Lucene search
K

172 matches found

Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.7 views

PT-2026-39160

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior...

7.5CVSS5.8AI score0.00047EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2026/03/24 10:0 a.m.15 views

Important: Red Hat Security Advisory: Red Hat Ceph Storage

A new version of Red Hat build of Ceph Storage has been released The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version...

8.4CVSS6.8AI score0.0017EPSS
Exploits7References16
Tenable Nessus
Tenable Nessus
added 2026/03/02 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-005381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005381 advisory. In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missin...

6.3CVSS6AI score0.00757EPSS
Exploits0References3
OSV
OSV
added 2026/02/17 10:12 a.m.3 views

RHSA-2026:2711 Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update

Bulletin has no description...

7.5CVSS6.5AI score0.00518EPSS
Exploits1References54
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.3 views

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform building system written in PHP, developed by the WWBN team. Version 8.1 of WWBN AVideo contains a security vulnerability. This vulnerability stems from information leakage, and it could allow attackers to enumerate user details through the playlistsFromUser.json.ph...

8.7CVSS5.8AI score0.0014EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.1 views

AVideo 授权问题漏洞

AVideo is an open-source broadcast network creation tool developed by the World Wide Broadcast Network. Version 8.1 of AVideo contains an authorization vulnerability, which stems from cross-site request forgery attacks. This vulnerability could allow attackers to exploit the password recovery...

8.8CVSS5.7AI score0.0003EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-005265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005265 advisory. In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, a heap buffer overflow occurs in arraymerge when t...

8.2CVSS5.8AI score0.00019EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.1 views

Softros LogonExpert code issue vulnerability

Softros LogonExpert is a security automatic login management tool developed by the American company Softros. Version 8.1 of Softros LogonExpert contains a code vulnerability; this vulnerability arises from the service path not being enclosed in quotes, which may allow arbitrary code to be execute...

8.5CVSS6AI score0.00023EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.5 views

Amazon Linux 2 : php, --advisory ALAS2PHP8.1-2026-008 (ALASPHP8.1-2026-008)

The version of php installed on the remote host is prior to 8.1.34-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.1-2026-008 advisory. NOTE: https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7NOTE:...

8.2CVSS5.6AI score0.00047EPSS
Exploits4References8
RedhatCVE
RedhatCVE
added 2025/12/16 7:48 p.m.1 views

CVE-2025-14148

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...

6.5CVSS6.5AI score0.00031EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.1 views

PT-2025-51782

Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager BoKS can result in the selection of weak password hash algorithms. This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain...

6.2CVSS7.1AI score0.00009EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/15 7:51 p.m.2 views

CVE-2025-13489 IBM DevOps Deploy is susceptible to a Cleartext Transmission of Sensitive Information

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 IBM DevOps Deploy transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

5.9CVSS5.9AI score0.00013EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/05 1:39 p.m.3 views

Security Bulletin: IBM Storage Protect Server is susceptible to a vulnerability due to Golang CoreDNS library

Summary Golang CoreDNS library is used by the IBM Storage Protect Server OSSM component. Golang CoreDBS is vulnerable to Denial of service , This bulletin identifies the steps to address the vulnerabilities. CVE-2025-58063. Vulnerability Details CVEID:CVE-2025-58063 DESCRIPTION: CoreDNS is a DNS...

7.1CVSS8.5AI score0.00095EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.1 views

MetInfo CMS 安全漏洞

MetInfo CMS is a content management system from China Mito MetInfo. A security vulnerability exists in MetInfo CMS 8.1 and prior versions, which stems from a flaw in the XML parsing logic and could lead to a server-side request forgery attack...

7.5CVSS6.7AI score0.00055EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.2 views

WorkDo HRM SaaS HR and Payroll Tool 安全漏洞

WorkDo HRM SaaS HR and Payroll Tool is a human resource management software from WorkDo, Inc. A security vulnerability exists in WorkDo HRM SaaS HR and Payroll Tool version 8.1, which stems from improperly set permissions and could result in an authenticated user creating leave or resignation...

6.5CVSS6.6AI score0.00037EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/10/28 8:40 p.m.4 views

CVE-2025-43017 HP ThinPro 8.1 SP8 Security Updates

HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities...

8.5CVSS0.00051EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-4752

Malware in sbrugna...

6.5CVSS7AI score0.00112EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-4751

Malware in sbrugna...

7.1CVSS6.6AI score0.00157EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2015-6262

Malware in sbrugna...

7.8CVSS7.6AI score0.00527EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2004-0529

Malware in sbrugna...

7.2CVSS6.4AI score0.00059EPSS
Exploits0References5
Rows per page
Query Builder