Lucene search
+L

54135 matches found

Positive Technologies
Positive Technologies
•added 2026/01/14 12:00 a.m.•20 views

PT-2026-2575

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.1CVSS7AI score0.00093EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2026/01/14 12:00 a.m.•6 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2026-1044)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.8AI score0.00399EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•16 views

MiracleLinux 3 : ruby-1.8.5-5.7.1AXS3 (AXSA:2009-78:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-78:01 advisory. Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system...

6.8CVSS6.3AI score0.12775EPSS
SaveExploits4References4
OpenVAS
OpenVAS
•added 2026/01/14 12:00 a.m.•10 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2026-1023)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.8AI score0.00399EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•2 views

CVE-2025-68970: Improper Input Validation

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.1CVSS5.9AI score0.00093EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•15 views

MiracleLinux 3 : php-5.1.6-24.5.1.AXS3 (AXSA:2010-78:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-78:01 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers...

9.3CVSS6.8AI score0.12041EPSS
SaveExploits8References7
Positive Technologies
Positive Technologies
•added 2026/01/14 12:00 a.m.•35 views

PT-2026-2569

Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability...

6.2CVSS6.9AI score0.00104EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
•added 2026/01/14 12:00 a.m.•10 views

Diffusion-Driven Deceptive Patches: Adversarial Manipulation and Forensic Detection in Facial Identity Verification

This work presents an end-to-end pipeline for generating, refining, and evaluating adversarial patches to compromise facial biometric systems, with applications in forensic analysis and security testing. We utilize FGSM to generate adversarial noise targeting an identity classifier and employ a...

6.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•2 views

CVE-2025-68959: Exposure of Sensitive Information to an Unauthorized Actor

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.2CVSS5.9AI score0.00097EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•6 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001375 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in writeextentbuffer when mounting and operating a crafted btrfs image,...

7.1CVSS6.6AI score0.02479EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•8 views

MiracleLinux 4 : tigervnc-1.0.90-0.15.20110314svn4359.AXS4.1 (AXSA:2011-641:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-641:01 advisory. Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is runnin...

5.8CVSS7.6AI score0.0129EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-71120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: svcauthgss: avoid NULL deref on zero length gsstoken in gssreadproxyverf A zero length gsstoken results in pages == 0 and intoken-pages0 is NULL. The co...

7.5CVSS6.4AI score0.00484EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•5 views

MiracleLinux 3 : gnutls-1.4.1-3.1.1AXS3 (AXSA:2008-493:03)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2008-493:03 advisory. Description : GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library...

5.9CVSS6.5AI score0.01882EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/13 10:53 p.m.•13 views

CVE-2026-22250

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted URLs. This vulnerability is fixed in 1.17.0...

5.5CVSS6.8AI score0.00156EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/13 10:52 p.m.•16 views

CVE-2026-22794

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the email link baseUrl without validation. If an attacker controls the Origin, password reset / email verification links in emails can be...

9.6CVSS7.1AI score0.00391EPSS
SaveExploits3References1
Snyk
Snyk
•added 2026/01/13 9:55 p.m.•12 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/eth/fetcher t...

7.5CVSS6.8AI score0.00634EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/13 9:55 p.m.•10 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/crypto/ecies ...

7.5CVSS6.8AI score0.00634EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/13 9:55 p.m.•6 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/core/txpool t...

7.5CVSS6.8AI score0.00634EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/13 9:55 p.m.•8 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/crypto/ecies ...

7.5CVSS6.8AI score0.00708EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/13 9:55 p.m.•7 views

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the handling of failed KZG verification for p2p messages. An attacker can cause a node to shut down or crash by sending a specially crafted message. Remediation Upgrade github.com/ethereum/go-ethereum/eth/fetcher t...

7.5CVSS6.8AI score0.00708EPSS
SaveExploits0References2
Rows per page
Query Builder