Lucene search
+L

58 matches found

CVE
CVE
added 3 days ago7 views

CVE-2026-65755

Summary: CVE-2026-65755 affects the Joomla Extension from regularlabs.com (Articles Anywhere and Users Anywhere). The issue is in the date-sensitive query cache keys which did not retain a bounded time component, allowing cached results to stay active across future publication or expiry boundarie...

5.2AI score0.00139EPSS
SaveExploits0References1
EUVD
EUVD
added 3 days ago5 views

EUVD-2026-47894

Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially...

5.2AI score0.00139EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/07/01 9:19 p.m.10 views

Deserialization of Untrusted Data

Overview software.amazon.jdbc:aws-advanced-jdbc-wrapper is an Amazon Web Services AWS Advanced JDBC Wrapper Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the CachedResultSet deserialization path in the RemoteQueryCachePlugin. An attacker can execute...

8.8CVSS6.7AI score0.00416EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/01 7:34 p.m.7 views

CVE-2026-14265

Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that read cached query results via a...

7.7CVSS6.3AI score0.00416EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/07/01 7:34 p.m.8 views

CVE-2026-14265 RCE via Deserialization in AWS Advanced JDBC Wrapper

Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that read cached query results via a...

7.7CVSS6.5AI score0.00416EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/01 7:34 p.m.37 views

CVE-2026-14265 RCE via Deserialization in AWS Advanced JDBC Wrapper

Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that read cached query results via a...

7.7CVSS0.00416EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/01 7:34 p.m.68 views

CVE-2026-14265

The CVE affects AWS Advanced JDBC Wrapper (AWR) RemoteQueryCachePlugin versions 3.3.0–4.0.0. Deserialization of untrusted data via ObjectInputStream without class filtering when reading cached query results from Redis or Valkey enables gadget-chain execution, allowing arbitrary code execution on ...

8.8CVSS6.3AI score0.00416EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/06 12:0 a.m.10 views

NewStart CGSL MAIN 6.06 (SP) : bind Multiple Vulnerabilities (NS-SA-2026-0006)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has bind packages installed that are affected by multiple vulnerabilities: - The default access control lists ACL in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which...

7.5CVSS5.9AI score0.12551EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2012-3764

Malware in sbrugna...

7.8CVSS6.8AI score0.27383EPSS
SaveExploits1References19
EUVD
EUVD
added 2025/10/03 8:7 p.m.20 views

EUVD-2023-1541

Malicious code in bioql PyPI...

5.9CVSS5.8AI score0.0046EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/30 12:0 a.m.6 views

NewStart CGSL MAIN 6.06 : bind Multiple Vulnerabilities (NS-SA-2025-0228)

The remote NewStart CGSL host, running version MAIN 6.06, has bind packages installed that are affected by multiple vulnerabilities: - The default access control lists ACL in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows...

7.5CVSS6.6AI score0.12551EPSS
SaveExploits1References7
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.5 views

Astra Linux – Vulnerability in pgpool2

In Pgpool-II, there is a risk of exposing sensitive information due to incompatible policy issues. If a database user accesses the query cache, unauthorized table data may be retrieved for that user...

7.5CVSS6.7AI score0.00528EPSS
SaveExploits0References3
Debian
Debian
added 2024/12/13 3:30 a.m.17 views

[SECURITY] [DLA 3993-1] pgpool2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3993-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA December 12, 2024 https://wiki.debian.org/LTS -...

7.5CVSS7AI score0.00704EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.16 views

Debian dla-3993 : libpgpool-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3993 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3993-1 [email protected]...

7.5CVSS6.7AI score0.00704EPSS
SaveExploits0References6
OSV
OSV
added 2024/09/12 5:15 a.m.5 views

ALPINE-CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

7.5CVSS6.5AI score0.00528EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/12 5:15 a.m.23 views

CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

6.3AI score
SaveExploits0References2
OSV
OSV
added 2024/09/12 5:15 a.m.4 views

DEBIAN-CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

7.5CVSS6.7AI score0.00528EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/12 5:15 a.m.4 views

UBUNTU-CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

7.5CVSS5.7AI score0.00528EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2024/09/12 4:33 a.m.15 views

CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

7.5CVSS6.5AI score0.00528EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/09/12 4:33 a.m.18 views

CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

7.5CVSS6.7AI score0.00528EPSS
SaveExploits0
Rows per page
Query Builder