Lucene search
+L

213056 matches found

Cvelist
Cvelist
added 2026/08/20 2:38 p.m.35 views

CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

7.3CVSS0.00082EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 2:37 p.m.37 views

CVE-2026-16925 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization...

7.1CVSS0.00086EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 2:36 p.m.21 views

CVE-2026-16922

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are affected by a TOCTOU race condition exploitable by a local attacker with low privileges, enabling arbitrary code execution with high confidentiality, integrity, and availability impact (CVSS 7.0). Exploitation details are not provided. IBM reference: htt...

7CVSS5.8AI score0.00077EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/20 2:36 p.m.35 views

CVE-2026-16922 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

7CVSS0.00077EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 2:29 p.m.13 views

EUVD-2026-63376

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

5.9CVSS5.3AI score0.00261EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/20 2:17 p.m.8 views

CVE-2026-64972

ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute value, and append a new event handler such as onload. The related previewtop.php file sanitises these parameters, but...

4.8CVSS0.00295EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.11 views

Azure Stack HCI Information Disclosure Vulnerability

Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network...

8.6CVSS5.3AI score0.00582EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.12 views

Azure Data Manager for Energy Remote Code Execution Vulnerability

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

8.5CVSS5.7AI score0.00377EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.10 views

Azure Logic Apps Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

9.6CVSS5.4AI score0.00573EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.8 views

Azure Data Factory Information Disclosure Vulnerability

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

8.6CVSS5.2AI score0.00552EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.11 views

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...

10CVSS5.6AI score0.00578EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.12 views

Windows Remote Help Defense Spoofing Vulnerability

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

7.1CVSS5.5AI score0.00232EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.18 views

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

9.9CVSS5.9AI score0.0053EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.8 views

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

9.9CVSS5.9AI score0.00541EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/20 2:00 p.m.9 views

Microsoft Remote Help Denial of Service Vulnerability

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

5.5CVSS5.5AI score0.00504EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/20 1:58 p.m.29 views

CVE-2026-64972 Reflected XSS in ATutor

ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute value, and append a new event handler such as onload. The related previewtop.php file sanitises these parameters, but...

4.8CVSS0.00295EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 1:58 p.m.17 views

CVE-2026-64971

ATutor's restore functionality allows reflected XSS: a crafted URL triggers arbitrary JavaScript execution in the victim's browser. Only version 2.2.4 is confirmed vulnerable, but the product is no longer actively supported and has no fix, so other versions may also be affected. CVSS 4.0 base sco...

4.8CVSS5.7AI score0.0036EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/20 1:57 p.m.30 views

CVE-2026-64960 Remote Code Execution via Unrestricted File Upload in ATutor

ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handling of file uploads, files are stored in a web-accessible location before their content is validated. An authenticated attacker who knows a valid courseid can upload a...

8.7CVSS0.00395EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/20 12:16 p.m.6 views

CVE-2026-77083

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node...

6CVSS0.00271EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/20 11:21 a.m.11 views

CVE-2026-77081 n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node

n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the node's Authentication parameter is set to expression mode, every authentication-gated credential selector is treated as active; if two credentials of different types are...

5.1CVSS5.5AI score
SaveExploits0References4
Rows per page
Query Builder