Rails File Content Disclosure

Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...

Drupal SQL Injection

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing specially crafted keys. id: CVE-2014-3704 info: name: Drupal SQL...

EDB-52074

creationtimestamp| type| source ---|---|--- 2026-06-30 12:19:18+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eeccf09a-5ad9-4893-b383-6217a2e76c74...

EDB-14146

creationtimestamp| type| source ---|---|--- 2026-06-30 11:40:03+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e21c51a4-c763-4cfa-b829-93bd06110368...

EDB-46319

creationtimestamp| type| source ---|---|--- 2026-06-30 10:22:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffe3f147-06f2-42a1-a363-00597be3daa9...

EDB-40500

creationtimestamp| type| source ---|---|--- 2026-06-30 10:01:08+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0b24db8b-a8dc-4de3-ac5f-2c049d30e233...

EDB-46792

creationtimestamp| type| source ---|---|--- 2026-06-30 10:01:03+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3fb78a57-a1f4-42b3-b12b-5be5c195612e...

EDB-49955

creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:37+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/13a18486-d68d-4181-af0f-73999a669770...

EDB-49457

creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:34+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7f70913-4429-48c9-b37f-5154c48054f2...

EDB-40735

creationtimestamp| type| source ---|---|--- 2026-06-30 09:58:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7c128b52-bb7b-4904-8fa9-4662e4223722...

EDB-50637

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:16+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/af412300-253a-4356-b257-a975afb15962...

Security Bulletin: EDB PGAI Hybrid Management with IBM is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI products - 1 EDB PGAI AI Factory with IBM 1.3.0, 2 EDB PGAI Analytics Accelerator 1.3.0, and 3 EDB PGAI Hybrid Data Management 1.3.0. The vulnerabilities have been addressed in 1.3.4 version. Hence, IBM strongly recommends upgrading to 1.3.4...

exploit-db-skill

Exploit-DB Skill Cross-Platform Small cross-platform helper...

Security Bulletin: EDB PGAI Databases is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI Databases 18.0. It has been addressed in 18.2. Hence, IBM strongly recommends upgrading to 18.2. Vulnerability Details CVEID:CVE-2024-25260 DESCRIPTION: elfutils v0.189 was discovered to contain a NULL pointer dereference via the handleverdef...

Security Bulletin: EDB PGAI Databases is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI Databases 18.0. It has been addressed in 18.2. Hence, IBM strongly recommends upgrading to 18.2. Vulnerability Details CVEID:CVE-2021-25317 DESCRIPTION: A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterpri...

Security Bulletin: EDB PGAI Hybrid Management with IBM is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI products - 1 EDB PGAI AI Factory with IBM 1.3.0, 2 EDB PGAI Analytics Accelerator 1.3.0, and 3 EDB PGAI Hybrid Data Management 1.3.0. The vulnerabilities have been addressed in 1.3.4 version. Hence, IBM strongly recommends upgrading to 1.3.4...

CVE-2025-14038

EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to read potentially sensitive data or possibly cause a denial-of-service by writing malformed data to certain gRPC endpoints. This flaw has been...

CVE-2025-14038

EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to read potentially sensitive data or possibly cause a denial-of-service by writing malformed data to certain gRPC endpoints. This flaw has been...

CVE-2025-14038: Missing Authorization

EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to read potentially sensitive data or possibly cause a denial-of-service by writing malformed data to certain gRPC endpoints. This flaw has been...

Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass

Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...