Lucene search
+L

3232 matches found

Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.7 views

PT-2026-24237

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8,...

6.9CVSS5.8AI score0.00185EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.11 views

PT-2026-24231

An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigDa...

7.2CVSS5.9AI score0.00445EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/09 4:01 p.m.13 views

Malicious code in odds-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd711f9267e0e1bd3dc42ff98c117a939f5ffa947f11c5fd3d9aea4bc8a47c1 The package odds-analyzer was found to contain malicious code. Source: ghsa-malware 90239f2eeaa13b5a4c00596bcd6f549ab3948f0b1421e246ce67a7bfa30248d6...

5.7AI score
SaveExploits0References1
OSV
OSV
added 2026/03/09 4:01 p.m.4 views

MAL-2026-1292 Malicious code in odds-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd711f9267e0e1bd3dc42ff98c117a939f5ffa947f11c5fd3d9aea4bc8a47c1 The package odds-analyzer was found to contain malicious code. Source: ghsa-malware 90239f2eeaa13b5a4c00596bcd6f549ab3948f0b1421e246ce67a7bfa30248d6...

5.7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/02 1:43 p.m.9 views

CVE-2026-28338

PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's vbhtml and yahtml report formats insert rule violation messages into HTML output without escaping. When PMD analyzes untrusted source code containing crafted string literals, the generated HTML report contains...

6.8CVSS6AI score0.00297EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/02/28 2:49 a.m.17 views

EUVD-2026-9069

PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages...

6.8CVSS5.9AI score0.00297EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/27 8:28 p.m.5 views

CVE-2026-28338

PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's vbhtml and yahtml report formats insert rule violation messages into HTML output without escaping. When PMD analyzes untrusted source code containing crafted string literals, the generated HTML report contains...

6.8CVSS6AI score0.00297EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2026/02/27 12:00 a.m.16 views

PMD 跨站脚本漏洞

PMD is a scalable, multi-language static source code analyzer. Versions of PMD prior to 7.22.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the lack of escaping of output in vbhtml and yahtml report formats, which could lead to cross-site scripting attacks...

6.8CVSS5.7AI score0.00297EPSS
SaveExploits1References4
Packet Storm News
Packet Storm News
added 2026/02/26 12:00 a.m.28 views

Wireshark Analyzer 4.6.4

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. Thi...

7.5CVSS6AI score0.00184EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2026/02/17 3:06 p.m.184 views

securiclaw

🦞 Securiclaw AI-Powered Code Security Scanner Securiclaw...

6.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/02/17 12:00 a.m.8 views

RHEL 10 : wireshark (RHSA-2026:2763)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2763 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes:...

7.8CVSS5.5AI score0.00208EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/02/14 12:00 a.m.15 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper checking of the isusertask auxiliary function. This vulnerability could potentially caus...

5.5CVSS6AI score0.00114EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/05 9:13 a.m.9 views

RLSA-2026:1714 Moderate: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: Wireshark: NULL Pointer Dereference in Wireshark CVE-2025-9817 For more details about the security issues, including the impact, a CVSS score,...

5.5CVSS5.4AI score0.00208EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/02/04 12:00 a.m.43 views

Oracle E-Business Suite (January 2026 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: HTML Dispatch Center Apache Commons BeanUtils...

8.8CVSS6.8AI score0.01699EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2026/02/02 12:00 a.m.7 views

RHEL 10 : wireshark (RHSA-2026:1714)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1714 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes:...

7.8CVSS5.4AI score0.00208EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/31 3:21 p.m.36 views

CVE-2025-9226

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS5.8AI score0.00419EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/30 2:16 p.m.10 views

CVE-2025-9226

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS0.00419EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/30 1:42 p.m.5 views

CVE-2025-9226

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS5.8AI score0.00419EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/30 1:42 p.m.35 views

CVE-2025-9226 Stored XSS

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS0.00419EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/30 1:42 p.m.13 views

EUVD-2025-206580

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...

4.6CVSS5.8AI score0.00419EPSS
SaveExploits0References1
Rows per page
Query Builder