Lucene search
+L

96962 matches found

osv_azl
osv_azl
•added 2026/09/30 5:16 a.m.•17 views

AZL-105882 CVE-2026-103111 affecting package rust 1.98.1-1

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.7AI score0.00269EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/30 5:16 a.m.•15 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.5AI score0.00269EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/09/30 5:16 a.m.•31 views

UBUNTU-CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.7AI score0.00269EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/30 4:13 a.m.•65 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS0.00269EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 4:13 a.m.•163 views

CVE-2026-103111

The PCRE2 library, specifically versions prior to 10.49 , is vulnerable to an out-of-bounds write with arbitrary data. This flaw occurs when an application processes attacker-controlled regular expressions using specific Just-In-Time (JIT) compiler interfaces . A successful exploit could allow an...

7.6CVSS7.7AI score0.00269EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/30 4:13 a.m.•27 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.7AI score0.00269EPSS
SaveExploits0References4
Mend
Mend
•added 2026/09/30 4:13 a.m.•14 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.7AI score0.00269EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/30 4:13 a.m.•19 views

EUVD-2026-89608

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.7AI score0.00269EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 4:13 a.m.•13 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.7AI score0.00269EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/30 4:13 a.m.•33 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.7AI score0.00269EPSS
SaveExploits0
NVD
NVD
•added 2026/09/30 3:16 a.m.•24 views

CVE-2026-103102

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client...

8.6CVSS0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 2:29 a.m.•44 views

CVE-2026-103102

Pexip Infinity versions prior to 41.0 are vulnerable to a denial of service (DoS) condition due to improper input validation within the signaling implementation . A remote attacker can trigger a software abort by accessing a gateway call from a WebRTC/API client . No specific remediation or explo...

8.6CVSS6AI score0.0032EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/30 2:29 a.m.•20 views

EUVD-2026-89578

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client...

8.6CVSS6AI score0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 2:29 a.m.•38 views

CVE-2026-103102

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client...

8.6CVSS0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 2:29 a.m.•13 views

CVE-2026-103102

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client...

8.6CVSS6AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/30 1:16 a.m.•19 views

CVE-2026-103053

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOCDEVMODE is enabled and AISOCACTIONSSERVICETOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve...

5.4CVSS0.00368EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/30 12:59 a.m.•23 views

grafana: grafana: Authorization bypass via missing destination folder permission check

A flaw was found in Grafana. The application fails to verify creation permissions on destination folders during panel update operations. An authenticated user with edit permissions in one folder can exploit this vulnerability through the library elements API to move a library panel into a folder...

4.3CVSS5.7AI score0.00198EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/30 12:32 a.m.•16 views

EUVD-2026-89534

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of the argument url leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

9.4CVSS5.8AI score0.02362EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/30 12:19 a.m.•39 views

CVE-2026-103053

AiSOC versions 9.0.0 before 12.0.0 are vulnerable to an authentication bypass in the response-action API endpoints . This flaw occurs when AISOC_DEV_MODE is enabled and the AISOC_ACTIONS_SERVICE_TOKEN is empty within a default Docker Compose deployment. An unauthenticated attacker can exploit thi...

5.4CVSS6AI score0.00368EPSS
SaveExploits0References5
Mend
Mend
•added 2026/09/30 12:19 a.m.•10 views

CVE-2026-103053

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOCDEVMODE is enabled and AISOCACTIONSSERVICETOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve...

5.4CVSS6AI score0.00368EPSS
SaveExploits0References8
Rows per page
Query Builder