Lucene search
+L

5518 matches found

Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•19 views

PT-2026-5451

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 12.1.0 through 12.1.3 Description The software may allow a local user to...

6.2CVSS5.7AI score0.00173EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•23 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from improper neutralization of...

6.5CVSS5.9AI score0.00373EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•14 views

PT-2026-5458

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 12.1.0 through 12.1.3 Description The software may allow a local user to...

6.5CVSS5.7AI score0.00373EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•8 views

CVE-2025-36424: Improper Validation of Specified Quantity in Input

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.5CVSS5.8AI score0.00373EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•26 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from improper neutralization of...

6.2CVSS5.9AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•23 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which arises from improper neutralization of speci...

5.3CVSS5.9AI score0.00341EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•20 views

PT-2026-5453

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 12.1.0 through 12.1.3 Description The software may allow a local user to...

6.5CVSS5.7AI score0.00403EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•19 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from improper neutralization of...

6.5CVSS5.9AI score0.00403EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/28 6:56 p.m.•51 views

CVE-2026-0749 Cross-Site Scripting Vulnerability in Drupal Form Builder Module

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Form Builder allows Cross-Site Scripting XSS.This issue affects Drupal: from 7.X-1.0 through 7.X-1.22...

4.8CVSS0.00236EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•2 views

CVE-2026-1513: Improper Neutralization of Input During Web Page Generation

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

6.1CVSS6.1AI score0.00201EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•3 views

CVE-2026-24824: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in yacy yacysearchserver source/net/yacy/http/servlets modules. This vulnerability is associated with program files YaCyDefaultServlet.Java. This issue affects yacysearchserver...

6.9CVSS5.8AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:16 p.m.•17 views

CVE-2025-68017

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Antideo Antideo Email Validator antideo-email-validator allows Blind SQL Injection.This issue affects Antideo Email Validator: from n/a through = 1.0.10...

7.5CVSS5.6AI score0.00373EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/23 2:28 p.m.•8 views

CVE-2026-24572

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through = 4.1.0...

8.8CVSS5.9AI score0.00361EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/01/23 11:26 a.m.•50 views

Security update for azure-cli-core

This update for azure-cli-core fixes the following issues: CVE-2025-24049: Fix improper neutralization of special elements used in a command which allows an unauthorized attacker to elevate privileges locally. bsc1239460 Patch Instructions: To install this SUSE update use the SUSE recommended...

8.6CVSS5.5AI score0.0043EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/23 9:53 a.m.•47 views

CVE-2025-46699

Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability in the Server. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

4.3CVSS0.00324EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•5 views

CVE-2025-46699: Improper Neutralization of Special Elements Used in a Template Engine

Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability in the Server. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

6.5CVSS5.9AI score0.00324EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•5 views

CVE-2026-24584: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS BunnyNet Integration tutor-lms-bunnynet-integration allows DOM-Based XSS.This issue affects Tutor LMS BunnyNet Integration: from n/a through = 1.0.0...

5.9CVSS5.8AI score0.00245EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•20 views

WordPress plugin Textmetrics has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.9AI score0.00245EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•19 views

WordPress plugin Nelio Content has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.5CVSS5.9AI score0.00361EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•23 views

WordPress plugin UX Flat security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There is a...

6.5CVSS5.7AI score0.00229EPSS
SaveExploits0References1
Rows per page
Query Builder