Lucene search
+L

347572 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106191 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server:...

4.4CVSS6.7AI score0.00353EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106165 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...

4.4CVSS6.7AI score0.00253EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106203)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106203 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

6.2CVSS6.8AI score0.00194EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106184 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

4.4CVSS6.7AI score0.00353EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106212 advisory. An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via...

7.5CVSS7AI score0.004EPSS
SaveExploits1References4
Packet Storm
Packet Storm
added 2026/09/04 12:00 a.m.15 views

...[ More ]

Eclipse Paho MQTT C Client contains a heap use-after-free vulnerability in the synchronous MQTT client libpaho-mqtt3c when handling incoming PUBLISH messages with retry semantics. When a user-supplied messageArrived callback frees the received message and returns 0 indicating processing failure a...

6.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106177 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Performance Schema. Supported versions that are affected are MySQL Server...

2.7CVSS6.7AI score0.00259EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-84963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently...

6.3CVSS6.3AI score0.00186EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2026/09/04 12:00 a.m.15 views

lighttpd 2.0.0 Out-Of-Bounds Access

A signedness vulnerability exists in the lichunkqueueappendmem function in lighttpd2, where a signed length parameter gssize len is not properly validated before being used in memory operations that expect an unsigned size. When a negative length value is supplied, it is implicitly converted to a...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106200 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10...

6.5CVSS6.8AI score0.00416EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.13 views

PT-2026-85528

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

6.9CVSS5.5AI score0.00509EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.12 views

PT-2026-85700

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component...

5.4AI score0.00221EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.11 views

PT-2026-85521

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert user is admin if user query param is provided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes imprope...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.9 views

PT-2026-86234

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join room of the file core/sockets.py of the component Admin Endpoint. The manipulation results in missing authentication. The attack may be launched remotely. The exploit has been released to th...

6.9CVSS5.4AI score0.00429EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/09/04 12:00 a.m.3 views

CVE-2026-71625

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

0.00206EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.12 views

PT-2026-85426

Name of the Vulnerable Software and Affected Versions Canva Android App versions prior to 2.376.0 Description The application failed to restrict headers returned to an external origin operating within a privileged WebView. A WebView is a system component that allows Android apps to display web...

8.8CVSS5.3AI score0.00234EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/09/04 12:00 a.m.4 views

The vulnerability of the pipapo Drop() function in the net/netfilter/nft_set_pipapo.c module of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the pipapo Drop function in the net/netfilter/nftsetpipapo.c module of the netfilter component in the Linux operating system’s kernel is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.1CVSS6.8AI score0.00126EPSS
SaveExploits0References13Affected Software3
Cvelist
Cvelist
added 2026/09/04 12:00 a.m.28 views

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

0.00249EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/04 12:00 a.m.30 views

CVE-2026-78970

JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access multiple API endpoints including queryAllUser, queryUsersByUsernames, queryUserById, and queryUsersByIds to retrieve...

0.00346EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/04 12:00 a.m.6 views

EUVD-2026-71746

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...

5.7AI score0.00173EPSS
SaveExploits0References1
Rows per page
Query Builder