Lucene search
+L

523 matches found

CNNVD
CNNVD
•added 2026/05/08 12:00 a.m.•25 views

FlashMQ numerical error vulnerability

FlashMQ is a fast and lightweight MQTT proxy server developed by Wiebe Cazemier. Versions of FlashMQ prior to 1.26.1 contained a numerical error vulnerability. This vulnerability could cause the FlashMQ proxy to crash and lead to a denial-of-service attack when the setretainedmessagedefertimeout...

6.5CVSS5.9AI score0.00646EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/08 12:00 a.m.•31 views

PT-2026-39199

Name of the Vulnerable Software and Affected Versions FlashMQ versions prior to 1.26.1 Description A remote client with retained publish permission can cause a denial of service by crashing the broker. This occurs when both set retained message defer timeout and set retained message defer timeout...

6.5CVSS5.8AI score0.00646EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/05/08 12:00 a.m.•27 views

Linux Distros Unpatched Vulnerability : CVE-2026-41889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted...

9.8CVSS5.9AI score0.00488EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/05/07 12:00 a.m.•15 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-016495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016495 advisory. In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the...

8.1CVSS6.7AI score0.00356EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/05/04 3:17 p.m.•27 views

EUVD-2026-26979

Description: Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed characters to access unintended data Affect...

7.1CVSS5.8AI score0.006EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/04/29 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-42510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface. CVE-2026-42510 Note that Nessus relies on...

7.2CVSS5.8AI score0.00741EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/04/28 6:30 a.m.•26 views

OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

7.2CVSS5.8AI score0.00741EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/04/28 6:30 a.m.•58 views

GHSA-WQPV-C3PP-3M58 OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

6.6CVSS5.8AI score0.00741EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/04/28 6:30 a.m.•13 views

Unsafe Dependency Resolution

Overview ironic is an OpenStack Bare Metal Provisioning Affected versions of this package are vulnerable to Unsafe Dependency Resolution in the ipmitool process when a non-default configuration enables a console interface. An attacker can execute unauthorized commands by leveraging access to the...

7.5CVSS6AI score0.00741EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/28 6:16 a.m.•21 views

CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

7.2CVSS0.00741EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/04/28 6:16 a.m.•76 views

DEBIAN-CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

7.2CVSS5.8AI score0.00741EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/04/28 6:16 a.m.•17 views

UBUNTU-CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

7.2CVSS5.8AI score0.00741EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/28 4:53 a.m.•56 views

CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

6.6CVSS0.00741EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/04/28 4:53 a.m.•34 views

CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

7.2CVSS5.8AI score0.00741EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/04/28 4:53 a.m.•11 views

CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

6.6CVSS5.8AI score0.00741EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/28 4:53 a.m.•24 views

EUVD-2026-25982

OpenStack Ironic through 25.0.0 allows ipmitool execution in a non-default configuration that has a console interface...

6.6CVSS5.8AI score0.00741EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/28 4:53 a.m.•19 views

CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

6.6CVSS5.8AI score0.00741EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/04/28 4:53 a.m.•49 views

CVE-2026-42510

CVE-2026-42510 affects OpenStack Ironic in configurations that are non-default but expose a console interface. OpenStack Ironic prior to 35.0.1 permits ipmitool execution under such configurations, per provided descriptions. The root cause, as stated, is the ability to run ipmitool when a console...

7.2CVSS5.8AI score0.00741EPSS
SaveExploits0References4Affected Software1
osv_cve
osv_cve
•added 2026/04/28 4:53 a.m.•20 views

CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface...

6.6CVSS6.1AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•18 views

PT-2026-35657

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 35.0.1 Description In a non-default configuration that includes a console interface, the software allows the execution of ipmitool, a utility used to manage and configure Intelligent Platform Management...

7.2CVSS5.8AI score0.00741EPSS
SaveExploits0References21
Rows per page
Query Builder