privilege, no-user-interaction exploitation (per CVSS 4.0/3.1 vectors). Connec...

8.8CVSS5.4AI score0.00771EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/06/16 7:33 a.m.20 views

mysql: Information Schema unspecified vulnerability (CPU Apr 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with...

4.3CVSS6.9AI score0.00243EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/06/16 7:33 a.m.21 views

mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker...

6.5CVSS6.9AI score0.00303EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/06/16 7:33 a.m.13 views

mysql: Optimizer unspecified vulnerability (CPU Apr 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network...

6.5CVSS6.9AI score0.00303EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/06/16 7:33 a.m.21 views

mysql: Optimizer unspecified vulnerability (CPU Apr 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network...

6.5CVSS6.9AI score0.00303EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/06/16 7:33 a.m.19 views

mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker...

6.5CVSS6.9AI score0.00303EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.45 views

PT-2026-49892

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of the Oracle WebCenter Content product within Oracle Fusion Middleware. A low privileged...

9.9CVSS5.9AI score0.00411EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.23 views

PT-2026-50052

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful...

8.8CVSS5.3AI score0.00402EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.46 views

PT-2026-50002

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Command Center Framework versions V15 through V16 Description A flaw in the Core component of the Oracle Enterprise Command Center Framework allows a low privileged attacker with network access via HTTP to compromise the...

9.9CVSS5.8AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.31 views

PT-2026-49841

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebLogic Server version 14.1.2.0.0 Oracle Fusion Middleware WebLogic Server version 15.1.1.0.0 Description A flaw in the Core component of WebLogic Server allows a low privileged attacker with network access via HTTP t...

9.9CVSS5.8AI score0.00362EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.40 views

PT-2026-49972

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Agent Next Gen component of the Oracle Enterprise Manager Base Platform. A low privileged attacker wit...

8.8CVSS5.9AI score0.00432EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.38 views

PT-2026-49867

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.5CVSS5.3AI score0.00311EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.33 views

PT-2026-49912

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description An issue exists in the Client Bundle component of the Oracle WebCenter Enterprise Capture product within Oracle Fusion...

9.9CVSS5.8AI score0.00402EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.33 views

PT-2026-50022

Name of the Vulnerable Software and Affected Versions Oracle Complex Maintenance, Repair and Overhaul versions 12.2.3 through 12.2.15 Description An issue exists in the Production component of Oracle Complex Maintenance, Repair and Overhaul within Oracle E-Business Suite. A low privileged attacke...

8.5CVSS5.8AI score0.00318EPSS
SaveExploits0References3
Rows per page
Query Builder