Lucene search
K

64 matches found

RedhatCVE
RedhatCVE
added 2026/06/17 11:20 p.m.6 views

CVE-2026-6733

A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in Undici's HTTP/1.1 client, specifically related to response queue poisoning on reused keep-alive sockets. This allows the attacker to inject an unsolicited HTTP/1.1 response onto an idle socket...

3.7CVSS4.9AI score0.0023EPSS
Exploits0References6
OSV
OSV
added 2026/05/08 5:44 a.m.3 views

BIT-JRE-2022-21305

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allow...

5.3CVSS6.5AI score0.02755EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.6 views

PT-2026-38762

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

5.3CVSS5.8AI score0.02401EPSS
Exploits0References8
OSV
OSV
added 2026/05/06 2:43 p.m.2 views

BIT-JAVA-MIN-2022-21618

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.5AI score0.02034EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/04/14 12:7 a.m.22 views

CVE-2026-27677 Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment)

Due to missing authorization checks in the SAP S/4HANA OData Service Manage Reference Equipment, an attacker could update and delete child entities via OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not...

6.5CVSS0.00181EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.4 views

PT-2026-25748

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files...

4.7CVSS5.8AI score0.00095EPSS
Exploits0References2
OSV
OSV
added 2026/02/10 4:16 a.m.5 views

CVE-2026-24312

An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass role restrictions by leveraging permissions from a less sensitive function to execute unauthorized, high-privilege actions. This has a high impact on data...

5.2CVSS5.8AI score0.0017EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.8 views

PT-2026-7311

Name of the Vulnerable Software and Affected Versions IntelR NPU Drivers affected versions not specified Description A flaw exists in some firmware for IntelR NPU Drivers within Ring 3. This issue may allow an unprivileged software adversary with an authenticated user and a low complexity attack ...

3.3CVSS5.3AI score0.00145EPSS
Exploits0References3
Redos
Redos
added 2026/01/20 12:0 a.m.6 views

ROS-20260120-7308

A vulnerability in the netfilter component of the Linux kernel is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to compromise data integrity and cause a denial of service...

7.8CVSS6.5AI score0.00294EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2026/01/09 9:13 a.m.7 views

CVE-2022-31603

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information...

6.7CVSS7AI score0.00202EPSS
Exploits0References1
OSV
OSV
added 2025/12/08 8:15 a.m.2 views

CVE-2025-66324

Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity...

5.5CVSS5.8AI score0.00076EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.3 views

PT-2025-49521

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An input verification issue exists in the compression and decompression module. Successful exploitation could impact app data integrity. Recommendations At the moment, there is no information about a...

8.4CVSS6.3AI score0.00076EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-12416

Malware in sbrugna...

6.1CVSS6.6AI score0.00968EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-1718

Malware in sbrugna...

4.3CVSS5.2AI score0.01651EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-22713

Malware in sbrugna...

6.1CVSS6.7AI score0.01134EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-22603

Malware in sbrugna...

4.7CVSS5.3AI score0.00978EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-6949

Malware in sbrugna...

6.1CVSS7AI score0.0101EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-6690

Malware in sbrugna...

4.7CVSS6.2AI score0.00985EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-12357

Malware in sbrugna...

4.7CVSS5.3AI score0.01523EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-2027

Malware in sbrugna...

4.7CVSS5.3AI score0.01296EPSS
Exploits0References5
Rows per page
Query Builder