Lucene search
+L

1875 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/10 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-2056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Difficult to exploi...

6.3CVSS6.6AI score0.01722EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-2427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily...

4.9CVSS6.7AI score0.01999EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/08 3:40 p.m.305 views

CVE-2025-8356 Path Traversal leading to RCE

In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution RCE, allowing the attacker to run arbitrary commands on the system...

9.8CVSS0.15479EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-35642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily...

4.9CVSS6.5AI score0.01999EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-35626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily...

4.9CVSS6.5AI score0.01884EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-35634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily...

4.9CVSS6.5AI score0.01945EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/04 12:00 a.m.10 views

Kingdee Cloud-Starry-Sky Enterprise Edition 路径遍历漏洞

Kingdee Cloud-Starry-Sky Enterprise Edition is a digital transformation solution for growing enterprises from China's Kingdee. A path traversal vulnerability exists in Kingdee Cloud-Starry-Sky Enterprise Edition 8.2 and earlier versions, which stems from path traversal due to incorrect operation ...

6.9CVSS5.4AI score0.008EPSS
SaveExploits0References7
OSV
OSV
added 2025/08/04 12:00 a.m.10 views

CVE-2025-51535

Austrian Archaeological Institute AI OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability...

9.1CVSS8.2AI score
SaveExploits0References4
Packet Storm
Packet Storm
added 2025/07/29 12:00 a.m.137 views

📄 Xorux LPAR2RRD 8.04 Denial of Service

Xorux LPAR2RRD versions 8.04 and below have an issue where an authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user. KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service Title: Xorux LPAR2RRD Read Only User Denial of...

6.5CVSS6.5AI score0.05686EPSS
SaveExploits2
OSV
OSV
added 2025/07/23 7:15 p.m.3 views

DEBIAN-CVE-2025-46686

Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this i...

3.5CVSS5.3AI score0.00269EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/07/22 8:41 a.m.39 views

Security update for php8

This update for php8 fixes the following issues: Version update to 8.3.23: CVE-2025-1220: Fixed null byte termination in hostnames bsc1246167 CVE-2025-1735: Fixed pgsql extension does not check for errors during escaping bsc1246146 CVE-2025-6491: Fixed NULL Pointer Dereference in PHP SOAP Extensi...

9.1CVSS7.1AI score0.01EPSS
SaveExploits2References12
CNNVD
CNNVD
added 2025/07/22 12:00 a.m.9 views

Bloomberg Comdb2 安全漏洞

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A security vulnerability exists in Bloomberg Comdb2 version 8.1 that stems from vulnerability to denial-of-service attacks when handling distributed transactional heartbeats...

7.5CVSS6.5AI score0.00548EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/07/22 12:00 a.m.11 views

Bloomberg Comdb2 代码问题漏洞

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the CDB2SQLQUERY protocol buffer message handling, which could lead to a denial of servi...

7.5CVSS6.7AI score0.00583EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2025/07/16 10:14 a.m.8 views

CVE-2024-9342

In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in...

9.8CVSS5.2AI score0.00407EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/07/14 12:00 a.m.9 views

OTRS 安全漏洞

OTRS is a service management solution from OTRS Germany. A security vulnerability exists in OTRS that stems from an external interface that allows the inference of user account presence, which could lead to the identification of valid email addresses. The following versions are affected: version...

5.3CVSS6.8AI score0.00237EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/08 12:00 a.m.10 views

IBM OpenPages with Watson 安全漏洞

IBM OpenPages with Watson is an AI-powered financial risk analytics solution from International Business Machines IBM. The platform is based on AI technology to predict risk factors and minimize risk in financial activities by integrating, automatically identifying, measuring, monitoring,...

6.5CVSS6.4AI score0.00272EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/07 4:15 p.m.15 views

UBUNTU-CVE-2025-7259

An authorized user can issue queries with duplicate id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0...

6.5CVSS5.8AI score0.00282EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/07 3:59 p.m.8 views

CVE-2025-7259 Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash

An authorized user can issue queries with duplicate id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0...

6.5CVSS6.5AI score
SaveExploits0References3
OSV
OSV
added 2025/07/07 2:42 p.m.8 views

CVE-2025-6711 Incomplete Redaction of Sensitive Information in MongoDB Server Logs

An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered. This issue affects MongoDB Server v8.0 versions prior to 8.0.5, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v6.0...

4.4CVSS5.9AI score
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/07 12:00 a.m.11 views

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server version v8.1, which stems from a duplicateid...

6.5CVSS6.4AI score0.00282EPSS
SaveExploits0References2
Rows per page
Query Builder