Lucene search
+L

40596 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-88167

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...

8.8CVSS5.8AI score0.00468EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/09/08 12:00 a.m.•39 views

KLA91266 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

6.3AI score
SaveExploits0References663
OSV
OSV
•added 2026/09/05 6:03 a.m.•13 views

ROOT-OS-UBUNTU-2404-CVE-2026-52953 CVE-2026-52953 in linux - Patched by Root

Root has patched CVE-2026-52953 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

7.1CVSS5.4AI score0.00169EPSS
SaveExploits0
OSV
OSV
•added 2026/09/05 6:03 a.m.•7 views

ROOT-OS-UBUNTU-2404-CVE-2025-37812 CVE-2025-37812 in linux - Patched by Root

Root has patched CVE-2025-37812 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.5CVSS6.5AI score0.00156EPSS
SaveExploits0
OSV
OSV
•added 2026/09/05 6:03 a.m.•10 views

ROOT-OS-UBUNTU-2404-CVE-2025-23156 CVE-2025-23156 in linux - Patched by Root

Root has patched CVE-2025-23156 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

7.1CVSS6.6AI score0.00214EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/04 12:00 a.m.•13 views

Fedora 43 : cockpit (2026-edff423bf7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-edff423bf7 advisory. Automatic update for cockpit-367-1.fc43. Changelog for cockpit Thu Aug 27 2026 Packit - 367-1 - Translation updates Tenable has extracted the preceding...

7.5CVSS6AI score0.00608EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/03 4:36 a.m.•18 views

Important: Red Hat Security Advisory: Submariner v0.24 security fixes and container updates

Submariner v0.24 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

9.1CVSS6.5AI score0.01357EPSS
SaveExploits1References14
NVD
NVD
•added 2026/09/02 4:17 p.m.•14 views

CVE-2026-84650

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...

8.8CVSS0.00468EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•16 views

EUVD-2026-70116

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...

8.8CVSS5.8AI score0.00468EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 3:40 p.m.•7 views

CVE-2026-84650

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...

5.8AI score0.00468EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/02 3:40 p.m.•9 views

CVE-2026-84650

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...

8.8CVSS5.8AI score0.00468EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 3:40 p.m.•38 views

CVE-2026-84650

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...

0.00468EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/02 11:30 a.m.•12 views

Important: Red Hat Security Advisory: OpenShift Virtualization v4.14 Images

Red Hat OpenShift Virtualization release v4.14 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

7.7CVSS5.8AI score0.00567EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•0 views

CVE-2026-84650: Deserialization of Untrusted Data

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...

8.8CVSS5.8AI score0.00468EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•21 views

PT-2026-84621

The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with the Author role and above to modify the SEO metadata of terms they cannot edit...

5.8AI score0.00281EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•21 views

PT-2026-84773

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...

8.8CVSS5.8AI score0.00468EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•0 views

CVE-2026-77787: Missing Authorization

The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with the Author role and above to modify the SEO metadata of terms they cannot edit...

2.7CVSS5.8AI score0.00281EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/02 12:00 a.m.•11 views

Fedora 44 : cockpit (2026-4ca90cfeb9)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4ca90cfeb9 advisory. Automatic update for cockpit-367-1.fc44. Changelog for cockpit Thu Aug 27 2026 Packit - 367-1 - Translation updates Tenable has extracted the preceding...

7.5CVSS5.9AI score0.00608EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/01 5:55 p.m.•17 views

python-tuf v7.0.1

A Framework for Securing Software Update Systems The Update Framework TUF is a framework for secure content delivery and updates. It protects against various types of supply chain attacks and provides resilience to compromise. This repository is a reference implementation written in Python. It is...

5.9AI score
SaveExploits0References17
Kitploit
Kitploit
•added 2026/08/31 4:38 p.m.•13 views

GhostESP v2.1.2-pre2

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

6AI score
SaveExploits0References36
Rows per page
Query Builder