Lucene search
+L

44579 matches found

osv_ubuntu
osv_ubuntu
•added 2026/08/17 12:00 a.m.•18 views

UBUNTU-CVE-2026-63650

OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...

2CVSS5.9AI score0.00364EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•33 views

PT-2026-73195

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub 44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest macaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploi...

6.6CVSS6.4AI score0.02871EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•32 views

PT-2026-73194

A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A hig...

3.1CVSS4.1AI score0.00265EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2026/08/17 12:00 a.m.•17 views

Apache Tomcat DoS

The vulnerability of FFM-based application server Apache Tomcat connections is related to deficiencies in error handling when checking host keys. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

9.4CVSS6.4AI score0.00586EPSS
SaveExploits0References4Affected Software4
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•29 views

PT-2026-73212

Name of the Vulnerable Software and Affected Versions Webkul Bagisto versions prior to 2.4.5 Description A remote attack is possible due to an issue in the RMA State Validation component. Manipulation of the /customer/account/rma/update-status endpoint leads to the enforcement of a behavioral...

5.3CVSS5.5AI score0.00367EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•25 views

PT-2026-73185

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces 3DGS MDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer...

5.3CVSS5.8AI score0.00368EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•27 views

PT-2026-76884

A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/account/rma/store. The manipulation of the argument rma qty/resolution type/rma reason id results in enforcement of behavioral workflow. The attack may be performed from remote. The...

5.3CVSS5.2AI score0.00367EPSS
SaveExploits0References6
Redos
Redos
•added 2026/08/17 12:00 a.m.•12 views

ROS-20260817-73-0031

The vulnerability of the .NET software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.5CVSS7.4AI score0.01174EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•24 views

PT-2026-73218

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. This issue affects some unknown processing of the file /admin/sales/rma/requests of the component Backend Sales RMA Endpoint. Performing a manipulation results in authorization bypass. The attack is possible to be carried out...

5.8CVSS5.1AI score0.0043EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2026/08/17 12:00 a.m.•17 views

DHCP DoS

The vulnerability of DHCP servers for Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS6.5AI score0.00581EPSS
SaveExploits0References2Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/08/17 12:00 a.m.•13 views

Apache Neethi PolicyReference Unauthorized Access

The vulnerability of the PolicyReference programming interface in the Apache Neethi Java framework is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.2CVSS8.2AI score0.00578EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
•added 2026/08/17 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-19970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file...

7.5CVSS6.5AI score0.00452EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•27 views

PT-2026-73216

A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Handler. This manipulation of the argument Message causes cross site scripting. Remote exploitation of the attack is possible. The...

5.1CVSS4AI score0.00331EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•26 views

PT-2026-73196

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon check session url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and...

10CVSS8.4AI score0.01333EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•24 views

PT-2026-73213

A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/configuration/cache-management/execute of the component Configuration Management. The manipulation of the argument action results in authorization bypass. The attack ma...

6.5CVSS6.1AI score0.00397EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•36 views

PT-2026-73203

Name of the Vulnerable Software and Affected Versions jkawamoto mcp-florence2 versions prior to 0.3.14 Description A flaw in the get images function within the src/mcp florence2/ init .py file allows for server-side request forgery SSRF, a condition where an attacker can induce the server to make...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•31 views

PT-2026-73187

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph 3DGS MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones num results in heap-based buffer...

7.5CVSS6.7AI score0.00452EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•29 views

PT-2026-73184

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

7.5CVSS6.6AI score0.00452EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•21 views

PT-2026-73217

A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to improper privilege management. The attack can be executed...

5.3CVSS5.2AI score0.00379EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/08/17 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-19968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces3DGSMDL7 in the...

5.3CVSS5.8AI score0.00368EPSS
SaveExploits0References4
Rows per page
Query Builder