Lucene search
K

14191 matches found

Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.3 views

PT-2026-3949

Name of the Vulnerable Software and Affected Versions Dell Unisphere for PowerMax versions 10.2.0.x Description Dell Unisphere for PowerMax versions 10.2.0.x contain an Improper Neutralization of Special Elements used in an SQL Command vulnerability, also known as 'SQL Injection'. A low privilege...

8.8CVSS5.6AI score0.0004EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.3 views

Azure Linux 3.0 Security Update: pytorch (CVE-2024-7776)

The version of pytorch installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-7776 advisory. - A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16....

9.1CVSS6AI score0.0526EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-47853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpPgAdmin 7.13.0 contains a remote command execution vulnerability that allows authenticated attackers to execute arbitrary system commands through SQL query...

6.3AI score0.00262EPSS
Exploits0References3
NVD
NVD
added 2026/01/21 9:16 p.m.4 views

CVE-2026-22792

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML including on event attributes to execute in the renderer context. An attacker can inject an payload to run arbitrary...

9.6CVSS0.00623EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/01/21 8:54 p.m.4 views

CVE-2026-22792 5ire vulnerable to Remote Code Execution (RCE)

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML including on event attributes to execute in the renderer context. An attacker can inject an payload to run arbitrary...

9.6CVSS6AI score0.00623EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2026/01/21 6:30 p.m.7 views

phpPgAdmin contains a remote command execution vulnerability

phpPgAdmin 7.13.0 contains a remote command execution vulnerability that allows authenticated attackers to execute arbitrary system commands through SQL query manipulation. Attackers can create a custom table, upload a malicious .txt file, and use the COPY FROM PROGRAM command to execute operatin...

6.3AI score0.00262EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2026/01/21 6:30 p.m.3 views

GHSA-86GH-C8R8-XWHQ phpPgAdmin contains a remote command execution vulnerability

phpPgAdmin 7.13.0 contains a remote command execution vulnerability that allows authenticated attackers to execute arbitrary system commands through SQL query manipulation. Attackers can create a custom table, upload a malicious .txt file, and use the COPY FROM PROGRAM command to execute operatin...

8.8CVSS6.4AI score0.00262EPSS
Exploits0References5
NVD
NVD
added 2026/01/21 6:16 p.m.6 views

CVE-2021-47853

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00262EPSS
Exploits0
OSV
OSV
added 2026/01/21 6:16 p.m.6 views

DEBIAN-CVE-2021-47853

phpPgAdmin 7.13.0 contains a remote command execution vulnerability that allows authenticated attackers to execute arbitrary system commands through SQL query manipulation. Attackers can create a custom table, upload a malicious .txt file, and use the COPY FROM PROGRAM command to execute operatin...

8.8CVSS6.5AI score0.00262EPSS
Exploits0References1
OSV
OSV
added 2026/01/21 6:16 p.m.1 views

CVE-2021-47817

OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript through user profile parameters. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enabling remote command...

5.4CVSS5.5AI score
Exploits0References6
UbuntuCve
UbuntuCve
added 2026/01/21 6:16 p.m.5 views

CVE-2021-47853

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.7AI score0.00262EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/21 5:27 p.m.4 views

EUVD-2026-3636

phpPgAdmin 7.13.0 contains a remote command execution vulnerability that allows authenticated attackers to execute arbitrary system commands through SQL query manipulation. Attackers can create a custom table, upload a malicious .txt file, and use the COPY FROM PROGRAM command to execute operatin...

8.8CVSS6.5AI score0.00262EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2026/01/21 5:27 p.m.5 views

CVE-2021-47853

Removed by vendor...

5.9AI score0.00262EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/01/21 5:27 p.m.4 views

CVE-2021-47853

...

5.9AI score0.00262EPSS
Exploits0
CVE
CVE
added 2026/01/21 5:27 p.m.4 views

CVE-2021-47853

phpPgAdmin 7.13.0 is affected by a remote command execution vulnerability described in Red Hat CVE-2021-47853, where an authenticated attacker can manipulate SQL queries to run arbitrary operating system commands via COPY FROM PROGRAM after creating a table and uploading a crafted .txt file. This...

6.5AI score0.00262EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/01/21 5:27 p.m.1 views

CVE-2021-47817

OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enablin...

5.4CVSS6.2AI score0.0003EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2026/01/21 5:27 p.m.2 views

EUVD-2026-3618

OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript through user profile parameters. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enabling remote command...

5.4CVSS5.4AI score0.0003EPSS
Exploits1References8
EUVD
EUVD
added 2026/01/21 5:27 p.m.2 views

EUVD-2026-3655

OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...

8.8CVSS6.5AI score0.00426EPSS
Exploits0References6
OSV
OSV
added 2026/01/21 5:16 p.m.2 views

CVE-2026-20045

A vulnerability in Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could...

9.8CVSS6.1AI score0.03019EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/01/21 12:0 a.m.3 views

PT-2026-3795

Name of the Vulnerable Software and Affected Versions OpenPLC version 3 Description The software contains an authenticated remote code execution issue. An attacker with valid credentials can inject malicious code through the hardware configuration interface. This allows for the upload of a custom...

8.8CVSS6.5AI score0.00426EPSS
Exploits0References6
Rows per page
Query Builder