|
501
|
- |
|
-
|
-
|
MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and se…
|
CWE-89
SQL Injection
|
CVE-2026-44172
|
2026-06-13 03:16 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
502
|
6.3 |
MEDIUM
Local
|
-
|
-
|
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstre…
|
CWE-22
Path Traversal
|
CVE-2026-44171
|
2026-06-13 03:16 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
503
|
- |
|
-
|
-
|
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaD…
|
CWE-78
OS Command
|
CVE-2026-44170
|
2026-06-13 03:16 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
504
|
4.3 |
MEDIUM
Network
|
-
|
-
|
MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role…
|
CWE-863
Incorrect Authorization
|
CVE-2026-44169
|
2026-06-13 03:16 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
505
|
8.0 |
HIGH
Network
|
-
|
-
|
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during…
|
CWE-78
OS Command
|
CVE-2026-44168
|
2026-06-13 03:16 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
506
|
7.1 |
HIGH
Local
|
-
|
-
|
A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. The `_get_versioned_path()` method in `kedro/io/core.py` directly interpolat…
|
CWE-22
Path Traversal
|
CVE-2026-3840
|
2026-06-13 03:16 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
507
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploit…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-35273
|
2026-06-13 03:16 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
508
|
3.3 |
LOW
Local
|
-
|
-
|
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to …
|
CWE-200
CWE-284
Information Exposure
Improper Access Control
|
CVE-2026-11459
|
2026-06-13 03:16 |
2026-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
509
|
8.8 |
HIGH
Network
|
siemens
|
sinec_ins
|
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input in the /api/sftp/uploadFiles endpoint, allowing the injectio…
|
CWE-78
OS Command
|
CVE-2026-46746
|
2026-06-13 03:08 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
510
|
6.5 |
MEDIUM
Network
|
devolutions
|
devolutions_server
|
Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Server allows an authenticated user with write access to a vault to execute arbitra…
|
CWE-78
OS Command
|
CVE-2026-10544
|
2026-06-13 03:07 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
