Lucene search
+L

6 matches found

OSV
OSV
added 2026/07/14 10:16 a.m.6 views

UBUNTU-CVE-2026-15043

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...

9.8CVSS6.1AI score0.00387EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/14 9:44 a.m.11 views

EUVD-2026-43654

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...

9.8CVSS6.1AI score0.00387EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/14 9:44 a.m.39 views

CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...

0.00387EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.17 views

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. There is a security vulnerability in Keycloak. This vulnerability allows authenticated users with existing organizational membership to exploit it by accessing user-facing APIs or requesting OpenID Connect...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/05 6:20 p.m.37 views

CVE-2025-66577

cpp-httplib (C++11 single-file header) contains CVE-2025-66577. The issue arises from unconditional acceptance of client-controlled headers (X-Forwarded-For, X-Real-IP) in get_client_ip() within docker/main.cc, allowing spoofed client IPs to influence server-visible metadata, logging, and authori...

5.3CVSS6.3AI score0.00268EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/15 5:2 p.m.8 views

CVE-2025-62378 CommandKit exposes incorrect command name in context object for message command aliases

CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling...

6.1CVSS6.7AI score0.00152EPSS
SaveExploits0References1
Rows per page
Query Builder