Lucene search
+L

27167 matches found

osv_mini
osv_mini
•added 2026/06/25 6:53 a.m.•21 views

MINI-37VX-3XF5-VFM9

Bulletin has no description...

6.1CVSS6.2AI score0.00223EPSS
SaveExploits0
Circl
Circl
•added 2026/06/25 2:24 a.m.•30 views

CVE-2026-9153

creationtimestamp| type| source ---|---|--- 2026-06-25 02:24:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3et5rs4b2l...

6.5CVSS5.8AI score0.00453EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•35 views

PT-2026-52441

Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one...

6.3CVSS5.8AI score0.00331EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/25 12:00 a.m.•19 views

Oracle Linux 9 : post (ELSA-2026-26205)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26205 advisory. 2:3.5.25-3 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 Tenable has extracted the preceding description...

7.5CVSS7.4AI score0.00884EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•56 views

PT-2026-52590

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description A length-confusion issue exists in the wolfSSL OCSP resp find status function. The lookup process compares serial-number bytes without verifying that the two serial numbers are of equal lengt...

6.3CVSS5.7AI score0.0019EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•9 views

CVE-2026-57536: Improper Enforcement of Behavioral Workflow

Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment...

6.3CVSS5.9AI score0.00331EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•9 views

CVE-2026-13222: Improper Enforcement of Behavioral Workflow

Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one...

6.3CVSS5.8AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•93 views

PT-2026-52440

Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one...

6.3CVSS5.8AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•34 views

PT-2026-52457

Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment...

6.3CVSS5.9AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•28 views

PT-2026-52503

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download endpoint allows authenticated administrators to read arbitrary files from the server filesystem. The backup download endpoint GET...

5.5CVSS6.1AI score0.00505EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/25 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-53012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nexthop is replaced with an IPv4 nexthop, the hasv4 flag of all group...

5.5CVSS5.5AI score0.00137EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/24 9:32 p.m.•23 views

EUVD-2026-39106

The Zephyr PL011 UART driver drivers/serial/uartpl011.c contains an unbounded software loop in pl011irqtxenable that repeatedly invokes the interrupt-driven application callback while the TX interrupt mask bit PL011IMSCTXIM is set, to work around the controller's level-transition TX-interrupt...

6.5CVSS5.8AI score0.00243EPSS
SaveExploits1References2
Circl
Circl
•added 2026/06/24 7:00 p.m.•22 views

CVE-2026-53090

creationtimestamp| type| source ---|---|--- 2026-06-24 19:00:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806622367648058 2026-08-12 20:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-10-01 18:00:00+00:00|...

7.8CVSS7.3AI score0.00141EPSS
SaveExploits0References3
Circl
Circl
•added 2026/06/24 6:36 p.m.•23 views

CVE-2026-53127

creationtimestamp| type| source ---|---|--- 2026-06-24 18:36:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2knuqbqn2o 2026-07-23 21:20:32+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdrdqvh652o 2026-10-01 18:00:00+00:00| seen|...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0References3
Circl
Circl
•added 2026/06/24 6:29 p.m.•26 views

CVE-2026-53119

creationtimestamp| type| source ---|---|--- 2026-06-24 18:29:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2kb6r5ow2f 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

7.8CVSS5.8AI score0.00175EPSS
SaveExploits0References2
Circl
Circl
•added 2026/06/24 6:19 p.m.•19 views

CVE-2026-52971

creationtimestamp| type| source ---|---|--- 2026-06-24 18:19:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806461162472827 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

7.8CVSS5.8AI score0.00103EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/24 5:17 p.m.•21 views

CVE-2026-52979

In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc pspassocdevicegetlocked obtains a pspdev reference via pspdevgetforsock which uses pspdevtryget under RCU; it then acquires psd-lock and drops the reference. Before the lo...

5.5CVSS0.00124EPSS
SaveExploits0References3
Circl
Circl
•added 2026/06/24 5:10 p.m.•26 views

CVE-2026-13006

creationtimestamp| type| source ---|---|--- 2026-06-24 17:10:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806191372211581 2026-07-01 12:43:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplk76eiza2o...

7CVSS5.3AI score0.00175EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2026/06/24 3:31 p.m.•3 views

org.jenkins-ci.plugins:disable-github-multibranch-status (>=1.0, <=1.2) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.2.0)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:disable-github-multibranch-status =1.0, =1.2 Sourc...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/06/24 3:31 p.m.•3 views

org.jenkins-ci.plugins:embeddable-build-status (>=2.0-beta1, <=2.0.4) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.49)

org.jenkins-ci.plugins:script-security MAVEN version 1.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:embeddable-build-status =2.0-beta1, =2.0.4 Source cves:...

8.8CVSS5.8AI score0.00513EPSS
SaveExploits0
Rows per page
Query Builder