Lucene search
+L

113943 matches found

CVE
CVE
•added 2026/09/14 7:42 p.m.•24 views

CVE-2026-17047

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are vulnerable to Cross-Site Request Forgery (CWE-352) in its GUI due to improper request validation. A remote attacker can exploit this to obtain sensitive information and cause low integrity impact (CVSS 5.4, MEDIUM). No specific exploit or in-the...

5.4CVSS5.8AI score0.00119EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/14 7:42 p.m.•9 views

CVE-2026-17047 IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery []

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation...

5.4CVSS5.8AI score0.00119EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/14 7:39 p.m.•10 views

CVE-2026-17467 Vulnerabilities exists in IBM Cloud Pak for Data System

IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...

8.2CVSS5.8AI score0.00205EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/14 7:39 p.m.•26 views

CVE-2026-17467

IBM Cloud Pak for Data System (Yosemite 1.0) version 3.0.5.2 is affected by a vulnerability (CWE-327) where weak or deprecated cryptographic protocols could allow a remote attacker to obtain sensitive information. The attack vector is network-based with low complexity, requiring no privileges or ...

8.2CVSS5.8AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/14 7:39 p.m.•38 views

CVE-2026-17467 Vulnerabilities exists in IBM Cloud Pak for Data System

IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...

8.2CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/14 7:38 p.m.•23 views

CVE-2026-17628

IBM Langflow OSS versions 1.0.0 through 1.10.2 are affected by improper authentication (CWE-287) in the password reset endpoint. The endpoint accepts a current-password field in the request body but does not verify it against the stored credential before applying the change, and enforces no passw...

5.4CVSS5.8AI score0.00336EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/14 7:38 p.m.•8 views

EUVD-2026-77780

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information through session IP binding bypass in Navigator for i...

5.3CVSS5.8AI score0.00311EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/14 7:38 p.m.•10 views

EUVD-2026-77779

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origin...

4.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/14 7:33 p.m.•10 views

rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure

A flaw was found in rsync. This vulnerability allows a remote attacker to bypass hostname-based access control rules. By inducing DNS resolution failures, the rsync daemon incorrectly skips deny rules, granting unauthorized access to restricted module file trees...

9.1CVSS6.6AI score0.00559EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/14 7:33 p.m.•9 views

rsync: rsync: Denial of Service via Zstandard compression thread exhaustion

A denial-of-service flaw in rsync allows remote attackers to exhaust system memory and CPU. By sending requests using the --zt Zstandard compression alias, an attacker can bypass security directives and spawn an excessive number of worker threads...

8.7CVSS6.7AI score0.00783EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/09/14 5:04 p.m.•11 views

CVE-2026-9672

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression...

8.1CVSS6AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/09/14 4:12 p.m.•14 views

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...

9.1CVSS6.1AI score0.00654EPSS
SaveExploits0References8
Ubuntu
Ubuntu
•added 2026/09/14 12:40 p.m.•10 views

USN-8754-1: Freeciv vulnerability

It was discovered that Freeciv incorrectly handled certain network packets, resulting in a stack overflow. A remote attacker could possibly use this issue to cause Freeciv clients or servers to crash, resulting in a denial of service...

7.5CVSS5.9AI score0.01224EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Service Worker API in Google Chrome prior to version 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

8.1CVSS7.2AI score0.00218EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•7 views

Astra Linux – Vulnerability in Chromium

The use of after-free in web applications in Google Chrome before version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.9AI score0.00231EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.9AI score0.00164EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in Chromium

Before version 94.0.4606.71, using Safebrowsing in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...

8.8CVSS7.9AI score0.01346EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in Chromium

Leakage of side-channel information in Google Chrome’s network internals before version 89.0.4389.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

6.5CVSS6.9AI score0.01603EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

6.5CVSS6.8AI score0.01179EPSS
SaveExploits1References1
Rows per page
Query Builder