Lucene search
+L

166328 matches found

Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•9 views

PT-2026-95615

Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 Description The IBM MQ C client fails to properly validate responses from the queue manager when requesting AMS Application Managed Service policy data. This flaw could allow a remote...

8.1CVSS6.3AI score0.00608EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•11 views

PT-2026-95558

Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description The query builder fails to neutralize string-typed query criteria, passing them directly to the database as server-side JavaScript expressions. An unauthenticated party capable of influencing...

8.8CVSS6.4AI score0.00434EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•10 views

PT-2026-95631

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of input during web page generation. Recommendations Apply the available patch for version 12.2...

9.6CVSS6.4AI score0.00623EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•5 views

CVE-2026-82832: Improper Neutralization of Input During Web Page Generation

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

9.6CVSS6.8AI score0.00623EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•11 views

CVE-2026-84031: Improper Neutralization of Input During Web Page Generation

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

9CVSS6.8AI score0.00625EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•9 views

CVE-2026-84074: Improper Neutralization of Input During Web Page Generation

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

8.9CVSS6.8AI score0.00533EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•9 views

PT-2026-95671

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of input during the process of web page generation. Recommendations At the moment, there is no...

9CVSS6.4AI score0.00625EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•9 views

PT-2026-95626

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A remote unauthenticated attacker can execute arbitrary code on the system. This occurs due to the deserialization of untrusted data, which allows a network attacker who can reach the...

9.8CVSS6.6AI score0.00849EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•10 views

PT-2026-95678

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

8.9CVSS6.8AI score0.00533EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•14 views

EulerOS 2.0 SP10 : libinput (EulerOS-SA-2026-3747)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...

9.8CVSS7.8AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•14 views

PT-2026-95471

Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This issue occurs due to improper validation of message distribution list...

8.8CVSS6.4AI score0.0059EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•13 views

EulerOS Virtualization 2.12.0 : sqlite (EulerOS-SA-2026-3674)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause...

8.5CVSS8.5AI score0.00364EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•18 views

EulerOS Virtualization 2.11.0 : emacs (EulerOS-SA-2026-3499)

According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary...

8.8CVSS8.2AI score0.02632EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•17 views

EulerOS Virtualization 2.11.1 : emacs (EulerOS-SA-2026-3412)

According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary...

8.8CVSS8.2AI score0.02632EPSS
SaveExploits0References3
Redos
Redos
•added 2026/09/18 12:00 a.m.•10 views

ROS-20260918-73-0063

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00176EPSS
SaveExploits0
Redos
Redos
•added 2026/09/18 12:00 a.m.•8 views

ROS-20260918-73-0039

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00197EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•12 views

PT-2026-95464

Name of the Vulnerable Software and Affected Versions IBM MQ Appliance affected versions not specified Description A heap buffer overflow occurs during protocol message processing before authentication. This flaw allows a remote attacker to cause a denial of service or potentially execute arbitra...

10CVSS6.9AI score0.00945EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•13 views

CVE-2026-10747: Heap-based Buffer Overflow

IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...

10CVSS7.3AI score0.00945EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•21 views

EulerOS Virtualization 2.11.1 : freetype (EulerOS-SA-2026-3414)

According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting ...

8.1CVSS8.1AI score0.27775EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•11 views

PT-2026-95470

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This issue is caused by an integer overflow, which occurs when an arithmetic operation results in...

8.8CVSS6.4AI score0.00604EPSS
SaveExploits0References6
Rows per page
Query Builder