Lucene search
K

4750 matches found

Positive Technologies
Positive Technologies
added 2026/02/09 12:0 a.m.5 views

PT-2026-7063

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt communications with the web server. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVR...

7.1CVSS5.3AI score0.00152EPSS
Exploits0References2
Amazon
Amazon
added 2026/02/05 12:0 a.m.9 views

Important: java-11-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK:...

7.5CVSS5.7AI score0.00547EPSS
Exploits1
Amazon
Amazon
added 2026/02/05 12:0 a.m.12 views

Important: java-17-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK:...

7.5CVSS5.7AI score0.00547EPSS
Exploits1
AlmaLinux
AlmaLinux
added 2026/02/05 12:0 a.m.15 views

Moderate: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

6CVSS5.5AI score0.0056EPSS
Exploits0References10
OSV
OSV
added 2026/02/05 12:0 a.m.7 views

ALSA-2026:2128 Moderate: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

6CVSS5.7AI score0.0056EPSS
Exploits0References10
F5 Networks
F5 Networks
added 2026/02/03 4:42 p.m.8 views

K000159867: MySQL vulnerability CVE-2026-21941

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multip...

4.9CVSS4.9AI score0.00337EPSS
Exploits0
Fedora
Fedora
added 2026/01/31 5:14 p.m.5 views

[SECURITY] Fedora 42 Update: openssl-3.2.6-3.fc42

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

8.8CVSS5.9AI score0.45854EPSS
Exploits7
Rockylinux
Rockylinux
added 2026/01/30 10:9 p.m.9 views

openssl security update

An update is available for openssl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...

8.8CVSS6.3AI score0.45854EPSS
Exploits7
Packet Storm News
Packet Storm News
added 2026/01/27 12:0 a.m.4 views

OpenSSL Toolkit 3.3.6

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.3 release...

5.3CVSS5.9AI score0.45854EPSS
Exploits7
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.7 views

OpenJDK 8 <= 8u472 / 11.0.0 <= 11.0.29 / 17.0.0 <= 17.0.17 / 21.0.0 <= 21.0.9 / 25.0.0 <= 25.0.1 Multiple Vulnerabilities (2026-01-20)

The version of OpenJDK installed on the remote host is 8 prior to 8u472 / 11.0.0 prior to 11.0.29 / 17.0.0 prior to 17.0.17 / 21.0.0 prior to 21.0.9 / 25.0.0 prior to 25.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-01-20 advisory. Please Note: Java CVEs do...

7.5CVSS6.1AI score0.00547EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2026/01/26 4:9 p.m.5 views

openjdk: Improve JMX connections (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and...

4.8CVSS5.8AI score0.00212EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/01/26 2:21 p.m.5 views

openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17...

6.1CVSS5.8AI score0.00261EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2026/01/26 1:39 p.m.3 views

openjdk: Improve JMX connections (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and...

4.8CVSS5.8AI score0.00212EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/01/26 1:39 p.m.5 views

openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17...

6.1CVSS5.8AI score0.00261EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2026/01/26 1:38 p.m.3 views

openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 an...

7.5CVSS5.9AI score0.00547EPSS
Exploits0References5
Fedora
Fedora
added 2026/01/25 1:16 a.m.7 views

[SECURITY] Fedora 42 Update: wireshark-4.6.3-1.fc42

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

6.5CVSS5.9AI score0.00206EPSS
Exploits3
CNNVD
CNNVD
added 2026/01/24 12:0 a.m.5 views

Salesforce Marketing Cloud Engagement security vulnerability

Salesforce Marketing Cloud Engagement is a digital marketing automation platform offered by the American company Salesforce. Versions of Salesforce Marketing Cloud Engagement prior to version 2026.1.21 contained security vulnerabilities, which were caused by improper parameter separators,...

9.8CVSS5.7AI score0.00659EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/24 12:0 a.m.5 views

Salesforce Marketing Cloud Engagement security vulnerability

Salesforce Marketing Cloud Engagement is a digital marketing automation platform offered by the American company Salesforce. Versions of Salesforce Marketing Cloud Engagement prior to version 2026.1.21 contained security vulnerabilities, which were caused by hard-coded encryption keys. These...

9.8CVSS5.7AI score0.00613EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/23 12:0 a.m.4 views

CVE-2025-67230

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...

5.4AI score0.0022EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/23 12:0 a.m.4 views

CVE-2025-67230

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...

7.1CVSS5.9AI score0.0022EPSS
Exploits0References3
Rows per page
Query Builder