Lucene search
K

17 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в net-snmp

Net-SNMP provides various tools related to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials could use an improperly formatted OID in a SET request to the nsVacmAccessTable, causing a NULL pointer derefrence. Version 5.9.2 includes a patch to addre...

8.8CVSS6.9AI score0.00143EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в net-snmp

Net-SNMP provides various tools related to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials could exploit an improper input validation vulnerability when setting malformed OIDs in both the master agent and subagent simultaneously. Version 5.9.2...

6.5CVSS6.9AI score0.00162EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/08 3:53 p.m.28 views

CVE-2026-41889 pgx: SQL Injection via placeholder confusion with dollar quoted string literals

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be interpreted as a placeholder outside of a...

2.3CVSS0.00012EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/05/08 3:53 p.m.4 views

CVE-2026-41889

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be interpreted as a placeholder outside of a...

9.8CVSS5.7AI score0.00012EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.4 views

PT-2026-37159

Name of the Vulnerable Software and Affected Versions pgx versions prior to 5.9.2 Description SQL injection can occur when the non-default simple protocol is used in conjunction with a dollar quoted string literal in the SQL query. If that string literal contains text that would be interpreted as...

9.8CVSS5.8AI score0.00012EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2026/04/08 12:0 a.m.1 views

Juniper Junos OS Vulnerability (JSA107822)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA107822 advisory. - net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of...

8.8CVSS6.2AI score0.00289EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004236 advisory. An issue was discovered in ioapiclazyupdateeoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an infinite loop related to improper interaction...

5.5CVSS6.5AI score0.00031EPSS
Exploits1References7
Circl
Circl
added 2025/10/14 4:3 p.m.3 views

CVE-2025-59258

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

6.2CVSS9.3AI score0.00074EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.2 views

lockfile linting 安全漏洞

lockfile linting is a tool by Liran Tal Personal Developer. A security vulnerability exists in lockfile linting versions prior to 5.9.2, which stems from package URL validation being out of order, and could lead to the installation of unintended npm packages...

8.3CVSS6.3AI score0.00175EPSS
Exploits1References6
OSV
OSV
added 2024/04/16 8:15 p.m.1 views

DEBIAN-CVE-2022-24806

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a...

5.3CVSS6.8AI score0.00162EPSS
Exploits0References1
OSV
OSV
added 2024/04/16 8:15 p.m.0 views

DEBIAN-CVE-2022-24805

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains...

8.8CVSS7.6AI score0.00289EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/05/15 12:0 a.m.1 views

Cybozu Garoon 资源管理错误漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A security vulnerability exists in Cybozu Garoon versions 4.10.0 through 5.9.2, which can be exploited by attacke...

6.5CVSS5.9AI score0.00349EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/04/27 12:0 a.m.2 views

MilleGPG5 权限许可和访问控制问题漏洞

MilleGPG5 is an application from MilleGPG, Inc. MilleGPG5 version 5.9.2 suffers from a privilege license and access control issue vulnerability that stems from the presence of local privilege escalation and incorrect access control...

7.8CVSS7.3AI score0.01367EPSS
Exploits4References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:27 a.m.1 views

SUSE CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

5.9CVSS6.9AI score0.00135EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:27 a.m.1 views

SUSE CVE-2022-24810

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

5.9CVSS6.9AI score0.00143EPSS
Exploits0References7
OSV
OSV
added 2022/07/08 11:42 a.m.0 views

UBUNTU-CVE-2022-24808

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users shou...

6.5CVSS6.9AI score0.00226EPSS
Exploits0References5
OSV
OSV
added 2022/07/08 11:42 a.m.0 views

UBUNTU-CVE-2022-24805

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains...

8.8CVSS7.2AI score0.00289EPSS
Exploits0References5
Rows per page
Query Builder