Lucene search
+L

47379 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•8 views

CVE-2026-28133: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Filr: from n/a through = 1.2.14...

8.5CVSS5.8AI score0.00393EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/05 12:00 a.m.•15 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005792 advisory. In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free...

7.8CVSS6.9AI score0.00198EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/03/04 9:19 p.m.•31 views

traefik CVE-2024-45410 fix bypass: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`)

Impact There is a potential vulnerability in Traefik managing the Connection header with X-Forwarded headers. When Traefik processes HTTP/1.1 requests, the protection put in place to prevent the removal of Traefik-managed X-Forwarded headers such as X-Real-Ip, X-Forwarded-Host, X-Forwarded-Port,...

9.8CVSS8.2AI score0.01513EPSS
SaveExploits0References5Affected Software2
osv_drupal
osv_drupal
•added 2026/03/04 5:56 p.m.•38 views

DRUPAL-CONTRIB-2026-021

This module moves files to and from private storage depending on the access of its owning entities. The module does not always validate the access logic correctly, resulting in files attached to an entity not being protected in certain circumstances. This vulnerability is mitigated by the fact th...

5.3CVSS5.9AI score0.00325EPSS
SaveExploits0References1
HackRead
HackRead
•added 2026/03/04 4:58 p.m.•28 views

Best DeleteMe Alternatives (2026): Competitors and Comparisons

Best DeleteMe alternatives for 2026 compared, including Incogni, Optery, Aura, Kanary, and Privacy Bee for data broker removal and privacy protection...

5.9AI score
SaveExploits0
NVD
NVD
•added 2026/03/04 1:15 p.m.•26 views

CVE-2026-21422

Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass...

6.7CVSS0.00114EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/04 12:57 p.m.•15 views

CVE-2026-21422

Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass...

6.7CVSS5.8AI score0.00114EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/03/04 12:57 p.m.•49 views

CVE-2026-21422

Dell PowerScale OneFS (versions 9.10.0.0–9.10.1.5 and 9.11.0.0–9.12.0.1) contains an external control of a system or configuration setting vulnerability. A high-privileged attacker with local access could potentially exploit this to bypass protection mechanisms. The available references describe ...

6.7CVSS5.8AI score0.00114EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/04 12:57 p.m.•11 views

CVE-2026-21422

Dell PowerScale OneFS, versions 9.10.0.0 through 9.10.1.5 and versions 9.11.0.0 through 9.12.0.1, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechani...

3.4CVSS5.8AI score0.00114EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/04 12:57 p.m.•51 views

CVE-2026-21422

Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass...

3.4CVSS0.00114EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/04 1:57 a.m.•13 views

CVE-2026-0031

In multiple functions of memprotect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.3AI score0.00155EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/04 1:57 a.m.•18 views

CVE-2026-0028

In pkvmhostshareguest of memprotect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.3AI score0.00155EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2026/03/04 12:34 a.m.•31 views

K000160222: Linux kernel vulnerability CVE-2022-50356

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net: sched: sfb: fix null pointer access issue when sfbinit fails When the default qdisc is sfb, if the qdisc of devqueue fails to be inited during mqprioinit, sfbreset is invoked to clear resources...

5.5CVSS5.9AI score0.00208EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/03/04 12:00 a.m.•28 views

Dell PowerScale OneFS security vulnerabilities

Dell PowerScale OneFS is an operating system developed by the American company Dell. It provides a horizontally scalable NAS solution through the PowerScale OneFS operating system. Vulnerabilities exist in versions of Dell PowerScale OneFS between 9.10.0.0 and 9.10.1.5, as well as between 9.11.0....

6.7CVSS5.9AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•23 views

PT-2026-23075

Name of the Vulnerable Software and Affected Versions Hono versions prior to 4.12.4 Description Hono is a Web application framework supporting various JavaScript runtimes. An inconsistency in URL decoding between the router decodeURI and serveStatic decodeURIComponent allowed protected static...

9.8CVSS5.9AI score0.00635EPSS
SaveExploits0References178
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•28 views

PT-2026-22909

Dell PowerScale OneFS, versions 9.10.0.0 through 9.10.1.5 and versions 9.11.0.0 through 9.12.0.1, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechani...

3.4CVSS5.8AI score0.00114EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/03/04 12:00 a.m.•15 views

Impact of 5G SA Logical Vulnerabilities on UAV Communications: Threat Models and Testbed Evaluation

This paper examines how logical vulnerabilities in 5G Standalone networks affect UAV command and control communication. The study looks at three attacker positions in the architecture: a malicious user equipment UE connected to the same logical network as the UAV, an attacker with access to the 5...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/03/04 12:00 a.m.•17 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005761 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: ubiwlputpeb: Fix infinite loop when wear-leveling work failed Following process will trigger...

7.8CVSS6.5AI score0.00164EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•9 views

CVE-2026-21422: External Control of System or Configuration Setting

Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass...

6.7CVSS5.8AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•22 views

PT-2026-23096

Name of the Vulnerable Software and Affected Versions @hono/node-server versions prior to 1.19.10 Description @hono/node-server allows running the Hono application on Node.js. When using static file serving with route-based middleware protections, inconsistent URL decoding can allow protected...

7.5CVSS5.9AI score0.00438EPSS
SaveExploits0References174
Rows per page
Query Builder