Lucene search
+L

1169 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•4 views

CVE-2026-46985: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

5.3CVSS5.7AI score0.00319EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-46993: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

8.2CVSS5.7AI score0.00289EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•29 views

PT-2026-62151

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

5.3CVSS7AI score0.00319EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•23 views

PT-2026-62149

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

5.3CVSS7AI score0.00319EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•20 views

PT-2026-62159

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform Agent Next Gen version 13.5 Oracle Enterprise Manager Base Platform Agent Next Gen version 24.1 Description An issue in the Agent Next Gen component allows an unauthenticated attacker with network access...

9.8CVSS7.1AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•21 views

PT-2026-62150

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

5.3CVSS7AI score0.00319EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•4 views

CVE-2026-46994: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

9.8CVSS7.9AI score0.00508EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•3 views

CVE-2026-46984: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

5.3CVSS5.7AI score0.00319EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•3 views

CVE-2026-46986: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

5.3CVSS5.7AI score0.00319EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2026/07/16 9:30 p.m.•15 views

@alphasense/sdk-cli (>=0.0.4, <=1.0.4), @bsmnt/sdk-gen (2.0.5) +1 more potentially affected by CVE-2026-63397 via @genql/cli (>=6.0.0, <=6.3.3)

@genql/cli NPM version =6.0.0, =0.0.4, =0.0.2, =3.1.10 Source cves: CVE-2026-63397 Source advisory: OSV:GHSA-W757-XVVV-VGFW...

7.1CVSS5.8AI score0.00477EPSS
SaveExploits0
NVD
NVD
•added 2026/07/14 9:16 p.m.•16 views

CVE-2026-24220

NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution...

6.4CVSS0.00327EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/14 8:05 p.m.•14 views

CVE-2026-24220

NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution...

6.4CVSS6.1AI score0.00327EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/14 8:05 p.m.•17 views

CVE-2026-24220

NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution...

6.4CVSS6.1AI score0.00327EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/14 8:05 p.m.•48 views

CVE-2026-24220

NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution...

6.4CVSS0.00327EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/14 8:05 p.m.•17 views

EUVD-2026-44462

NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution...

6.4CVSS6.1AI score0.00327EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/14 8:05 p.m.•33 views

CVE-2026-24220

CVE-2026-24220 affects NVIDIA TensorRT-LLM across platforms. The vulnerability lies in the visual gen server, enabling unsafe deserialization through unauthorized ZeroMQ deserialization, which could lead to code execution. The CVSS v3.1 metrics indicate a local attack with high privileges require...

6.4CVSS6.1AI score0.00327EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-24220: Deserialization of Untrusted Data

NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution...

6.4CVSS6.1AI score0.00327EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/13 5:37 p.m.•19 views

MAL-2026-10460 Malicious code in datavaultx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf831f155eb2a6d04427e5cc3cd239055844e80c3b02576a5d546e4e7ab42b6 On require of the package's main entry auth.js - lib/writer.js, the module attempts require'auth-gen-next'; on failure it invokes execSync'npm instal...

6.1AI score
SaveExploits0References1
CVE
CVE
•added 2026/07/13 1:12 p.m.•67 views

CVE-2026-61498

CVE-2026-61498 affects Vitec Flamingo 4.12.2. The vulnerability is an unauthenticated OS command injection in the admin/ajax/gen_graphs.php endpoint, where input values from GET parameters (start, end, key, format) are unsafely passed to shell commands via passthru(), enabling remote command exec...

9.8CVSS6.6AI score0.04008EPSS
SaveExploits2References3Affected Software1
attackerkb
attackerkb
•added 2026/07/13 1:12 p.m.•20 views

CVE-2026-61498

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gengraphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in the start, end, key, or format HTTP GET parameters. Attacke...

9.8CVSS6.3AI score0.04008EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder