Lucene search
+L

11849 matches found

OSV
OSV
added 2026/04/01 9:36 a.m.9 views

CLEANSTART-2026-MT27167 Security fixes for CVE-2021-3538, CVE-2025-29923, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, ghsa-557j-xg8c-q2mm, ghsa-9h84-qmv7-982p, ghsa-f6x5-jh6r-wrfv, ghsa-f9f8-9pmf-xv68, ghsa-j5w8-q4qc-rx2x applied in versions: 2.14.2-r0, 2.14.2-r1, 2.14.3-r0, 2.14.3-r1

Multiple security vulnerabilities affect the harbor package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.7AI score0.02307EPSS
SaveExploits3References30
OSV
OSV
added 2026/04/01 9:31 a.m.10 views

CLEANSTART-2026-CL65461 Security fixes for CVE-2022-29526, CVE-2025-47907, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 0.10-r0, 0.11-r0, 0.8-r0, 0.8-r1, 0.8-r2, 0.9-r0

Multiple security vulnerabilities affect the druid-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.9AI score0.02593EPSS
SaveExploits3References23
EUVD
EUVD
added 2026/04/01 9:31 a.m.10 views

EUVD-2026-17818

A regression in the way hashes were calculated caused rules containing the address range syntax x.x.x.x - y.y.y.y that only differ in the address ranges involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the...

7.5CVSS5.9AI score0.0025EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/01 7:27 a.m.20 views

CVE-2026-27101

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions 5.28.00.xx–5.32.00.xx are affected by a Path Traversal vulnerability. The issue stems from improper path filtering, enabling a high-privilege attacker within the management network to potentially achieve remote code executio...

7.2CVSS5.9AI score0.00381EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/01 7:27 a.m.5 views

CVE-2026-27101

Dell Secure Connect Gateway SCG 5.0 Appliance and Application versions 5.28.00.xx to 5.32.00.xx, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A high privileged attacker within the management network could potentially exploit this...

4.7CVSS5.9AI score0.00381EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/01 7:27 a.m.37 views

CVE-2026-27101

Dell Secure Connect Gateway SCG 5.0 Appliance and Application versions 5.28.00.xx to 5.32.00.xx, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A high privileged attacker within the management network could potentially exploit this...

4.7CVSS0.00381EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/01 7:16 a.m.11 views

CVE-2026-4748

A regression in the way hashes were calculated caused rules containing the address range syntax x.x.x.x - y.y.y.y that only differ in the address ranges involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the...

7.5CVSS0.0025EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/01 6:18 a.m.4 views

CVE-2026-4748

A regression in the way hashes were calculated caused rules containing the address range syntax x.x.x.x - y.y.y.y that only differ in the address ranges involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the...

5.9AI score0.0025EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/01 6:18 a.m.9 views

CVE-2026-4748 pf silently ignores certain rules

A regression in the way hashes were calculated caused rules containing the address range syntax x.x.x.x - y.y.y.y that only differ in the address ranges involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the...

5.9AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/01 6:18 a.m.23 views

CVE-2026-4748

CVE-2026-4748 relates to FreeBSD pf: a regression in hash calculation causes rules using address range syntax (x.x.x.x - y.y.y.y) that differ only in the range to be dropped as duplicates, loading only the first such rule. Ranges in address[/mask-bits] syntax were not affected. Affected rules may...

7.5CVSS5.9AI score0.0025EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/01 6:18 a.m.37 views

CVE-2026-4748 pf silently ignores certain rules

A regression in the way hashes were calculated caused rules containing the address range syntax x.x.x.x - y.y.y.y that only differ in the address ranges involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the...

0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.16 views

Mbed TLS 安全漏洞

Mbed TLS is an open-source, portable, easy-to-use, readable, and flexible SSL library developed by Mbed. Versions 3.3.0 to 3.6.5, as well as 4.0.0, of Mbed TLS contain security vulnerabilities due to a vulnerability that allows for algorithm downgrading...

6.5CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:0 a.m.9 views

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2026-33343)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33343 advisory. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions...

6.5CVSS6AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.6 views

PT-2026-29644

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

4.8CVSS5.9AI score0.00241EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.10 views

Juju 安全漏洞

Juju is a canonical Juju open-source application orchestration engine. Versions 3.2.0 to 3.6.19, as well as 4.0 to 4.0.4, have security vulnerabilities. These vulnerabilities stem from the internal Dqlite database cluster failing to perform proper TLS client and server authentication. This allows...

10CVSS5.8AI score0.00381EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.8 views

FreeBSD 安全漏洞

FreeBSD is a Unix-like operating system developed by the FreeBSD Foundation. There is a security vulnerability in FreeBSD, which stems from issues with hash calculations. This vulnerability may cause rules that use address-range syntax to be silently discarded, resulting in unexpected behaviors...

7.5CVSS5.8AI score0.0025EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/01 12:0 a.m.9 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.4AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:0 a.m.52 views

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50171)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50171 advisory. - macvlan: fix error recovery in macvlancommonnewlink Eric Dumazet Orabug: 39057366 CVE-2026-23209 - netfilter: nftables: fix inverted genmask check in...

8.1CVSS6.8AI score0.00481EPSS
SaveExploits7References2
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.7 views

IBM Aspera Shares 安全漏洞

IBM Aspera Shares is a web application developed by IBM. Versions 1.9.9 to 1.11.0 of IBM Aspera Shares contain security vulnerabilities. These vulnerabilities are due to susceptibility to HTML injection attacks, which could allow remote attackers to inject malicious HTML code and execute it in th...

6.1CVSS6AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/01 12:0 a.m.27 views

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

0.01531EPSS
SaveExploits0References2
Rows per page
Query Builder