Lucene search
K

33 matches found

RedhatCVE
RedhatCVE
added 2026/04/03 11:2 p.m.1 views

CVE-2026-25212

An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...

9.9CVSS6AI score0.00058EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/02 12:0 a.m.1 views

CVE-2026-25212

An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...

9.9CVSS6AI score0.00058EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/02 12:0 a.m.12 views

CVE-2026-25212

An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...

0.00058EPSS
Exploits0References2
CVE
CVE
added 2026/04/02 12:0 a.m.2 views

CVE-2026-25212

CVE-2026-25212 affects Percona PMM prior to 3.7. An internal database user with superuser privileges can abuse the Add data source feature to break out of the database context and execute shell commands on the underlying OS, as described in Percona PMM release notes for 3.7.0. Exploitation detail...

9.9CVSS6AI score0.00058EPSS
Exploits0References2Affected Software1
Redos
Redos
added 2026/03/10 12:0 a.m.4 views

ROS-20260310-73-0001

A vulnerability in the Cluster: General component of the MySQL Cluster database management system is related to an access control flaw. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to read, modify, add or delete data or cause a denial of service...

5.5CVSS5.8AI score0.00651EPSS
Exploits0
EUVD
EUVD
added 2026/03/06 12:31 a.m.3 views

EUVD-2026-9938

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

4.8CVSS5.4AI score0.00028EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/03/05 11:40 p.m.4 views

CVE-2026-3606

A flaw was found in Ettercap. A local user can exploit an out-of-bounds read vulnerability within the adddatasegment function of the etterfilter component. By manipulating input, an attacker can trigger this flaw, potentially leading to a denial of service...

5.5CVSS5.8AI score0.00028EPSS
Exploits1References9
NVD
NVD
added 2026/03/05 10:16 p.m.3 views

CVE-2026-3606

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

5.5CVSS0.00028EPSS
Exploits1References6
OSV
OSV
added 2026/03/05 10:16 p.m.3 views

DEBIAN-CVE-2026-3606

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

5.5CVSS3.9AI score0.00028EPSS
Exploits1References1
OSV
OSV
added 2026/03/05 10:16 p.m.0 views

CVE-2026-3606

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

5.5CVSS5.2AI score
Exploits0References6
OSV
OSV
added 2026/03/05 10:16 p.m.1 views

UBUNTU-CVE-2026-3606

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

5.5CVSS5.2AI score0.00028EPSS
Exploits1References8
UbuntuCve
UbuntuCve
added 2026/03/05 10:16 p.m.2 views

CVE-2026-3606

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

5.5CVSS5.4AI score0.00028EPSS
Exploits1References7
Cvelist
Cvelist
added 2026/03/05 10:2 p.m.25 views

CVE-2026-3606 Ettercap etterfilter ef_output.c add_data_segment out-of-bounds

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

4.8CVSS0.00028EPSS
Exploits1References6
CVE
CVE
added 2026/03/05 10:2 p.m.8 views

CVE-2026-3606

CVE-2026-3606 affects Ettercap 0.8.4-Garofalo, targeting the function add_data_segment in the file src/ettercap/utils/etterfilter/ef_output.c of the etterfilter component. The vulnerability results in an out-of-bounds read and requires local access. Public exploit information is indicated, and th...

5.5CVSS5.4AI score0.00028EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.3 views

PT-2026-23568

Name of the Vulnerable Software and Affected Versions Ettercap version 0.8.4-Garofalo Description A flaw exists in Ettercap that involves an out-of-bounds read issue within the add data segment function located in the src/ettercap/utils/etterfilter/ef output.c file, specifically within the...

5.5CVSS5.8AI score0.00028EPSS
Exploits1References16
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-22986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpiolib: fix race condition for gdev-srcu If two drivers were calling gpiochipadddatawithkey, one may be traversing the srcu-protected list in gpionametodesc,...

4.7CVSS5.9AI score0.00022EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-4486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a race condition within the gpiolib component related to the gdev-srcu. Specifically, when multiple drivers concurrently call gpiochip add data with key, a...

5.4AI score0.00022EPSS
Exploits0References6
EUVD
EUVD
added 2025/12/04 3:30 p.m.1 views

EUVD-2025-201188

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

5.1CVSS5AI score0.00026EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/04 2:32 p.m.1 views

CVE-2025-14006 dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

5.1CVSS5.1AI score0.00026EPSS
Exploits1References4
CVE
CVE
added 2025/12/04 2:32 p.m.7 views

CVE-2025-14006

CVE-2025-14006 affects dayrui XunRuiCMS up to version 4.7.1. The vulnerability lies in the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1, where manipulating the argument data[name] enables cross-site scripting. The issue is exploitable remotely and the public exploit has been ...

6.1CVSS3.7AI score0.00026EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder