Lucene search
+L

8594 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007361 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring: add a schedule point in ioaddbuffers Looping 65535 times doing kmalloc calls can trigger...

3.3CVSS5.8AI score0.0016EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007418 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq-dbg pointer in mlx5debugcqremove Prior to this patch in case...

5.5CVSS6.1AI score0.00225EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007603 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreadcap16 The following warning was observed runnin...

7.1CVSS6.1AI score0.00236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.19 views

PT-2026-33490

CVE-2026-32648 Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details e.g., SSH/RTTY status, assisting attackers in reconnais… https://t.co/9Exm9A5Lee...

5.3CVSS5.8AI score0.00249EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.18 views

PT-2026-33496

Name of the Vulnerable Software and Affected Versions Anviz CX2 Lite affected versions not specified Anviz CX7 affected versions not specified Description Anviz CX2 Lite and CX7 are susceptible to unauthenticated POST requests that modify debug settings, such as enabling SSH. This allows...

7.5CVSS5.8AI score0.00285EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/04/16 9:8 p.m.8 views

EUVD-2026-23117

Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints...

9.4CVSS5.8AI score0.00509EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/16 9:8 p.m.10 views

GHSA-95MQ-XWJ4-R47P Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints

Summary An unauthenticated debug endpoint in Dgraph Alpha exposes the full process command line, including the configured admin token from --security "token=...". This does not break token validation logic directly; instead, it discloses the credential and enables unauthorized admin-level access ...

9.4CVSS5.9AI score0.00509EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/04/16 9:8 p.m.12 views

Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints

Summary An unauthenticated debug endpoint in Dgraph Alpha exposes the full process command line, including the configured admin token from --security "token=...". This does not break token validation logic directly; instead, it discloses the credential and enables unauthorized admin-level access ...

9.4CVSS5.9AI score0.00509EPSS
SaveExploits1References4Affected Software3
Github Security Blog
Github Security Blog
added 2026/04/16 3:31 p.m.11 views

SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue...

7.5CVSS5.8AI score0.00544EPSS
SaveExploits0References5Affected Software1
GithubExploit
GithubExploit
added 2026/04/16 1:55 p.m.268 views

Exploit for CVE-2026-22679

CVE-2026-22679: Weaver E-cology Unauthenticated RCE via dubboA...

9.8CVSS6.7AI score0.2148EPSS
SaveExploits1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 9:52 a.m.7 views

Malicious code in devops-debug-tool-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30d25ee7c0447913c62771e8ddcec556db40753e2133f73ec7613939b5ca35c The package devops-debug-tool-ctf was found to contain malicious code...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/04/16 9:52 a.m.5 views

MAL-2026-2755 Malicious code in devops-debug-tool-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30d25ee7c0447913c62771e8ddcec556db40753e2133f73ec7613939b5ca35c The package devops-debug-tool-ctf was found to contain malicious code...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/04/16 9:17 a.m.9 views

CLSA-2026-1776331045 binutils: Fix of 5 CVEs

CVE-2025-11082: fix heap buffer overflow in bfdelfparseehframe - CVE-2025-5244: fix NULL deref in elfgcsweep for empty SECGROUP - CVE-2025-5245: fix SEGV in debugtypesamep / debugwritetype - CVE-2025-7545: fix heap buffer issue in objcopy copysection - CVE-2025-7546: fix corrupted group section...

7.8CVSS6.6AI score0.00254EPSS
SaveExploits3References1
EUVD
EUVD
added 2026/04/15 9:30 p.m.7 views

EUVD-2026-23007

IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SPRight to incorrectly create new...

8.4CVSS5.8AI score0.00269EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/15 9:17 p.m.8 views

CVE-2026-40173

Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpoint is registered on the default mux and reachable without authentication, exposing the full process command line...

9.4CVSS0.00509EPSS
SaveExploits1References2
OSV
OSV
added 2026/04/15 8:40 p.m.4 views

CVE-2026-40173 Dgraph: Unauthenticated pprof endpoint leaks admin auth token

Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpoint is registered on the default mux and reachable without authentication, exposing the full process command line...

9.4CVSS5.9AI score0.00509EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/04/15 8:40 p.m.3 views

CVE-2026-40173

Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpoint is registered on the default mux and reachable without authentication, exposing the full process command line...

9.4CVSS5.8AI score0.00509EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2026/04/15 8:40 p.m.20 views

CVE-2026-40173

Dgraph (Open Source GraphQL DB) versions

9.4CVSS5.8AI score0.00509EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2026/04/15 7:16 p.m.8 views

CVE-2026-4857

IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SPRight to incorrectly create new...

8.4CVSS0.00269EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2026/04/15 6:31 p.m.8 views

org.bouncycastle:bcmail-debug-jdk14 (>=1.81 <=1.83) potentially affected by CVE-2026-5588 via org.bouncycastle:bcpkix-debug-jdk14 (>=1.81 <=1.83)

org.bouncycastle:bcpkix-debug-jdk14 MAVEN version =1.81, =1.81, =1.83 Source cves: CVE-2026-5588 Source advisory: OSV:GHSA-WG6Q-6289-32HP...

7.5CVSS5.8AI score0.00392EPSS
SaveExploits0
Rows per page
Query Builder