Lucene search
+L

203852 matches found

OSV
OSV
added 2026/08/10 10:40 a.m.25 views

CVE-2026-72565 Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

9.8CVSS5.9AI score
SaveExploits0References4
OSV
OSV
added 2026/08/10 10:40 a.m.29 views

CVE-2026-72564 fosrl Pangolin - Access Token Scope Bypass Allows Cross-Resource Authentication

An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource...

9.6CVSS5.4AI score
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/10 10:12 a.m.8 views

Security Bulletin:Vulnerability in Perl affects IBM Netezza Appliance

Summary The Perl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-42496 Vulnerability Details CVEID:CVE-2026-42496 DESCRIPTION: Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extracti...

9.1CVSS7.3AI score0.0043EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/10 9:17 a.m.11 views

CVE-2026-66406

DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be executed with the administrative privilege...

4.8CVSS0.00094EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/10 7:42 a.m.8 views

CVE-2026-21074

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege...

7.2CVSS5.6AI score0.00103EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/10 6:29 a.m.10 views

CVE-2026-12570

A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...

5.5CVSS5.7AI score0.00128EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/10 1:30 a.m.14 views

EUVD-2026-54983

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=setappointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/10 12:31 a.m.14 views

EUVD-2026-54958

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfyuploadimage. Such manipulation of the argument imagepath leads to path traversal. An attack has to be approached locally. The project...

5.3CVSS5.3AI score0.00138EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/10 12:30 a.m.42 views

CVE-2026-19381 Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

8.5CVSS0.00111EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/08/10 12:00 a.m.10 views

The vulnerability of the IP Protection component in the Firefox web browser and the Thunderbird email client allows attackers to access confidential data.

The vulnerability of the IP Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.8CVSS7.3AI score0.00332EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/08/10 12:00 a.m.7 views

The vulnerability of the maybe_fork_scalars() function in the fs/smb/server/smb2pdu.c module of the Smb subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the maybeforkscalars function in the fs/smb/server/smb2pdu.c module of the Smb subsystem in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise t...

9CVSS8.2AI score0.00507EPSS
SaveExploits0References10Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.11 views

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0910

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0910. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.2CVSS5.2AI score0.0075EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.6 views

Photon OS 5.0: Wireshark PHSA-2024-5.0-91-0385

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0385. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.8CVSS6AI score0.00304EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.5 views

Photon OS 5.0: Wireshark PHSA-2023-5.0-91-0114

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0114. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

6.5CVSS6.3AI score0.00485EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.9 views

Photon OS 5.0: Libssh2 PHSA-2026-5.0-92-0900

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0900. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.2CVSS5.6AI score0.04024EPSS
SaveExploits14References2
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.9 views

Photon OS 5.0: Keepalived PHSA-2026-5.0-90-0921

An update of the keepalived package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0921. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS5.2AI score0.00616EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/08/10 12:00 a.m.10 views

The vulnerability of the api/store_javascript_cache.php file of the BerqWP plugin allows a hacker to execute arbitrary code.

The vulnerability of the api/storejavascriptcache.php file of the BerqWP plugin is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.1CVSS5.8AI score0.00981EPSS
SaveExploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.7 views

Photon OS 5.0: Mariadb PHSA-2025-5.0-91-0722

An update of the mariadb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0722. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7CVSS6.8AI score0.00497EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.4 views

Photon OS 5.0: Postgresql13 PHSA-2025-5.0-91-0683

An update of the postgresql13 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0683. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

5.9CVSS5.9AI score0.0034EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.12 views

Photon OS 5.0: Strongswan PHSA-2026-5.0-91-0802

An update of the strongswan package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.7CVSS5.6AI score0.01013EPSS
SaveExploits2References2
Rows per page
Query Builder