Lucene search
K

82199 matches found

Debian CVE
Debian CVE
added 2026/05/20 5:45 a.m.7 views

CVE-2026-47784

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by saslserveruserdbcheckpass...

8.1CVSS5.8AI score0.0055EPSS
Exploits0
Cvelist
Cvelist
added 2026/05/20 5:43 a.m.37 views

CVE-2026-47783

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...

8.1CVSS0.01143EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/20 5:43 a.m.8 views

EUVD-2026-31065

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...

8.1CVSS5.8AI score0.01143EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/20 5:43 a.m.3 views

CVE-2026-47783

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...

8.1CVSS5.8AI score0.01143EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/20 5:43 a.m.4 views

CVE-2026-47783

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...

8.1CVSS5.8AI score0.01143EPSS
Exploits0References4
CVE
CVE
added 2026/05/20 5:43 a.m.29 views

CVE-2026-47783

Memcached prior to version 1.6.42 is affected by a timing side-channel in SASL password database authentication: the loop in sasl_server_userdb_checkpass exits as soon as a valid username is found, leaking information. The issue is documented in the 1.6.42 release notes/commit references. This vu...

8.1CVSS5.8AI score0.01143EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/05/20 5:43 a.m.6 views

CVE-2026-47783

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...

8.1CVSS5.8AI score0.01143EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/05/20 5:43 a.m.7 views

CVE-2026-47783

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...

8.1CVSS5.8AI score0.01143EPSS
Exploits0References3
NVD
NVD
added 2026/05/20 5:16 a.m.12 views

CVE-2026-7522

The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.1.0 via the 'template' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .ph...

8.8CVSS0.00777EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/20 4:27 a.m.42 views

CVE-2026-7522 Advanced Database Cleaner – Premium <= 4.1.0 - Authenticated (Subscriber+) Local File Inclusion via 'template'

The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.1.0 via the 'template' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .ph...

8.8CVSS0.00777EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/20 4:27 a.m.8 views

CVE-2026-7522

The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.1.0 via the 'template' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .ph...

8.8CVSS6.4AI score0.00777EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/20 4:27 a.m.7 views

CVE-2026-7522 Advanced Database Cleaner – Premium <= 4.1.0 - Authenticated (Subscriber+) Local File Inclusion via 'template'

The Advanced Database Cleaner – Premium plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.1.0 via the 'template' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .ph...

8.8CVSS6.4AI score0.00777EPSS
Exploits0References3
CVE
CVE
added 2026/05/20 4:27 a.m.24 views

CVE-2026-7522

The CVE-2026-7522 issue affects the WordPress plugin The Advanced Database Cleaner – Premium, vulnerable in versions up to 4.1.0. The root cause is Local File Inclusion via the template parameter, allowing authenticated users with Subscriber-level access and above to include and execute arbitrary...

8.8CVSS6.4AI score0.00777EPSS
Exploits0References3
NVD
NVD
added 2026/05/20 4:16 a.m.15 views

CVE-2026-9003

E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS0.00539EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/05/20 4:15 a.m.60 views

SOC-Alert-Investigation-Portfolio

SOC Alert Investigation Portfolio This repository contains pr...

5.9AI score
Exploits0
Circl
Circl
added 2026/05/20 2:56 a.m.6 views

CVE-2026-43620

creationtimestamp| type| source ---|---|--- 2026-05-20 02:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmavryzuxl2q 2026-05-20 04:18:43+00:00| seen| https://vulnerability.circl.lu/bundle/98dfc241-f74a-4ad3-9b5d-a312ab6e6c87 2026-05-20 09:58:24+00:00| seen|...

6.9CVSS5.8AI score0.00503EPSS
Exploits0References5
CVE
CVE
added 2026/05/20 2:39 a.m.13 views

CVE-2026-9003

CVE-2026-9003 concerns TONNET’s E-LAN Hybrid Recording System, which is reported to have an unauthenticated SQL Injection vulnerability that lets an attacker inject arbitrary SQL commands to read database contents. The connected documents do not specify affected product versions, exact vulnerable...

8.7CVSS6AI score0.00539EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/20 2:39 a.m.35 views

CVE-2026-9003 TONNET|E-LAN Hybrid Recording System - SQL Injection

E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS0.00539EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/20 2:39 a.m.6 views

CVE-2026-9003

E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS6AI score0.00539EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/20 2:39 a.m.7 views

CVE-2026-9003 TONNET|E-LAN Hybrid Recording System - SQL Injection

E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS6AI score0.00539EPSS
Exploits0References2
Rows per page
Query Builder