171541 matches found
CVE-2026-15810
CVE-2026-15810 is a cross-site scripting (XSS) vulnerability in Google Cloud Looker prior to versions 25.6.103, 25.12.65, 25.18.68, 26.0.66, 26.2.47, 26.4.36, 26.6.28, and 26.8.7. The issue affects both Looker-hosted and self-hosted deployments and enables an attacker to execute arbitrary JavaScr...
Exploit for Out-of-bounds Read in Microsoft
CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote...
SUSE CVE-2026-63847
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587...
PT-2026-64346
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/msm/dsi component where the IO address space on DSI 6G platforms is internally adjusted by io offset. When this adjusted address is used for memory dumping, th...
PoCEvolve: Generating Proof-Of-Concept Exploits from Security Patches with Vulnerability-Aware Prompt Evolution
Ideally, the detailed information about a vulnerability should be made available together with the fixing commit. In practice, however, such details often become available only long after the commit, even when a CVE has already been published. During this window, the patch is already public, so...
PT-2026-64406
Name of the Vulnerable Software and Affected Versions epa4all versions prior to 2026-05-20 Description An attacker capable of intercepting the TLS connection between the application and the ePA backend can complete the VAU handshake using attacker-controlled keys to obtain session encryption keys...
CVE-2026-16764
The CVE pertains to OWASP DefectDojo 2.59.0, where the UserSerializer in dojo/api_v2/serializers.py mishandles the is_staff argument, enabling improper privilege management. This issue can be exploited remotely; an exploit exists publicly. Remediation is to upgrade to DefectDojo 2.58.3 or 3.0.0, ...
CVE-2026-47670
DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...
CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection
DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...
CVE-2026-47670
DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...
CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection
DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...
CVE-2026-62574
creationtimestamp| type| source ---|---|--- 2026-07-23 18:21:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:33:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz62gjkhh22 2026-08-19 13:35:17+00:00| seen|...
CVE-2026-62567
creationtimestamp| type| source ---|---|--- 2026-07-23 18:21:11+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-62565
creationtimestamp| type| source ---|---|--- 2026-07-23 18:21:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-62560
creationtimestamp| type| source ---|---|--- 2026-07-23 18:21:03+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-62557
creationtimestamp| type| source ---|---|--- 2026-07-23 18:21:01+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-62548
creationtimestamp| type| source ---|---|--- 2026-07-23 18:20:56+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-62521
creationtimestamp| type| source ---|---|--- 2026-07-23 18:20:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...