Lucene search
+L

76119 matches found

Positive Technologies
Positive Technologies
added 2026/05/11 12:00 a.m.14 views

PT-2026-39800

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.9 iPadOS versions prior to 18.7.9 macOS Sequoia versions prior to 15.7.7 macOS Sonoma versions prior to 14.8.7 macOS Tahoe versions prior to 26.5 Description An integer overflow—a condition where an arithmetic...

7.5CVSS5.8AI score0.00623EPSS
SaveExploits0References21
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.15 views

EDIMAX BR-6428nS 安全漏洞

The EDIMAX BR-6428nS is a wireless router produced by EDIMAX Corporation. The EDIMAX BR-6428nS V3 1.15 version has a security vulnerability. This vulnerability stems from insufficient input validation in the WLAN configuration function. It allows authenticated attackers to submit malicious inputs...

8.8CVSS6.1AI score0.01258EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.13 views

jq 输入验证错误漏洞

jq is a lightweight and flexible command-line JSON processor developed by jqlang. Jq versions 1.8.1 and earlier contain a vulnerability related to input validation errors. This vulnerability stems from the use of signed integers for the stack allocation size in the jq bytecode virtual machine. Wh...

7.3CVSS5.8AI score0.00142EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.14 views

jq 输入验证错误漏洞

jq is a lightweight and flexible command-line JSON processor developed by jqlang. Jq versions 1.8.1 and earlier have a vulnerability related to input validation errors. This vulnerability arises because jq accepts embedded NUL bytes at the jq language level during import paths. However, during...

4.4CVSS5.8AI score0.00157EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.15 views

Wikimedia AbuseFilter 输入验证错误漏洞

Wikimedia AbuseFilter is an editing filter tool developed by the Wikimedia Foundation, designed to automatically filter and block suspicious edits, account creation, and other disruptive activities based on custom rules. Versions of Wikimedia AbuseFilter prior to 1.43.7, as well as versions 1.44....

2.1CVSS5.8AI score0.00244EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/11 12:00 a.m.21 views

PT-2026-39842

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 18.7.9 iPadOS versions prior to 26.5 macOS Sequoia versions prior to 15.7.7 macOS Sonoma versions prior to 14.8.7 macOS Tahoe versions prior to 26.5 Description A...

5.8AI score0.00265EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.25 views

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

7.5CVSS5.8AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/11 12:00 a.m.18 views

PT-2026-39781

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.9 iPadOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 26.5 macOS Tahoe versions prior to 26.5 tvOS versions prior to 26.5 visionOS versions prior to 26.5 watchOS versions prior to 26.5...

4.3CVSS5.8AI score0.00296EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:00 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2026-45190

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a...

6.5CVSS6.1AI score0.00311EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/10 9:16 p.m.13 views

ALPINE-CVE-2026-45190

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

6.5CVSS5.5AI score0.00311EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/10 8:15 p.m.6 views

CVE-2026-45190 Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

6.5CVSS5.9AI score
SaveExploits0References7
GithubExploit
GithubExploit
added 2026/05/10 9:49 a.m.125 views

SECURING-AGAINST-XSS

No d...

5.8AI score
SaveExploits0
CNNVD
CNNVD
added 2026/05/10 12:00 a.m.15 views

Net-CIDR-Lite 安全漏洞

Net-CIDR-Lite is a Perl module for working with CIDR addresses from Stig Personal Developers. A security vulnerability exists in Net-CIDR-Lite versions prior to 0.24 that stems from not properly validating IP address and CIDR mask input, which could lead to IP ACL bypass...

6.5CVSS5.8AI score0.00311EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/10 12:00 a.m.18 views

PT-2026-39538

Name of the Vulnerable Software and Affected Versions Net::CIDR::Lite versions prior to 0.24 Description Net::CIDR::Lite for Perl fails to properly validate IP address and CIDR mask inputs. Inputs containing non-ASCII digit characters or a trailing newline pass validation but are re-encoded by th...

6.5CVSS5.8AI score0.00311EPSS
SaveExploits0References26
ATTACKERKB
ATTACKERKB
added 2026/05/09 7:39 p.m.58 views

CVE-2026-42257

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled...

5.8CVSS5.8AI score0.00429EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2026/05/09 9:16 a.m.53 views

CVE-2026-3828

Some Hikvision switch products discontinued since December 2023 are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leadi...

7.2CVSS0.00842EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/09 8:27 a.m.84 views

CVE-2026-3828

Some Hikvision switch products discontinued since December 2023 are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leadi...

7.2CVSS0.00842EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/09 8:27 a.m.11 views

CVE-2026-3828

Some Hikvision switch products discontinued since December 2023 are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leadi...

7.2CVSS6.1AI score0.00842EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/09 8:27 a.m.22 views

EUVD-2026-28908

Some Hikvision switch products discontinued since December 2023 are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leadi...

7.2CVSS6.1AI score0.00842EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/09 8:27 a.m.9 views

CVE-2026-3828

Some Hikvision switch products discontinued since December 2023 are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leadi...

7.2CVSS6.1AI score0.00842EPSS
SaveExploits0References1
Rows per page
Query Builder