Lucene search
+L

591691 matches found

Tenable Nessus
Tenable Nessus
added 2 days ago2 views

Photon OS 5.0: Strongswan PHSA-2026-5.0-91-0802

An update of the strongswan package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.7CVSS5.6AI score0.01013EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2 days ago4 views

Linux Distros Unpatched Vulnerability : CVE-2026-68108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 6553665536...

5.8AI score0.00176EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago5 views

Linux Distros Unpatched Vulnerability : CVE-2026-19404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check,...

6.5CVSS5.5AI score0.00416EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2 days ago10 views

CVE-2026-15059

unprivileged users can terminate arbitrary processes...

5.5CVSS5.4AI score0.00119EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2 days ago2 views

Photon OS 5.0: Linux PHSA-2025-5.0-91-0710

An update of the Linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0710. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.8CVSS5.8AI score0.00424EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2 days ago3 views

Photon OS 5.0: Docker PHSA-2026-5.0-91-0869

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0869. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.8CVSS5.2AI score0.00572EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2 days ago5 views

Linux Distros Unpatched Vulnerability : CVE-2026-68323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: serialize udp bearer replicast list updates tipcudprcastadd and cleanupbearer both update ub-rcast.list with listaddrcu / listdelrcu, but nothing serializ...

5.5AI score0.00155EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago3 views

Linux Distros Unpatched Vulnerability : CVE-2026-68400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's epmemoffset to calculate the start of the endpoint memory access...

5.6AI score0.00166EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago30 views

CVE-2026-19370

CVE-2026-19370 affects bartekke8it56w2 new-mcp 0.1.0. The flaw resides in index.ts of the geminithinking component, impacting fs.writeFileSync, fs.existsSync, and fs.readFileSync. Manipulation of the arguments sessionCommand/sessionPath enables path traversal. The attack requires local access. Th...

5.3CVSS5.6AI score0.00138EPSS
SaveExploits0References6
Cvelist
Cvelist
added 3 days ago30 views

CVE-2026-19370 bartekke8it56w2 new-mcp geminithinking index.ts fs.readFileSync path traversal

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component geminithinking. This manipulation of the argument sessionCommand/sessionPath causes path traversal. The attack requires...

5.3CVSS0.00138EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 3 days ago23 views

langflow-exploit

CVE-2025-3248 - Langflow Code Validation Endpoint RCE A proof...

9.8CVSS10AI score0.99996EPSS
SaveExploits35
Nuclei
Nuclei
added 3 days ago260 views

XWiki Platform - Remote Code Execution

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document SkinsCode.XWikiSkinsSheet leads to an injection vector from view right on that document to programming rights, or in other words, it is possible to execute...

9.9CVSS9.5AI score0.91492EPSS
SaveExploits1References4
Nuclei
Nuclei
added 3 days ago103 views

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

7.5CVSS7.4AI score0.90647EPSS
SaveExploits0References5
Nuclei
Nuclei
added 3 days ago57 views

Agentejo Cockpit <0.11.2 - NoSQL Injection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function of the Auth controller. id: CVE-2020-35847 info: name: Agentejo Cockpit 0.11.2 - NoSQL Injection author: dwisiswant0 severity: critical description: | Agentejo Cockpit before 0.11.2 allows NoS...

9.8CVSS8.5AI score0.98165EPSS
SaveExploits8References5
Nuclei
Nuclei
added 3 days ago74 views

Agentejo Cockpit < 0.11.2 - NoSQL Injection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. The $eq operator matches documents where the value of a field equals the specified value. id: CVE-2020-35846 info: name: Agentejo Cockpit 0.11.2 - NoSQL Injection author: dwisiswant0 severity: critic...

9.8CVSS8.5AI score0.93201EPSS
SaveExploits11References5
Nuclei
Nuclei
added 3 days ago234 views

MOVEit Transfer - Remote Code Execution

In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...

9.8CVSS8.8AI score0.99934EPSS
SaveExploits15References5
Nuclei
Nuclei
added 3 days ago23 views

WordPress Contact Form by Supsystic - Server-Side Template Injection

Contact Form by Supsystic WordPress plugin = 1.7.36 contains a server-side template injection caused by unsandboxed TwigLoaderString and cfsPreFill functionality, letting unauthenticated attackers execute arbitrary code remotely via GET parameters. id: CVE-2026-4257 info: name: WordPress Contact...

9.8CVSS5.7AI score0.41475EPSS
SaveExploits9References3
Nuclei
Nuclei
added 3 days ago110 views

Adminer <4.7.9 - Server-Side Request Forgery

Adminer before 4.7.9 is susceptible to server-side request forgery due to exposure of sensitive information in error messages. Users of Adminer versions bundling all drivers, e.g. adminer.php, are affected. An attacker can possibly obtain this information, modify data, and/or execute unauthorized...

7.2CVSS7.6AI score0.90461EPSS
SaveExploits3References5
Nuclei
Nuclei
added 3 days ago91 views

Oracle WebLogic Server Local File Inclusion

An easily exploitable local file inclusion vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Successful attacks of this vulnerability can...

7.5CVSS6.7AI score0.92649EPSS
SaveExploits6References5
Nuclei
Nuclei
added 3 days ago591 views

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

9.8CVSS9.7AI score0.98342EPSS
SaveExploits7References6
Rows per page
Query Builder