Lucene search
+L

4434 matches found

Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•21 views

PT-2026-89616

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.5 Description Improper validation of user-controlled API endpoints allows a remote authenticated attacker to obtain sensitive information. Recommendations At the moment, there is no information abou...

5CVSS5.8AI score0.00353EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•23 views

PT-2026-89731

It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attacks...

10CVSS7.9AI score0.00358EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•27 views

PT-2026-89614

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.5 Description Remote authenticated attackers can execute arbitrary commands due to improper validation of command-line arguments within the MCP stdio server configuration. Recommendations Update IBM...

8.8CVSS6.2AI score0.00794EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•12 views

CVE-2026-19646: Undefined Security Weakness

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...

9.1CVSS6.2AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•26 views

PT-2026-89582

Name of the Vulnerable Software and Affected Versions jose versions prior to 0.11.0 Description The jose package for OCaml fails to properly validate RSA signatures. The library only confirms that PKCS 1 decoding succeeds but does not perform the necessary verification steps using the public key,...

9.1CVSS5.7AI score0.00276EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•3 views

CVE-2026-88052: Improper Validation of Array Index

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...

7.8CVSS6AI score0.00183EPSS
SaveExploits1References5
NVD
NVD
•added 2026/09/09 3:17 p.m.•13 views

CVE-2026-79690

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

3.7CVSS0.00188EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 2:57 p.m.•22 views

CVE-2026-79690

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote network access could exploit this flaw to gain unauthorized access , though the CVSS 3.1 score is 3.7 (LOW) due to high attack complexi...

3.7CVSS5.9AI score0.00188EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/09 2:40 p.m.•41 views

CVE-2026-79732

Dell Secure Connect Gateway SCG 5.0 Appliance, versions prior to 5.36.00.xx, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...

3.7CVSS0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/09 1:20 p.m.•50 views

CVE-2026-85102

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

9.8CVSS0.504EPSS
SaveExploits2References3
NVD
NVD
•added 2026/09/09 12:17 p.m.•17 views

CVE-2026-87817

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that...

8.8CVSS0.00405EPSS
SaveExploits1References2
osv-ubuntu
osv-ubuntu
•added 2026/09/09 12:17 p.m.•14 views

UBUNTU-CVE-2026-87817

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that...

8.8CVSS8.3AI score0.00405EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/09/09 11:21 a.m.•19 views

CVE-2026-87817 GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that...

8.8CVSS8.3AI score0.00405EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/09/09 11:21 a.m.•28 views

CVE-2026-87817

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that...

8.8CVSS8.3AI score0.00405EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/09/09 11:13 a.m.•48 views

CVE-2026-78492

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

7.4CVSS0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/09 11:13 a.m.•14 views

CVE-2026-78492

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

7.4CVSS5.9AI score0.00239EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 11:10 a.m.•12 views

EUVD-2026-74828

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

7.7CVSS5.8AI score0.00247EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/09 9:52 a.m.•21 views

Security Bulletin:Vulnerabilities exists in NPS of IBM Netezza Appliance

Summary Vulnerabilities identified in NPS of IBM Netezza Software have been addressed in version 11.3.1.3-IF3. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0,...

9.8CVSS7.5AI score0.0103EPSS
SaveExploits3Affected Software1
Cvelist
Cvelist
•added 2026/09/09 8:34 a.m.•45 views

CVE-2026-79967

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...

5.6CVSS0.00154EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 8:21 a.m.•25 views

CVE-2026-78491

Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Certificate Validation vulnerability affecting both the Appliance and Application editions. An unauthenticated remote attacker could potentially exploit this flaw to gain unauthorized access , with a CVSS 3.1 base score of 8.2 (HIGH) refl...

8.2CVSS5.9AI score0.00272EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder