Lucene search
+L

143 matches found

Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•19 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-logkit (UTSA-2026-093014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093014 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

8.5CVSS7.8AI score0.97906EPSS
SaveExploits9References4
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•19 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-framework (UTSA-2026-093017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093017 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

8.5CVSS7.8AI score0.97906EPSS
SaveExploits9References4
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-framework (UTSA-2026-093010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093010 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

10CVSS7.3AI score0.99999EPSS
SaveExploits381References4
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•20 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: avalon-logkit (UTSA-2026-093012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093012 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

10CVSS7.3AI score0.99999EPSS
SaveExploits381References4
The Hacker News
The Hacker News
•added 2026/07/03 6:55 p.m.•26 views

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access,...

9.8CVSS8.1AI score0.99993EPSS
SaveExploits37
NVD
NVD
•added 2026/06/15 3:16 a.m.•26 views

CVE-2026-12209

A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/index.js of the component Template Filter Handler. Such manipulation leads to improperly controlled modification of object prototype attributes. It is...

6.9CVSS0.00314EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/15 2:15 a.m.•20 views

CVE-2026-12209 RubyLouvre avalon Template Filter index.js prototype pollution

A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/index.js of the component Template Filter Handler. Such manipulation leads to improperly controlled modification of object prototype attributes. It is...

6.9CVSS5.3AI score0.00314EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/06/15 2:15 a.m.•66 views

CVE-2026-12209 RubyLouvre avalon Template Filter index.js prototype pollution

A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/index.js of the component Template Filter Handler. Such manipulation leads to improperly controlled modification of object prototype attributes. It is...

6.9CVSS0.00314EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/06/15 2:15 a.m.•19 views

EUVD-2026-36683

A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/index.js of the component Template Filter Handler. Such manipulation leads to improperly controlled modification of object prototype attributes. It is...

6.9CVSS5.4AI score0.00314EPSS
SaveExploits0References5
CVE
CVE
•added 2026/06/15 2:15 a.m.•48 views

CVE-2026-12209

Technical details are not publicly available in the provided documents; monitor for updates.

6.9CVSS5.3AI score0.00314EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•33 views

PT-2026-49171

A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/index.js of the component Template Filter Handler. Such manipulation leads to improperly controlled modification of object prototype attributes. It is...

6.9CVSS5.1AI score0.00314EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•2 views

CVE-2026-12209: Improperly Controlled Modification of Object Prototype Attributes

A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/index.js of the component Template Filter Handler. Such manipulation leads to improperly controlled modification of object prototype attributes. It is...

6.9CVSS5.1AI score0.00314EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/06/05 12:52 a.m.•156 views

Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

CVE-2022-46395 QEMU r36p0 Lab This repository contains a QEMU...

8.8CVSS5.8AI score0.02703EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•22 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: avalon-logkit (UTSA-2026-016681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016681 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

5.9CVSS7AI score0.99999EPSS
SaveExploits21References4
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•15 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: avalon-framework (UTSA-2026-016662)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016662 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

10CVSS7.6AI score0.99999EPSS
SaveExploits379References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2018-2669

Malware in sbrugna...

8.3CVSS6.4AI score0.00394EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-49205

Malicious code in bioql PyPI...

4.4CVSS4.5AI score0.00223EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-49203

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00699EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-49563

Malicious code in bioql PyPI...

3.3CVSS4.5AI score0.00219EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-26920

Malicious code in bioql PyPI...

3.3CVSS4.7AI score0.00189EPSS
SaveExploits0References1
Rows per page
Query Builder