Lucene search
+L

33781 matches found

Vulnrichment
Vulnrichment
•added 2026/09/18 7:28 p.m.•13 views

CVE-2026-81933 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can inject SQL statements through the analytic cases grid endpoint, potentially resulting in unauthorized access to sensitive data and impact ...

8.8CVSS6AI score0.00439EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 7:28 p.m.•19 views

EUVD-2026-83308

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can inject SQL statements through the analytic cases grid endpoint, potentially resulting in unauthorized access to sensitive data and impact ...

8.8CVSS6AI score0.00439EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 7:28 p.m.•34 views

CVE-2026-81933

IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the Analytic Grid Service Handler . A low-privileged authenticated user can inject SQL statements via the analytic cases grid endpoint, potentially leading to unauthorized access to sensitive data and impact to confidentiality, i...

8.8CVSS6AI score0.00439EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/18 5:17 p.m.•19 views

CVE-2026-93533

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

7.5CVSS0.01443EPSS
SaveExploits0References8
GithubExploit
GithubExploit
•added 2026/09/18 4:50 p.m.•32 views

Exploit for CVE-2026-18464

CVE-2026-18464 — WP Maps Pro This repository is intended as a...

7.5CVSS6.2AI score0.00481EPSS
SaveExploits1
Mend
Mend
•added 2026/09/18 4:30 p.m.•9 views

CVE-2026-93534

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...

7.5CVSS6AI score0.00213EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2026/09/18 4:15 p.m.•15 views

CVE-2026-93533 spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

7.5CVSS6.4AI score0.01443EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/09/18 3:45 p.m.•16 views

CVE-2026-93532 gedelumbung HospitalManagement Password Change password.php simpan improper authentication

A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/global/controllers/password.php::simpan/application/modules/global/controllers/profil.php::simpan of the file...

6.5CVSS6.1AI score0.00507EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/09/18 3:45 p.m.•14 views

CVE-2026-93532 gedelumbung HospitalManagement Password Change password.php simpan improper authentication

A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/global/controllers/password.php::simpan/application/modules/global/controllers/profil.php::simpan of the file...

5.3CVSS5.3AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/09/18 3:06 p.m.•19 views

EUVD-2026-82985

WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing...

6.8CVSS5.6AI score0.00154EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/18 10:53 a.m.•49 views

CVE-2026-93578 Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypass

A flaw was found in Netty's Online Certificate Status Protocol OCSP Client. The client fails to verify the 'id-kp-OCSPSigning' Extended Key Usage EKU in OCSP responder certificates. A remote attacker, holding any valid certificate issued by the same Certificate Authority CA, can exploit this by...

5.9CVSS0.00226EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2026/09/18 10:53 a.m.•1 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_3.4_2.12 (>=1.2, <=1.2.10) +3684 more potentially affected by CVE-2026-93578 via io.netty:netty-handler-ssl-ocsp (>=4.1.86.final, <=4.1.137.final)

io.netty:netty-handler-ssl-ocsp MAVEN version =4.1.86.final, =0.0.1, =1.2, =1.2, =1.2.3, =1.2.3, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =3.12.0.1 -...

5.9CVSS7.2AI score0.00226EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/18 10:53 a.m.•3 views

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +953 more potentially affected by CVE-2026-93578 via io.netty:netty-handler-ssl-ocsp (>=4.2.0.final, <=4.2.17.final)

io.netty:netty-handler-ssl-ocsp MAVEN version =4.2.0.final, =4.2.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-handler-ssl-ocsp and may be impacted: - ai.catboost:catboost-spark4.02.13 1.2.10 - ai.catboost:catboost-spark4.12.1...

5.9CVSS7.2AI score0.00226EPSS
SaveExploits0
CVE
CVE
•added 2026/09/18 10:53 a.m.•43 views

CVE-2026-93578

CVE-2026-93578 affects the Netty library, specifically the netty-handler-ssl-ocsp module. The vulnerability stems from a missing Extended Key Usage (EKU) check in the OCSP client, which allows an attacker to perform a certificate revocation bypass . An OCSP response signed with a certificate lack...

5.9CVSS7.1AI score0.00226EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/09/18 8:17 a.m.•32 views

DEBIAN-CVE-2026-93493

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

5.9CVSS7.1AI score0.00218EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/18 8:17 a.m.•21 views

CVE-2026-93493

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

5.9CVSS7.1AI score0.00218EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/09/18 8:17 a.m.•22 views

UBUNTU-CVE-2026-93493

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

5.9CVSS7.1AI score0.00218EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/18 8:01 a.m.•19 views

EUVD-2026-82770

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

5.9CVSS7.2AI score0.00218EPSS
SaveExploits0References2
Mend
Mend
•added 2026/09/18 8:01 a.m.•13 views

CVE-2026-93493

A flaw was found in Netty's "netty-handler-ssl-ocsp" component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional "nextUpdate" field. This omission causes the OCSP validation to be silently skipped, leading to...

8.2CVSS7.1AI score0.00218EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/18 8:01 a.m.•51 views

CVE-2026-93493

CVE-2026-93493 affects Netty's netty-handler-ssl-ocsp component. The flaw is in OCSP certificate validation: when a remote attacker supplies an OCSP response that omits the optional nextUpdate field, the validation is silently skipped , causing the application to proceed with an unvalidated certi...

5.9CVSS7.1AI score0.00218EPSS
SaveExploits0References2
Rows per page
Query Builder