Lucene search
+L

41148 matches found

Atlassian
Atlassian
added 2026/01/20 7:03 a.m.25 views

Injection cipher-base Dependency in Jira Service Management Data Center and Server

This High severity Injection vulnerability was introduced in versions 10.3.0, 11.0.0, 11.1.0, and 11.2.0 of Jira Service Management Data Center and Server. This Injection vulnerability, with a CVSS Score of 7.4 and a CVSS Vector of code:java CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Hcode allows...

9.1CVSS5.6AI score0.00504EPSS
SaveExploits1
OSV
OSV
added 2026/01/20 5:16 a.m.9 views

CVE-2026-0901

Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

5.4CVSS5.8AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/20 4:14 a.m.23 views

CVE-2026-0899

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.5AI score0.00389EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2026/01/20 4:14 a.m.15 views

CVE-2026-0899

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.6AI score0.00389EPSS
SaveExploits0
OSV
OSV
added 2026/01/20 3:30 a.m.9 views

GHSA-43RR-X62X-Q96W MineAdmin improperly refreshes tokens

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

5CVSS4.9AI score0.00225EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2026/01/20 3:30 a.m.20 views

MineAdmin improperly refreshes tokens

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS4.9AI score0.00225EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2026/01/20 1:15 a.m.23 views

CVE-2026-1197

A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as...

3.1CVSS0.00338EPSS
SaveExploits1References4
NVD
NVD
added 2026/01/20 1:15 a.m.13 views

CVE-2026-1195

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS0.00225EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/20 12:32 a.m.47 views

CVE-2026-1197

MineAdmin 1.x/2.x is affected by CVE-2026-1197 via information disclosure in /system/downloadById when the ID parameter is manipulated. The vulnerability is exploitable remotely with high attack complexity; public exploit appears available and the vendor has not responded to disclosure. Connected...

3.1CVSS4.9AI score0.00338EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/20 12:32 a.m.6 views

CVE-2026-1196 MineAdmin getFileInfoById information disclosure

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

3.1CVSS4.9AI score0.00416EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/20 12:32 a.m.30 views

CVE-2026-1196

MineAdmin 1.x/2.x vulnerability: manipulating the argument ID in /system/getFileInfoById leads to information disclosure. Exploitable remotely with high complexity; likely confidentiality impact. Publicly disclosed exploit; no remediation details provided in the connected documents.

5.3CVSS4.9AI score0.00416EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/20 12:02 a.m.6 views

CVE-2026-1195 MineAdmin JWT Token refresh data authenticity

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

5CVSS4.9AI score0.00225EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/20 12:02 a.m.9 views

CVE-2026-1195

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS4.9AI score0.00225EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/01/20 12:00 a.m.14 views

Oracle Database Server security vulnerabilities

Oracle Database Server is a relational database management system developed by Oracle Corporation in the United States. This database management system provides features such as data management and distributed processing. There were security vulnerabilities in the Java VM versions of Oracle...

4.5CVSS7.1AI score0.00219EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/20 12:00 a.m.17 views

Oracle Virtualization security vulnerabilities

Oracle Virtualization is a virtualization solution developed by Oracle, a US-based company. This product is used for unified management of the entire hardware and software system, from applications to disks, enabling virtualization across both desktops and data centers. VM VirtualBox is one of th...

8.2CVSS7.1AI score0.00199EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/20 12:00 a.m.12 views

PT-2026-3706

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.15 Description An easily exploitable issue exists in the Oracle Workflow product of Oracle E-Business Suite, specifically within the Workflow Loader component. A high-privileged attacker wit...

4.9CVSS7.4AI score0.00319EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/20 12:00 a.m.24 views

Oracle Virtualization security vulnerabilities

Oracle Virtualization is a virtualization solution developed by Oracle, a company in the United States. This product is used for unified management of the entire hardware and software system, from applications to disks, enabling virtualization from desktops to data centers. VM VirtualBox is one o...

8.1CVSS7.1AI score0.00196EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/20 12:00 a.m.14 views

Oracle Virtualization security vulnerabilities

Oracle Virtualization is a virtualization solution developed by Oracle, a company in the United States. This product is used for the unified management of the entire hardware and software system, from applications to disks, enabling virtualization from desktops to data centers. VM VirtualBox is o...

8.2CVSS7.1AI score0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/20 12:00 a.m.14 views

Oracle MySQL security vulnerabilities

Oracle MySQL is an open-source relational database management system developed by Oracle Corporation in the United States. The MySQL Server is one of the database server components of Oracle MySQL. Vulnerabilities exist in versions 8.0.0 to 8.0.44, 8.4.0 to 8.4.7, and 9.0.0 to 9.5.0 of the MySQL...

4.9CVSS7.1AI score0.00351EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/20 12:00 a.m.6 views

PT-2026-3698

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0 Description A flaw exists in the Optimizer component of the MySQL Server product. A highly privileged attacker with...

6.8CVSS6.8AI score0.00541EPSS
SaveExploits0References62
Rows per page
Query Builder