Lucene search
+L

16 matches found

Cvelist
Cvelist
•added 2026/10/30 6:53 p.m.•7 views

CVE-2026-59978 AdminNeo: version-cache array injection causes persistent denial of service

AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated ?script=version endpoint accepts POST data without origin, CSRF or parameter-type validation. A version parameter becomes a PHP array that bootstrap.inc.php serializes into the shared...

7.5CVSS
SaveExploits0References3
CVE
CVE
•added 2026/10/30 6:53 p.m.•6 views

CVE-2026-59978

AdminNeo , a PHP-based database management tool, is vulnerable to a Denial of Service (DoS) via an array injection in the ?script=version endpoint. In versions 4.6.2 through 5.5.0 , the application fails to validate the request origin, CSRF tokens, or parameter types. An unauthenticated attacker ...

7.5CVSS6AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/10/30 6:53 p.m.•4 views

EUVD-2026-114329

AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated ?script=version endpoint accepts POST data without origin, CSRF or parameter-type validation. A version parameter becomes a PHP array that bootstrap.inc.php serializes into the shared...

7.5CVSS6AI score
SaveExploits0References3
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•74 views

Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

Summaryglances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity check, signature verification, or format validation is performed before...

7.8CVSS7.6AI score0.0019EPSS
SaveExploits0References6Affected Software1
osv_pysec
osv_pysec
•added 2026/07/13 3:46 p.m.•24 views

PYSEC-2026-2496 Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

Summary glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity check, signature verification, or format validation is performed before...

7.8CVSS7.6AI score0.0019EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•25 views

PT-2026-59160

Summary glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDG CACHE HOME/glances/glances-version.db. No integrity check, signature verification, or format validation is performed before...

7.8CVSS7.6AI score0.0019EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•30 views

Linux Distros Unpatched Vulnerability : CVE-2026-46607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored ...

7.8CVSS7.6AI score0.0019EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/25 7:16 p.m.•31 views

CVE-2026-46607

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...

7.8CVSS0.0019EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/25 7:16 p.m.•20 views

CVE-2026-46607

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...

7.8CVSS7.7AI score0.0019EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/25 6:04 p.m.•89 views

CVE-2026-46607

CVE-2026-46607 describes an insecure deserialization vulnerability in Glances, where a version-check cache file (~/.cache/glances/glances-version.db) is loaded with pickle without validation. An attacker with write access to the cache path can introduce a malicious pickle and achieve arbitrary co...

7.8CVSS7.7AI score0.0019EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/25 6:04 p.m.•16 views

CVE-2026-46607 Glances: Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code Execution

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...

7.8CVSS7.7AI score0.0019EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/06/25 6:04 p.m.•26 views

CVE-2026-46607 Glances: Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code Execution

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...

7.8CVSS6.6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/06/25 6:04 p.m.•25 views

EUVD-2026-39519

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...

7.8CVSS7.7AI score0.0019EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/25 6:04 p.m.•62 views

CVE-2026-46607 Glances: Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code Execution

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity chec...

7.8CVSS0.0019EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/06/22 9:21 p.m.•35 views

Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

Summary glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity check, signature verification, or format validation is performed before...

7.8CVSS7.6AI score0.0019EPSS
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2026/06/22 9:21 p.m.•39 views

GHSA-9837-48HR-Q32J Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

Summary glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity check, signature verification, or format validation is performed before...

7.8CVSS7.6AI score0.0019EPSS
SaveExploits0References7
Rows per page
Query Builder