Lucene search
+L

3802 matches found

Positive Technologies
Positive Technologies
•added 2026/03/10 12:00 a.m.•11 views

PT-2026-24237

Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 6.4 through 7.6.4 Fortinet FortiManager versions 6.4 through 7.6.4 Description An incorrect certificate validation issue exists in Fortinet FortiAnalyzer and FortiManager. This flaw could allow a remote,...

6.9CVSS6.7AI score0.00192EPSS
SaveExploits0References8
OSV
OSV
•added 2026/03/09 4:01 p.m.•8 views

MAL-2026-1292 Malicious code in odds-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd711f9267e0e1bd3dc42ff98c117a939f5ffa947f11c5fd3d9aea4bc8a47c1 The package odds-analyzer was found to contain malicious code. Source: ghsa-malware 90239f2eeaa13b5a4c00596bcd6f549ab3948f0b1421e246ce67a7bfa30248d6...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/09 4:01 p.m.•16 views

Malicious code in odds-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd711f9267e0e1bd3dc42ff98c117a939f5ffa947f11c5fd3d9aea4bc8a47c1 The package odds-analyzer was found to contain malicious code. Source: ghsa-malware 90239f2eeaa13b5a4c00596bcd6f549ab3948f0b1421e246ce67a7bfa30248d6...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/03 12:00 a.m.•18 views

PT-2026-30034

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A locking bug exists in the wlcore component of the Linux kernel. The issue involves ensuring that the wl-mutex is locked before it is unlocked. This was identified by the Clang...

5.5CVSS5.6AI score0.00091EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/03/02 1:43 p.m.•16 views

CVE-2026-28338

PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's vbhtml and yahtml report formats insert rule violation messages into HTML output without escaping. When PMD analyzes untrusted source code containing crafted string literals, the generated HTML report contains...

6.8CVSS6AI score0.00374EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/02/28 2:49 a.m.•29 views

EUVD-2026-9069

PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages...

6.8CVSS5.9AI score0.00374EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/27 8:28 p.m.•9 views

CVE-2026-28338

PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's vbhtml and yahtml report formats insert rule violation messages into HTML output without escaping. When PMD analyzes untrusted source code containing crafted string literals, the generated HTML report contains...

6.8CVSS6AI score0.00374EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•26 views

PMD 跨站脚本漏洞

PMD is a scalable, multi-language static source code analyzer. Versions of PMD prior to 7.22.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the lack of escaping of output in vbhtml and yahtml report formats, which could lead to cross-site scripting attacks...

6.8CVSS5.7AI score0.00374EPSS
SaveExploits1References4
Packet Storm News
Packet Storm News
•added 2026/02/26 12:00 a.m.•33 views

Wireshark Analyzer 4.6.4

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. Thi...

7.5CVSS6.5AI score0.00273EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2026/02/17 3:06 p.m.•190 views

securiclaw

🦞 Securiclaw AI-Powered Code Security Scanner Securiclaw...

6.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/02/17 12:00 a.m.•11 views

RHEL 10 : wireshark (RHSA-2026:2763)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2763 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes:...

7.8CVSS7.1AI score0.00208EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/02/14 12:00 a.m.•20 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper checking of the isusertask auxiliary function. This vulnerability could potentially caus...

5.5CVSS6AI score0.00121EPSS
SaveExploits0References4
OSV
OSV
•added 2026/02/05 9:13 a.m.•14 views

RLSA-2026:1714 Moderate: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: Wireshark: NULL Pointer Dereference in Wireshark CVE-2025-9817 For more details about the security issues, including the impact, a CVSS score,...

5.5CVSS7.2AI score0.00208EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/02/04 12:00 a.m.•63 views

Oracle E-Business Suite (January 2026 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: HTML Dispatch Center Apache Commons BeanUtils...

8.8CVSS6.5AI score0.01825EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2026/02/02 12:00 a.m.•10 views

RHEL 10 : wireshark (RHSA-2026:1714)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1714 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes:...

7.8CVSS7.1AI score0.00208EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/01/31 3:21 p.m.•48 views

CVE-2025-9226

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS5.8AI score0.00484EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/30 2:16 p.m.•23 views

CVE-2025-9226

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS0.00484EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/30 1:42 p.m.•46 views

CVE-2025-9226 Stored XSS

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS0.00484EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/30 1:42 p.m.•117 views

CVE-2025-9226

The CVE-2025-9226 issue affects ManageEngine OpManager, NetFlow Analyzer, and OpUtils prior to version 128582; Nessus & Red Hat/other feeds corroborate a stored XSS in the Subnet Details page. The vulnerability arises from an authenticated, low-privilege user who can modify subnet details, enabli...

4.6CVSS5.6AI score0.00484EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/30 1:42 p.m.•10 views

CVE-2025-9226

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS5.8AI score0.00484EPSS
SaveExploits0References2
Rows per page
Query Builder