Lucene search
+L

92774 matches found

Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.10 views

PT-2026-71823

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A time-of-check to time-of-use TOCTOU race condition involving symbolic links allows a remote authenticated attacker to gain unauthorized access to system objects. TOCTOU is a software bug where a...

8.5CVSS5.3AI score0.00254EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71674

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view department.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

7.5CVSS7.1AI score0.00328EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71831

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument...

6.3CVSS4.5AI score0.00308EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71928

A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...

7.5CVSS6.9AI score0.00424EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71813

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

5.3CVSS5.3AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.7 views

PT-2026-71855

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...

5.3CVSS5.3AI score0.00289EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-53789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intende...

8.1CVSS6.6AI score0.00357EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71741

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation...

7.5CVSS5.3AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71746

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...

7.5CVSS5.8AI score0.00392EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.8 views

PT-2026-71743

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A buffer overflow allows a remote authenticated attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hol...

8.8CVSS6.2AI score0.00436EPSS
SaveExploits0References4
Redos
Redos
added 2026/08/13 12:00 a.m.6 views

ROS-20260813-73-0051

The vulnerability in Wireshark is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.6 views

ROS-20260813-73-0050

The vulnerability of the verifyHostName configuration parameter in the Apache Log4j Core logging library is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack remotely...

6.3CVSS6.6AI score0.0041EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.6 views

ROS-20260813-73-0052

The vulnerability in uriparser is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.8 views

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

9.4CVSS8.3AI score0.00163EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71834

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...

2.7CVSS5.3AI score0.00325EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/12 10:17 p.m.11 views

CVE-2026-17485

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow...

8.2CVSS0.00296EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/12 9:13 p.m.9 views

CVE-2026-19014

A flaw was found in Consul. A remote attacker could exploit an uncontrolled resource consumption vulnerability in the Connect authorization endpoint. This flaw allows a caller to continuously grow the agent's intention-match cache, bypassing configured cache limits. The primary consequence is a...

6.5CVSS5.3AI score0.00262EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/12 8:17 p.m.9 views

CVE-2026-18150

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

5.3CVSS0.00168EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/12 8:17 p.m.10 views

CVE-2026-17445

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of an attacker-supplied user profile name...

8.2CVSS0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/12 8:17 p.m.7 views

CVE-2026-17642

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

8.8CVSS0.00427EPSS
SaveExploits0References1
Rows per page
Query Builder