Lucene search
+L

7166 matches found

Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.9 views

Oracle Essbase (July 2026 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the July 2026 Critical Patch Update CPU. It is, therefore, affected by: - Apache Log4j's JsonTemplateLayout, in versions up to and including 2.25.3, produces invalid JSON output when log events contain...

6.3CVSS6.4AI score0.00756EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/07/22 10:22 p.m.14 views

EUVD-2026-42269

n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation...

8.8CVSS5.7AI score0.00314EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/22 9:18 p.m.8 views

CVE-2026-63281

Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries...

4.8CVSS0.00142EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/22 8:41 p.m.7 views

CVE-2026-64795

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’...

5.2AI score0.00133EPSS
SaveExploits0References2Affected Software5
EUVD
EUVD
added 2026/07/22 8:41 p.m.7 views

EUVD-2026-47808

Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers...

5.4AI score0.00133EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/22 8:41 p.m.22 views

CVE-2026-64795

CVE-2026-64795 concerns Joomla extensions by Regular Labs. The issue is: XSS through tag-provided inputs (custom HTML, module/content/title overrides, and decoded modal/tooltip values) that could allow a content author to inject JavaScript executed in visitors’ browsers. Affected products are Reg...

5.4CVSS6AI score0.00133EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/22 8:41 p.m.34 views

CVE-2026-64795 Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’...

0.00133EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 8:40 p.m.10 views

EUVD-2026-47806

Stored condition values could also execute HTML/JavaScript in administrator summaries...

5.4AI score0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/22 8:40 p.m.36 views

CVE-2026-63281 Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager

Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries...

0.00142EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/22 8:40 p.m.5 views

CVE-2026-63281

Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries...

5.2AI score0.00142EPSS
SaveExploits0References2Affected Software4
CVE
CVE
added 2026/07/22 8:40 p.m.15 views

CVE-2026-63281

CVE-2026-63281 concerns a stored XSS in the Joomla extension from Regular Labs (conditions manager). The vulnerability allows stored condition values to render HTML/JavaScript in administrator summaries, enabling possible script execution within admin interfaces. Documented impact is limited to X...

4.8CVSS6AI score0.00142EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 4:14 p.m.8 views

EUVD-2026-47745

Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other users' resources by supplying arbitrary UUID values to tRPC API procedures including project.get, member.remove, and...

8.8CVSS5.5AI score0.003EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/22 1:11 p.m.6 views

USN-8586-1 libgphoto2 vulnerabilities

It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing EOS image format data. An attacker with physical access could possibly use this issue to obtain sensitive information. CVE-2026-40333 It was discovered that libgphoto2 did not properly null-terminate buffer...

6.1CVSS5.2AI score0.00218EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/22 11:21 a.m.6 views

CVE-2026-65589 n8n before 1.123.64 Credential Exposure via LLM Node Execution Data

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...

5.1CVSS5.6AI score
SaveExploits0References4
OSV
OSV
added 2026/07/22 8:35 a.m.3 views

OPENSUSE-SU-2026:21410-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvstupleisnormal alignment validation could cause a 1-byte out-of-bounds read bsc1270009. - CVE-2026-58011: invalid GDateTime in gdatetimegetymd could trigger a 2-byte out-of-bounds read bsc1270010. - CVE-2026-58012:...

9.1CVSS5.9AI score0.00511EPSS
SaveExploits6References12
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.13 views

PT-2026-63498

Name of the Vulnerable Software and Affected Versions Regular Labs conditions manager affected versions not specified Description Stored condition values can be used to execute malicious HTML or JavaScript within administrator summaries. This is a Cross-Site Scripting XSS issue, where a script is...

4.8CVSS6AI score0.00142EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/21 10:19 p.m.6 views

CVE-2026-62447

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...

8.8CVSS0.00389EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:18 p.m.6 views

CVE-2026-60875

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...

8.1CVSS0.00326EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/21 9:27 p.m.23 views

CVE-2026-43946 FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist. Version 1.3.1 patches the issue...

8.7CVSS0.00542EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/21 6:18 p.m.11 views

Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

Summary The AWS API Gateway v1 adapter can drop a distinct repeated request header value. When a header appears multiple times, the adapter de-duplicates values using a substring comparison instead of an exact match, so a value that is a substring of another value of the same header is omitted fo...

5.3CVSS5.4AI score0.00126EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder