Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/07/27 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-13068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database,...

4.3CVSS5.5AI score0.00148EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/22 8:16 p.m.8 views

UBUNTU-CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.3CVSS5.9AI score0.00148EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/22 7:16 p.m.75 views

CVE-2026-13068

Summary: CVE-2026-13068 affects MongoDB mongos. An authenticated user with cursor-termination privileges on one database can terminate active cursors on a different database, disrupting ongoing queries for other users. The issue stems from an authorization check that does not properly scope privi...

4.3CVSS5.3AI score0.00148EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/07/07 8:44 p.m.15 views

CVE-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6AI score
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/03/17 11:49 p.m.14 views

CVE-2025-29781

A flaw was found in the Bare Metal Operator BMO Kubernetes API component. BMO enables users to load Secrets from arbitrary namespaces upon deployment of the namespace-scoped Custom Resource BMCEventSubscription. In affected versions, an adversary using a Kubernetes account with only namespace lev...

8.2CVSS6.4AI score0.00173EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2024/12/23 3:53 a.m.10 views

SUSE CVE-2024-43803

The Bare Metal Operator BMO implements a Kubernetes API for managing bare metal hosts in Metal3. The BareMetalHost BMH CRD allows the userData, metaData, and networkData for the provisioned host to be specified as links to Kubernetes Secrets. There are fields for both the Name and Namespace of th...

4.9CVSS6.6AI score0.00574EPSS
SaveExploits0References4
Rows per page
Query Builder