Lucene search
+L

875 matches found

NVD
NVD
added 2026/02/10 4:16 a.m.13 views

CVE-2026-24319

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...

5.8CVSS0.00094EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.12 views

SAP Business One 安全漏洞

SAP Business One is a business management software developed by the German company SAP. This software includes functions such as financial management, operational management, and human resource management. There is a security vulnerability in SAP Business One, which stems from sensitive informati...

5.8CVSS5.8AI score0.00094EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.16 views

PT-2026-7218

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...

5.8CVSS5.5AI score0.00094EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/02/06 12:26 a.m.7 views

SUSE CVE-2026-1707

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...

7.4CVSS5.8AI score0.00392EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/05 6:30 p.m.6 views

GHSA-3P7X-94Q9-JQ9X pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...

7.4CVSS5.8AI score0.00392EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/02/05 6:30 p.m.15 views

pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...

7.4CVSS5.8AI score0.00392EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/02/05 6:16 p.m.31 views

CVE-2026-1707

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...

7.4CVSS0.00392EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/05 5:30 p.m.21 views

EUVD-2026-5528

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...

7.4CVSS5.8AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/05 5:30 p.m.81 views

CVE-2026-1707

CVE-2026-1707 affects pgAdmin 9.11. The SUSE/Red Hat/Linux advisories describe a Restore restriction bypass during server-mode restores from PLAIN-format dumps, where an attacker with web GUI access can observe an active restore, exfiltrate the \restrict key in real time, and race the restore by ...

7.4CVSS5.8AI score0.00392EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/05 5:30 p.m.12 views

CVE-2026-1707 Restore restriction bypass via key disclosure vulnerability (pgAdmin 4)

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...

7.4CVSS5.8AI score0.00392EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/05 12:00 a.m.13 views

PT-2026-6603

Name of the Vulnerable Software and Affected Versions pgAdmin version 9.11 Description pgAdmin version 9.11 is susceptible to a restriction bypass issue during restore operations when running in server mode and processing PLAIN-format dump files. An attacker with access to the pgAdmin web interfa...

9.6CVSS5.8AI score0.00392EPSS
SaveExploits0References41
RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.17 views

CVE-2025-12772

Brocade SANnav before 2.4.0b logs the Brocade Fabric OS Switch admin password on the SANnav support save logs. When OOM occurs on a Brocade SANnav server, the call stack trace for the Brocade switch is also collected in the heap dump file which contains this switch password in clear text. The...

8.5CVSS8.4AI score0.00262EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/02 12:00 a.m.27 views

PT-2026-5696

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.4.0b Description Brocade SANnav before version 2.4.0b improperly handles logging of the Brocade Fabric OS Switch admin password. The password is logged in clear text within the SANnav support save logs...

8.5CVSS8.3AI score0.00262EPSS
SaveExploits0References4
Broadcom
Broadcom
added 2026/01/27 12:00 a.m.23 views

Plaintext Switch admin login password is seen in Brocade SANnav support save (CVE-2025-12772)

Brocade SANnav before 2.4.0b logs the Brocade Fabric OS Switch admin password on the SANnav support save logs. When OOM occurs on a Brocade SANnav server, the call stack trace for the Brocade switch is also collected in the heap dump file which contains this switch password in clear text. The...

8.5CVSS5.9AI score0.00262EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/26 12:00 a.m.13 views

openSUSE 16 Security Update : busybox (openSUSE-SU-2026:20090-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20090-1 advisory. Security fixes: - CVE-2025-60876: HTTP request header injection in wget bsc1253245. - CVE-2025-46394: Fixed tar hidden files via escape sequence...

6.5CVSS6AI score0.00291EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2026/01/22 6:30 p.m.23 views

orjson does not limit recursion for deeply nested JSON documents

The orjson.dumps function in orjson before 3.11.6 does not limit recursion for deeply nested JSON documents...

7.5CVSS5.8AI score0.00588EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/01/22 5:16 p.m.18 views

PYSEC-2026-107

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...

7.5CVSS5.8AI score0.00588EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/01/22 5:16 p.m.12 views

PYSEC-2026-107

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...

7.5CVSS5.8AI score0.00588EPSS
SaveExploits1References3
NVD
NVD
added 2026/01/22 5:16 p.m.11 views

CVE-2025-67221

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...

7.5CVSS0.00588EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/22 12:25 p.m.5 views

SUSE-SU-2026:0236-1 Security update for busybox

This update for busybox fixes the following issues: This update for busybox fixes the following issues: Security issues: - CVE-2025-46394: Fixed tar hidden files via escape sequence CVE-2025-46394, bsc1241661 - CVE-2025-60876: Fixed HTTP request header injection in wget CVE-2025-60876, bsc1253245...

6.5CVSS7.1AI score0.00291EPSS
SaveExploits1References8
Rows per page
Query Builder