Lucene search
+L

1714 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•3 views

CVE-2026-42169: Incorrect Calculation of Buffer Size

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

7.3CVSS6.3AI score0.00133EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/04 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-42169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading t...

7.8CVSS6.4AI score0.00133EPSS
SaveExploits0References2
Veeam
Veeam
•added 2026/07/29 12:00 a.m.•31 views

Build Numbers and Versions of Veeam Plug-In for Xen

This KB article lists all versions of the Veeam Plug-In for Xen and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Xen 1 Releases Veeam Plug-In for Xen 1.0 Included with Veeam Backup & Replication 13.1 | 13.1.0.295 | 2026-07-29...

5.8AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2026/07/29 12:00 a.m.•28 views

Build Numbers and Versions of Veeam Plug-In for Sangfor aSV

This KB article lists all versions of the Veeam Plug-In for Sangfor aSV and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Sangfor aSV 1 Releases Veeam Plug-In for Sangfor aSV 1.0 Included withVeeam Backup & Replication 13.1 |...

5.8AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2026/07/29 12:00 a.m.•23 views

Build Numbers and Versions of Veeam Plug-In for Verge OS

This KB article lists all versions of the Veeam Plug-In for Verge OS and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Verge OS 1 Releases Veeam Plug-In for Verge OS 1.0 Included with Veeam Backup & Replication 13.1 | 13.1.0.1...

5.8AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2026/07/29 12:00 a.m.•24 views

Build Numbers and Versions of Veeam Plug-In for Platform9

This KB article lists all versions of the Veeam Plug-In for Platform9 and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Platform9 1 Releases Veeam Plug-In for Platform9 1.0 Included with Veeam Backup & Replication 13.1 |...

5.8AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/07/23 12:00 a.m.•36 views

Oracle HTTP Server (July 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party W...

10CVSS7.6AI score0.00508EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/07/22 12:31 a.m.•15 views

EUVD-2026-46778

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker...

9.8CVSS7.1AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:31 a.m.•25 views

EUVD-2026-46779

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

10CVSS7.2AI score0.00425EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/21 10:17 p.m.•14 views

CVE-2026-60364

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker...

9.8CVSS0.00508EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/21 10:17 p.m.•15 views

CVE-2026-60365

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

10CVSS0.00425EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•3 views

CVE-2026-60365: Missing Authentication for Critical Function

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

10CVSS8AI score0.00425EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•2 views

CVE-2026-60364: Improper Access Control

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker...

9.8CVSS7.9AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•28 views

PT-2026-62459

Name of the Vulnerable Software and Affected Versions Oracle Weblogic Server Proxy Plug-in version 15.1.1.0.0 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Weblogic Server Proxy Plug-in. This issue allows for the unauthorized creation, deletion, or...

10CVSS7.2AI score0.00425EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•21 views

PT-2026-62458

Name of the Vulnerable Software and Affected Versions Oracle Weblogic Server Proxy Plug-in version 12.2.1.4.0 Oracle Weblogic Server Proxy Plug-in version 14.1.2.0.0 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Weblogic Server Proxy Plug-in. This...

9.8CVSS7.2AI score0.00508EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/09 9:07 p.m.•20 views

CVE-2026-57026 Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash

An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS.If the SIP ALG is enabled on an affected device, the...

8.7CVSS5.8AI score0.0046EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/07/08 9:28 a.m.•14 views

Security Bulletin: IBM Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Application Server Liberty

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-10852 DESCRIPTION: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere...

9.8CVSS7.7AI score0.0072EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
•added 2026/07/07 3:13 p.m.•19 views

SUSE CVE-2026-59089

A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table CLUT due to an integer overflow. This occurs when multiplying numcolors and numcluts, both 16-bit unsigned short integers, resulting i...

5.5CVSS6AI score0.00296EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/07/06 7:38 p.m.•25 views

EUVD-2026-41913

A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table CLUT due to an integer overflow. This occurs when multiplying numcolors and numcluts, both 16-bit unsigned short integers, resulting i...

5.5CVSS6AI score0.00296EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/07/06 7:38 p.m.•86 views

CVE-2026-59089 Gimp: gimp: denial of service via integer overflow in playstation tim loader

A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table CLUT due to an integer overflow. This occurs when multiplying numcolors and numcluts, both 16-bit unsigned short integers, resulting i...

5.5CVSS0.00296EPSS
SaveExploits1References3
Rows per page
Query Builder