Lucene search
+L

85600 matches found

NVD
NVD
added 2026/08/25 2:16 a.m.12 views

CVE-2026-34968

Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db parameter to delete any files writable by the P...

8.1CVSS0.00331EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 1:30 a.m.7 views

EUVD-2026-65202

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

6.1CVSS5.8AI score0.00241EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.7 views

EulerOS Virtualization 2.13.0 : sqlite (EulerOS-SA-2026-3240)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attacke...

8.5CVSS8.8AI score0.00175EPSS
SaveExploits0References3
FreeBSD
FreeBSD
added 2026/08/25 12:00 a.m.9 views

MariaDB -- Multiple vulnerabilities

The MariaDB project reports: Details in links...

6.6CVSS7.3AI score0.0036EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/24 9:05 p.m.8 views

GHSA-JM48-M3RR-9HGG 3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray including roo...

7.2CVSS6.5AI score0.00615EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/24 9:05 p.m.30 views

EUVD-2026-39432

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation...

7.2CVSS5.2AI score0.00615EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/24 5:53 p.m.12 views

ROOT-OS-DEBIAN-13-CVE-2026-44173 CVE-2026-44173 in mariadb - Patched by Root

Root has patched CVE-2026-44173 in the mariadb package for Root:Debian:13. Multiple fixed versions available...

8.1CVSS5.2AI score0.0062EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/08/24 3:52 p.m.11 views

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

8.5CVSS7.8AI score0.00175EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/24 2:23 p.m.7 views

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

8.5CVSS8AI score0.00175EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/24 2:23 p.m.8 views

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

8.5CVSS7.8AI score0.00175EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/24 2:17 p.m.8 views

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

8.5CVSS8AI score0.00175EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/24 1:43 p.m.8 views

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

8.5CVSS7.8AI score0.00175EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/24 1:33 p.m.8 views

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

8.5CVSS7.8AI score0.00175EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/24 1:33 p.m.9 views

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

8.5CVSS8AI score0.00175EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/24 1:03 p.m.38 views

CVE-2026-78370 RansomLook Unauthenticated Database Export Exposes Private Data

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...

9.2CVSS0.00486EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/24 1:03 p.m.13 views

CVE-2026-78370 RansomLook Unauthenticated Database Export Exposes Private Data

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...

9.2CVSS5.7AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 1:03 p.m.7 views

EUVD-2026-64843

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...

9.2CVSS5.7AI score0.00486EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/24 11:10 a.m.9 views

CVE-2026-78323

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

6.5CVSS5.4AI score0.00114EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerability in PostgresSQL 11

A flaw was discovered in PostgreSQL versions prior to 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20, and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, ther...

8.1CVSS7.4AI score0.01593EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in h2database

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes the class name of the driver and the URL of the database as parameters. An attacker may pass in a JNDI driver name and a URL that points to an LDAP or RMI server, allowing for remote code execution. This vulnerability can be...

10CVSS8.8AI score0.63211EPSS
SaveExploits3References2
Rows per page
Query Builder