Lucene search
+L

93160 matches found

Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.14 views

PT-2026-61964

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains an insecure direct object reference IDOR flaw, which occurs when an application provides direct access to objects based on user-supplied input. This issue...

9.1CVSS6.5AI score0.00786EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.9 views

PT-2026-63019

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform version 11.4.0 Description An issue exists in the Dynamo Application Framework component of the Oracle Commerce Platform. An unauthenticated attacker with network access via LDAP Lightweight Directory Access Protocol, ...

7.5CVSS7.4AI score0.00437EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/21 12:00 a.m.30 views

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

0.00625EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.18 views

PT-2026-62068

Name of the Vulnerable Software and Affected Versions Data::DisjointSet::Shared versions prior to 0.02 Description This issue occurs when the software creates a world-readable mmap backing file and opens it without using the O EXCL or O NOFOLLOW flags. The segment is created in dsu.h using the op...

4CVSS5.9AI score0.00167EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.14 views

PT-2026-62083

Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A Directory Traversal issue exists in the nex-ai-draw-io/mcp-server component. This flaw allows a remote attacker to execute arbitrary code by traversing directories to access or manipulat...

7.8CVSS6.3AI score0.00625EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.9 views

PT-2026-62455

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

9.9CVSS7.1AI score0.00432EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.11 views

PT-2026-62561

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a high privileged attacker with network access via LDAP to compromise the...

7.2CVSS7.1AI score0.00486EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.12 views

PT-2026-62454

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise th...

10CVSS7.1AI score0.00508EPSS
SaveExploits0References3
HPE Security Bulletins
HPE Security Bulletins
added 2026/07/21 12:00 a.m.10 views

HPESBNW05081 rev.2 - Multiple Vulnerabilities in HPE Aruba Networking AOS-CX

Potential Security Impact: Remote: Directory Traversal, Unauthorized Access, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series See Affected Products section for impacted versions. Aruba CX 4100i Switch Series See Affected Products section...

8.8CVSS7AI score0.00753EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/21 12:00 a.m.9 views

MiracleLinux 8 : vim-8.0.1763-27.el8_10.ML.1 (AXSA:2026-1312:17)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1312:17 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162...

8.8CVSS7.9AI score0.00552EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/21 12:00 a.m.9 views

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3136-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3136-1 advisory. Update to version 2.2.10git255.752643c78. Security issues fixed: - CVE-2026-11610: missing bounds check in sasliorecv can lead to a...

8.8CVSS6AI score0.00796EPSS
SaveExploits0References44
Packet Storm
Packet Storm
added 2026/07/21 12:00 a.m.72 views

📄 WordPress WP Directory Kit 1.4.3 Unauthenticated Blind SQL Injection

WordPress WP Directory Kit plugin version 1.4.3 contains an unauthenticated time-based blind SQL injection vulnerability. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit demonstrates the vulnerabl...

7.5CVSS5.8AI score0.01531EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.19 views

PT-2026-62062

Name of the Vulnerable Software and Affected Versions Data::RadixTree::Shared versions prior to 0.02 Description This issue occurs when a world-readable mmap backing file is created and opened without the O EXCL or O NOFOLLOW flags. The segment is created using the open function with a mode of...

3.8CVSS5.9AI score0.00142EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.23 views

PT-2026-62063

Name of the Vulnerable Software and Affected Versions Data::HashMap::Shared versions prior to 0.14 Description This issue occurs when the software creates a world-readable mmap backing file and opens it without using the O EXCL or O NOFOLLOW flags. The segment is created in shm generic.h using th...

3.8CVSS5.9AI score0.00142EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.14 views

PT-2026-62497

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

8.8CVSS7.1AI score0.00432EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.13 views

PT-2026-62501

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

8.8CVSS7.1AI score0.00432EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.11 views

PT-2026-62496

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a high privileged attacker with network access via LDAP to compromise the...

7.2CVSS7.1AI score0.00486EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.15 views

PT-2026-62495

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory version 12.2.1.4.0 Oracle Unified Directory version 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise the...

8.1CVSS7.2AI score0.00392EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.16 views

PT-2026-62499

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

8.2CVSS7.2AI score0.00289EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.14 views

PT-2026-62562

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

8.1CVSS7.2AI score0.00362EPSS
SaveExploits0References4
Rows per page
Query Builder