9032 matches found
CVE-2026-21987
...
CVE-2026-21986
...
CVE-2026-21984
CVE-2026-21984 affects Oracle VM VirtualBox (Core) with vulnerable versions 7.1.14 and 7.2.4. The issue permits a high-privilege attacker who has logon access to the host to take over Oracle VM VirtualBox, with potential impact on related products (scope change). CVSS 3.1 base score 7.5 (HIGH) an...
CVE-2026-21985
...
CVE-2026-21976
...
CVE-2026-21952
...
CVE-2026-21948
...
CVE-2026-21944
...
CVE-2026-21943
...
CVE-2026-21943
CVE-2026-21943 affects Oracle E-Business Suite Scripting Admin in versions 12.2.3–12.2.15. An unauthenticated attacker with network access via HTTP can compromise Oracle Scripting, with human interaction required. Impact includes unauthorized updates, inserts, deletes, and read access to Oracle S...
CVE-2026-21935
Oracle Solaris 11 Driver vulnerability (CVE-2026-21935) affects the Driver component in Solaris 11. An attacker with local access and high privileges can exploit this easily, with user interaction required. Impact includes unauthorized creation/deletion/modification of data or complete access to ...
CVE-2026-21925
CVE-2026-21925 is an Oracle Java SE/GraalVM vulnerability with multiple related CVEs (21925, 21932, 21933, 21945) affecting Java 8u471+, 11.0.29+, 17.0.17, 21.0.9, 25.0.1 across RMI, AWT/JavaFX, Networking and Security components. Connected advisories confirm it is present in OpenJDK/OpenJDK-base...
EUVD-2026-3461
PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware...
EUVD-2026-3489
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.1.0. This is due to missing or incorrect nonce validation on the hooknewsletteraction function. This makes it possible for unauthenticated...
EUVD-2026-3484
A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...
MiracleLinux 8 : 389-ds:1.4 bug fix and enhancement update (AXSA:2021-2281:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2281:02 advisory. An update for the 389-ds:1.4 module is now available. CVE-2020-35518 When binding against a DN during authentication, the reply from 389-ds-base will be...
MiracleLinux 8 : 389-ds:1.4 (AXSA:2024-8413:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8413:01 advisory. 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars in logentryattr CVE-2024-1062 Tenable has extracted the...
MiracleLinux 8 : libmaxminddb-1.2.0-10.el8_9.1 (AXSA:2024-7509:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7509:01 advisory. libmaxminddb: improper initialization in dumpentrydatalist in maxminddb.c CVE-2020-28241 Tenable has extracted the preceding description block directly from...
MiracleLinux 8 : kernel-4.18.0-240.el8 (AXSA:2021-1489:04)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1489:04 advisory. kernel: use after free in the video driver leads to local privilege escalation CVE-2019-9458 kernel: use-after-free in drivers/bluetooth/hcildisc.c...
kernel: smb: client: Fix use-after-free in cifs_fill_dirent
A use-after-free flaw was found in cifsfilldirent in fs/cifs/readdir.c in smb client in the Linux Kernel. This flaw could allow an attacker to crash the system due to race problem. This vulnerability could even lead to a kernel information leak problem...