Lucene search
+L

384373 matches found

Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•20 views

PT-2026-108240

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

7.5CVSS7.1AI score0.00441EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•7 views

CVE-2026-82900: Improper Limitation of a Pathname to a Restricted Directory

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

9.1CVSS6.1AI score0.00382EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•10 views

PT-2026-108277

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2.2 Description A remote attacker can cause a denial of service due to a race condition. This occurs when concurrent unsynchronized writes are made to a shared map, which is a data structure used to stor...

7.5CVSS5.8AI score0.00263EPSS
SaveExploits0References3
Redos
Redos
•added 2026/10/08 12:00 a.m.•7 views

ROS-20261008-73-0167

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.4CVSS8.4AI score0.00139EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•20 views

PT-2026-107854

A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the...

8.6CVSS8AI score0.00235EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•4 views

CVE-2026-85423: Missing Authentication for Critical Function

A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the...

8.8CVSS8AI score0.00235EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•18 views

PT-2026-107796

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

8.4CVSS5.7AI score0.00183EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•4 views

CVE-2026-87685: External Control of File Name or Path

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

8.4CVSS5.7AI score0.00183EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•11 views

PT-2026-107858

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...

8.7CVSS7.8AI score0.00215EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/08 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-107565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS...

5.1CVSS5.6AI score0.001EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•13 views

PT-2026-108017

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An arbitrary code execution issue exists due to the ZMQ message decoder unconditionally deserializing PickleWrapper payloads using the pickle.loads function within maybe unwrap pickle without...

9.8CVSS6.4AI score0.0046EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/08 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-98226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm, swap: fix SWAPUSAGEOFFLISTBIT collision with real usage count SWAPUSAGEOFFLISTBIT is embedded in the si-inusepages usage counter, and is meant to sit above...

5.7AI score0.00173EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/08 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-98315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfsnonresidentattrshrink calls runlist...

7.8CVSS6.1AI score0.00129EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•4 views

CVE-2026-78406: Deserialization of Untrusted Data

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

9.8CVSS6.8AI score0.00499EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•5 views

CVE-2026-84249: Missing Authentication for Critical Function

IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function...

9.8CVSS6.7AI score0.00411EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•6 views

CVE-2026-80381: Improper Neutralization of Special Elements used in an SQL Command

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

9.8CVSS6.4AI score0.00317EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•5 views

CVE-2026-75875: Improper Limitation of a Pathname to a Restricted Directory

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...

9.8CVSS6.8AI score0.0058EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•5 views

CVE-2026-105275: Relative Path Traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files...

5.3CVSS5.6AI score0.00263EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•6 views

CVE-2026-78401: Deserialization of Untrusted Data

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

9.8CVSS6.8AI score0.00567EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•5 views

CVE-2026-16830: Improper Neutralization of Special Elements used in an SQL Command

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

5.4CVSS5.9AI score0.00208EPSS
SaveExploits0References3
Rows per page
Query Builder