Lucene search
K

12 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-6841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Request Tracker is vulnerable to a reflected cross-site scripting XSS vulnerability via the Page parameter in GET requests. An attacker can craft a URL that, wh...

6.1CVSS5.6AI score0.00038EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/21 11:49 a.m.3 views

CVE-2026-6841 Reflected XSS in Request Tracker

Request Tracker is vulnerable to a reflected cross-site scripting XSS vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary JavaScript execution in the victim’s browser. This vulnerability affects versions from 5.0.4 up to 5.0....

5.1CVSS5.9AI score0.00038EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/17 7:22 p.m.3 views

EUVD-2026-23496

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-supplied engine name into a filesystem path without filtering path separators or .. components. An authenticated user with CREATE...

9.9CVSS6.2AI score0.00148EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/04/17 6:38 p.m.23 views

CVE-2026-28224 Firebird Null Pointer Dereference via CryptCallback causes DOS

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when the server receives an opcryptkeycallback packet without prior authentication, the portservercryptcallback handler is not initialized, resulting in a null pointer dereference and...

8.2CVSS0.00586EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.1 views

PT-2026-33476

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT specific data segments during authentication, the server assumes segments arrive in strictly ascending order. If segments arrive out of order, the Array class's gro...

8.2CVSS5.7AI score0.00584EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-28214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize function can...

6.5CVSS5.8AI score0.00072EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-33337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when deserializing a slice packet, the xdrdatum...

7.5CVSS5.9AI score0.00127EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.2 views

PT-2026-26595

CVE-2024-32537 Cross-Site request forgery CSRF vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This issue affects Flash Video Player: from n/a th… https://t.co/Iem5zgox96...

7.1CVSS5.8AI score0.00006EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.2 views

Request Tracker 安全漏洞

Request Tracker is an issue and work order tracking system from Request Tracker, Inc. A security vulnerability exists in Request Tracker versions 5.0.4 through 5.0.8 and 6.0.0 through 6.0.1, which stems from a failure of the calendar invitation parsing feature to clean up HTML, which could lead t...

5.3CVSS5.7AI score0.0015EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/05/14 3:23 a.m.17 views

Dolibarr Cross-Site Scripting (XSS) vulnerability

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...

5.4CVSS6.2AI score0.00185EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2021/03/19 5:15 a.m.1 views

DEBIAN-CVE-2020-25097

An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the security controls. This occurs for certain uriwhitespace configuration settings...

8.6CVSS7.9AI score0.00583EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2019/10/15 12:0 a.m.3 views

PT-2019-4014 · Palo Alto · Palo Alto Globalprotect Agent For Macos +1

Name of the Vulnerable Software and Affected Versions: Palo Alto GlobalProtect Agent for Linux versions 5.0.4 and earlier Palo Alto GlobalProtect Agent for Linux versions 4.1.12 and earlier Palo Alto GlobalProtect Agent for MacOS versions 5.0.4 and earlier Palo Alto GlobalProtect Agent for MacOS...

7.1CVSS6.8AI score0.0004EPSS
Exploits0References4
Rows per page
Query Builder