Lucene search
+L

137024 matches found

vulnersOsv
vulnersOsv
•added 2026/09/15 2:15 a.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ac.intave:samples (>=0.0.4, <=0.0.13) +13315 more potentially affected by CVE-2026-90852 via com.github.luben:zstd-jni (>=1.4.4-2, <=1.5.7-13)

com.github.luben:zstd-jni MAVEN version =1.4.4-2, =0.0.1, =0.0.4, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =1.3.7 and more Source cves: CVE-2026-90852 Source advisory: MEND:CVE-2026-90852...

7.5CVSS7.2AI score0.0054EPSS
SaveExploits0
Fedora
Fedora
•added 2026/09/15 1:03 a.m.•14 views

[SECURITY] Fedora 43 Update: perl-Protocol-HTTP2-1.14-1.fc43

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0
Fedora
Fedora
•added 2026/09/15 12:41 a.m.•19 views

[SECURITY] Fedora 44 Update: perl-Protocol-HTTP2-1.14-1.fc44

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0
Fedora
Fedora
•added 2026/09/15 12:18 a.m.•19 views

[SECURITY] Fedora 45 Update: perl-Protocol-HTTP2-1.14-1.fc45

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...

7.5CVSS5.8AI score0.00365EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•32 views

PT-2026-92882

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle...

8.1CVSS5.6AI score0.00362EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•55 views

PT-2026-92100

Name of the Vulnerable Software and Affected Versions gitoxide gix-transport versions prior to 0.59.2 Description The software fails to filter control characters in git-daemon connect requests. This allows attackers to inject NUL, CR, or LF bytes through specially crafted git URLs. Such injection...

5.4CVSS5.8AI score0.0023EPSS
SaveExploits0References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•9 views

CVE-2026-91949: Protection Mechanism Failure

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

9.3CVSS5.9AI score0.00578EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92521

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

9.9CVSS5.6AI score0.00417EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•32 views

PT-2026-92952

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

9.1CVSS5.7AI score0.00425EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•36 views

PT-2026-93047

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

8.8CVSS5.7AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•28 views

PT-2026-93225

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/ag ui strands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request...

6.5CVSS6.2AI score0.00374EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•24 views

Fedora 43 : perl-Protocol-HTTP2 (2026-06b545f607)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-06b545f607 advisory. This release fixes CVE-2026-16028 a memory exhaustion causing a denial of service and a license wording. Tenable has extracted the preceding...

7.5CVSS6AI score0.00365EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92564

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle...

9.6CVSS5.6AI score0.00416EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•30 views

PT-2026-92483

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity...

8.8CVSS5.6AI score0.00432EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•8 views

CVE-2026-91949: Protection Mechanism Failure

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

9.3CVSS5.9AI score0.00578EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92068

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description Unauthenticated attackers can bypass the protocol policy to establish RDSTLS connections even when the server policy has explicitly disabled them. This is achieved by sending incompatible protocol...

9.3CVSS5.8AI score0.00578EPSS
SaveExploits1References18
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•31 views

PT-2026-92581

Name of the Vulnerable Software and Affected Versions Oracle Internet Directory versions 12.2.1.4.0 Oracle Internet Directory versions 14.1.2.1.0 Description A flaw in the OID LDAP Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to...

9.9CVSS5.7AI score0.00417EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-91949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections...

9.3CVSS5.9AI score0.00578EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•28 views

PT-2026-92590

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

9.8CVSS5.6AI score0.00508EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92587

Name of the Vulnerable Software and Affected Versions Oracle Internet Directory versions 12.2.1.4.0 Oracle Internet Directory versions 14.1.2.1.0 Description A flaw in the OID LDAP Server component of Oracle Fusion Middleware allows a high privileged attacker with network access via LDAP to...

7.2CVSS5.7AI score0.00462EPSS
SaveExploits0References3
Rows per page
Query Builder