Lucene search
+L

8570 matches found

Cvelist
Cvelist
•added 2026/09/23 4:06 p.m.•66 views

CVE-2026-96655 Plex Media Server arbitrary-host SSRF

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter...

5.3CVSS0.00455EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/09/23 4:06 p.m.•23 views

CVE-2026-96655 Plex Media Server arbitrary-host SSRF

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter...

5.3CVSS7.6AI score0.00455EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/09/23 4:06 p.m.•20 views

EUVD-2026-85369

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter...

5.3CVSS7.7AI score0.00455EPSS
SaveExploits1References4
CVE
CVE
•added 2026/09/23 4:06 p.m.•58 views

CVE-2026-96655

Plex Media Server versions prior to 1.43.3.10861 are vulnerable to a Server-Side Request Forgery (SSRF) flaw (CWE-918). An authenticated user can leverage the /video/:/transcode/universal path parameter to force the server to request arbitrary internal or external addresses. This vulnerability is...

5.3CVSS7.6AI score0.00455EPSS
SaveIn wildExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•31 views

CVE-2026-96655: Server-Side Request Forgery (SSRF)

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter...

5.3CVSS7.7AI score0.00455EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•16 views

PT-2026-97405

Name of the Vulnerable Software and Affected Versions Plex Media Server versions prior to 1.43.3.10861 Description An authenticated user can perform a Server-Side Request Forgery SSRF, which occurs when a server is tricked into making requests to an unintended location. This is possible by...

5.3CVSS7.6AI score0.00455EPSS
SaveExploits1References33
CNNVD
CNNVD
•added 2026/09/22 4:00 p.m.•5 views

Plex Media Server server-side request forgeing vulnerability

Versions of Plex Media Server prior to 1.43.3.10861 have a vulnerability related to server-side request forgery. This vulnerability stems from improper handling of the '/video/:/transcode/universal' path parameter. It may allow authenticated users to request arbitrary internal or external...

5.3CVSS7.7AI score0.00455EPSS
SaveExploits1References5
NVD
NVD
•added 2026/09/18 8:17 p.m.•15 views

CVE-2026-84071

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...

7.2CVSS0.01452EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 7:45 p.m.•18 views

EUVD-2026-83421

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...

7.2CVSS6.2AI score0.01452EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 7:45 p.m.•18 views

CVE-2026-84071 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...

7.2CVSS6.2AI score0.01452EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 7:45 p.m.•48 views

CVE-2026-84071 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...

7.2CVSS0.01452EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 7:45 p.m.•23 views

CVE-2026-84071

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can supply a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbit...

7.2CVSS6.2AI score0.01452EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•12 views

PT-2026-95676

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An OS command injection flaw exists in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a...

7.2CVSS6.2AI score0.01452EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•9 views

CVE-2026-84071: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...

7.2CVSS6.2AI score0.01452EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/17 6:42 p.m.•43 views

CVE-2026-19477 Stack-based Buffer Overflow Vulnerability in Linux (uldaq)

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux uldaq. This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux uldaq v1.2.1 and prior versions...

8.6CVSS8AI score0.00141EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/17 6:42 p.m.•48 views

CVE-2026-19477 Stack-based Buffer Overflow Vulnerability in Linux (uldaq)

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux uldaq. This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux uldaq v1.2.1 and prior versions...

8.6CVSS0.00141EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/17 6:42 p.m.•37 views

CVE-2026-19477

A stack-based buffer overflow was identified in MCC Universal Library for Linux (uldaq) , a library used for MCC data acquisition on Linux, affecting version 1.2.1 and prior . The flaw can lead to information disclosure or arbitrary code execution with a local attack vector, low complexity, and n...

8.6CVSS8AI score0.00141EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/17 6:42 p.m.•18 views

EUVD-2026-82395

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux uldaq. This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux uldaq v1.2.1 and prior versions...

8.6CVSS8AI score0.00141EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•20 views

PT-2026-95059

Name of the Vulnerable Software and Affected Versions MCC Universal Library for Linux uldaq versions prior to 1.2.1 Description A stack-based buffer overflow exists in the library, which can lead to arbitrary code execution or information disclosure. A stack-based buffer overflow occurs when a...

8.6CVSS8.2AI score0.00141EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•7 views

CVE-2026-19477: Stack-based Buffer Overflow

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux uldaq. This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux uldaq v1.2.1 and prior versions...

8.6CVSS8AI score0.00141EPSS
SaveExploits0References2
Rows per page
Query Builder