Lucene search
+L

1690 matches found

EUVD
EUVD
•added 2026/03/02 11:16 a.m.•16 views

EUVD-2025-208149

In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection...

8.8CVSS6AI score0.00199EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/02 11:16 a.m.•12 views

CVE-2025-30062

In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection...

8.8CVSS6AI score0.00199EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/02 11:16 a.m.•17 views

CVE-2025-30062 SQL injection in CheckUnitCodeAndKey.pl

In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection...

6.9CVSS5.9AI score0.00199EPSS
SaveExploits0References2
Veeam
Veeam
•added 2026/03/02 12:00 a.m.•23 views

"4BDN: Connected Salesforce Org already exists"

Issue Resolved in New Version The issue documented in this article was resolved in Veeam Backup for Salesforce 3.2. Challenge When attempting to add a Salesforce sandbox to an on-premise installation of Veeam Backup for Salesforce , the following error occurs: 4BDN: Connected Salesforce Org...

5.6AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/02 12:00 a.m.•13 views

PT-2026-22576

In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection...

8.8CVSS6AI score0.00199EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•32 views

PT-2026-6804

Name of the Vulnerable Software and Affected Versions ggml-org llama.cpp versions prior to 55abc39 Description A flaw exists in the GBNF Grammar Handler component of ggml-org llama.cpp. Specifically, the llama grammar advance stack function within the llama.cpp/src/llama-grammar.cpp file is...

4.8CVSS5.8AI score0.00132EPSS
SaveExploits0References9
OSV
OSV
•added 2026/02/05 3:20 a.m.•27 views

GO-2026-4414 Alist has Insecure TLS Config in github.com/alist-org/alist

Alist has Insecure TLS Config in github.com/alist-org/alist...

9.1CVSS5.3AI score0.00244EPSS
SaveExploits1References4
Veracode
Veracode
•added 2026/02/04 6:55 a.m.•15 views

Prototype Pollution

nocodb is vulnerable to prototype pollution. The vulnerability is due to improper handling of user-controlled input in the /api/v2/meta/connection/test endpoint, which allows an authenticated attacker with org-level-creator permissions to pollute object prototypes and cause application-wide...

4.9CVSS6AI score0.00413EPSS
SaveExploits1References4Affected Software1
Redos
Redos
•added 2026/01/29 12:00 a.m.•14 views

ROS-20260129-73-0078

Vulnerability in mongodb-org related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

5.9CVSS5.9AI score0.00365EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/01/29 12:00 a.m.•19 views

Bdtask Bhojon All-In-One Restaurant Management System has security vulnerabilities.

Bdtask Bhojon All-In-One Restaurant Management System is a restaurant management system developed by the Bangladeshi company Bdtask. Versions of the Bdtask Bhojon All-In-One Restaurant Management System prior to version 20260116 contained security vulnerabilities. These vulnerabilities were cause...

5.3CVSS5.8AI score0.00325EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/01/28 8:27 p.m.•17 views

EUVD-2026-4872

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-level-creator permissions can exploit prototype pollution in the /api/v2/meta/connection/test endpoint, causing all database write operations to fail application-wide until server...

4.9CVSS5.9AI score0.00413EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/01/28 8:27 p.m.•37 views

CVE-2026-24766 NocoDB Vulnerable to Prototype Pollution in Connection Test Endpoint, Leading to DoS

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-level-creator permissions can exploit prototype pollution in the /api/v2/meta/connection/test endpoint, causing all database write operations to fail application-wide until server...

4.9CVSS0.00413EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/28 8:27 p.m.•14 views

CVE-2026-24766 NocoDB Vulnerable to Prototype Pollution in Connection Test Endpoint, Leading to DoS

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-level-creator permissions can exploit prototype pollution in the /api/v2/meta/connection/test endpoint, causing all database write operations to fail application-wide until server...

4.9CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/28 8:27 p.m.•4 views

CVE-2026-24766 NocoDB Vulnerable to Prototype Pollution in Connection Test Endpoint, Leading to DoS

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-level-creator permissions can exploit prototype pollution in the /api/v2/meta/connection/test endpoint, causing all database write operations to fail application-wide until server...

4.9CVSS5.9AI score0.00413EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/28 8:27 p.m.•46 views

CVE-2026-24766

NocoDB prior to 0.301.0 is affected by a prototype pollution in /api/v2/meta/connection/test. An authenticated user with org-level-creator permissions can trigger pollution that causes all database write operations to fail until the server is restarted. The issue bypasses SUPER_ADMIN checks but c...

4.9CVSS5.9AI score0.00413EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•3 views

CVE-2026-24766: Improperly Controlled Modification of Object Prototype Attributes

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-level-creator permissions can exploit prototype pollution in the /api/v2/meta/connection/test endpoint, causing all database write operations to fail application-wide until server...

4.9CVSS5.8AI score0.00413EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•2 views

CVE-2026-1464: Integer Overflow or Wraparound

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

4.6CVSS5.8AI score0.00147EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/21 10:25 p.m.•14 views

CVE-2026-21961

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Company Dir / Org Chart Viewer, Employee Snapshot. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.5AI score0.00226EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/21 12:31 a.m.•19 views

EUVD-2026-3551

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Company Dir / Org Chart Viewer, Employee Snapshot. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.5AI score0.00226EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/20 10:15 p.m.•15 views

CVE-2026-21961

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Company Dir / Org Chart Viewer, Employee Snapshot. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.8AI score0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder