Lucene search
+L

199220 matches found

NVD
NVD
added 5 days ago6 views

CVE-2026-16915

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

7.5CVSS0.00854EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago7 views

CVE-2026-16905

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

5.3CVSS0.00469EPSS
SaveExploits0References1
OSV
OSV
added 5 days ago3 views

MINI-J2GX-MMRG-Q5JV

Bulletin has no description...

7.5CVSS5AI score0.00483EPSS
SaveExploits0
OSV
OSV
added 5 days ago3 views

MINI-5WPJ-9C28-26WJ

Bulletin has no description...

7.5CVSS4.8AI score0.00483EPSS
SaveExploits0
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58802

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...

7.5CVSS7.4AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago25 views

CVE-2026-19908 PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The...

7.1CVSS0.00225EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago32 views

CVE-2026-19908

CVE-2026-19908 affects the PAX Technology Q80 XCB Daemon. The flaw arises from a lack of authentication before accessing daemon functionality, allowing network-adjacent attackers to disclose sensitive information and modify configurations. The description also notes potential to execute arbitrary...

7.1CVSS6.3AI score0.00225EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58800

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...

7.5CVSS7.4AI score0.00334EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago23 views

CVE-2026-19909

Technical details beyond the initial description are not publicly available in the provided connected documents. No concrete information on affected products/versions, root cause specifics, impact scope, or remediation is present. Monitor for updates.

7.5CVSS7.3AI score0.00334EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58771

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...

7CVSS5.3AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago39 views

CVE-2026-64887 Airwall - Hardcoded Secrets

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...

7CVSS0.00158EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago13 views

CVE-2026-64887

CVE-2026-64887 affects Johnson Controls Airwall prior to version 4.1 and describes a hard-coded cryptographic key vulnerability that enables a cryptanalytic attack. The available documents do not provide details on the affected component surface, exact root cause beyond the hard-coded key, or any...

7CVSS5.2AI score0.00158EPSS
SaveExploits0References1
OSV
OSV
added 5 days ago4 views

GHSA-XGHW-P77P-3R7X Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter

When fabric-ca is configured with an LDAP backend, the username from HTTP Basic authentication is included in an LDAP uid search filter without proper escaping. An unauthenticated attacker with network access to the CA enrollment endpoint could exploit this to perform LDAP injection before passwo...

6.3CVSS5.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago6 views

CVE-2026-18554

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

5.3AI score0.00854EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58770

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

7.5CVSS5.4AI score0.00854EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago30 views

CVE-2026-18178 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

5.4CVSS0.00443EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-18178

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

5.5AI score0.00443EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-17227

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command...

5.8AI score0.00332EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58768

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command...

5.4CVSS5.9AI score0.00332EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago20 views

CVE-2026-17227

CVE-2026-17227 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. A remote authenticated attacker could bypass security restrictions due to improper neutralization of special elements used in an SQL command (SQL Injection). The IBM bulletin lists this CVE among multiple vulnerabilities in t...

5.4CVSS5.8AI score0.00332EPSS
SaveExploits0References1
Rows per page
Query Builder