Lucene search
+L

151372 matches found

Vulnrichment
Vulnrichment
•added 2026/06/16 7:26 p.m.•11 views

CVE-2026-35270

...

9.1CVSS5.8AI score0.00486EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/16 7:26 p.m.•37 views

CVE-2026-35271

...

8.7CVSS0.0034EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/16 7:26 p.m.•65 views

CVE-2026-35261

Technical details for CVE-2026-35261 are not publicly available in the provided documents. Monitor Oracle security alerts and CVE records for updates.

6.5CVSS5.7AI score0.00272EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/06/16 7:26 p.m.•35 views

CVE-2026-35258

...

8.7CVSS0.00326EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/16 6:51 p.m.•56 views

CVE-2026-0156

CVE-2026-0156 describes a memory safety issue in checkSsrcCollisionOnRcv of RtpSession.cpp caused by a missing null check. This could allow remote denial of service without additional execution privileges, and exploitation does not require user interaction. The information appears consistently in...

7.5CVSS6AI score0.00223EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/06/16 6:51 p.m.•51 views

CVE-2026-0144

A memory safety issue exists in the writeAocCommand function within AocAudioCodec.cpp due to a missing bounds check . This vulnerability allows for a remote denial of service (DoS) without requiring additional execution privileges or user interaction. This issue specifically affects the Telephony...

7.5CVSS6AI score0.00268EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/06/16 6:51 p.m.•52 views

CVE-2026-0144

In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00268EPSS
SaveExploits0References1
Veracode
Veracode
•added 2026/06/16 6:38 p.m.•31 views

HTTP Request Smuggling

Netty is vulnerable to HTTP Request Smuggling. The vulnerability is due to HttpObjectDecoder improperly ignoring non-CRLF control characters before the request line, which allows an attacker to create request-boundary confusion between front-end and back-end components and potentially smuggle...

5.3CVSS6.5AI score0.00398EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2026/06/16 5:36 p.m.•135 views

vLLM: OpenAI auth bypass

Summary A vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware, which was discovered during @x41sec's source code audit. It allows to use the API without providing the configured VLLMAPIKEY or...

9.1CVSS7.1AI score0.01152EPSS
SaveExploits0References19Affected Software1
Snyk
Snyk
•added 2026/06/16 5:36 p.m.•34 views

HTTP Request Smuggling

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to HTTP Request Smuggling via improper validation of the Host header in the request scope. An attacker can gain unauthorized access to API endpoints by...

9.1CVSS6.9AI score0.01152EPSS
SaveExploits0References2
osv_mini
osv_mini
•added 2026/06/16 5:23 p.m.•15 views

MINI-RGR3-7G46-RHJ6

Bulletin has no description...

7.5CVSS7.2AI score0.0046EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/06/16 5:23 p.m.•13 views

MINI-3FXH-XM8M-WRF5

Bulletin has no description...

8.7CVSS7.2AI score0.00539EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/06/16 2:28 p.m.•19 views

MINI-WPFF-9J7X-PV2W

Bulletin has no description...

7.5CVSS7.2AI score0.00669EPSS
SaveExploits0
osv_usn
osv_usn
•added 2026/06/16 2:27 p.m.•28 views

USN-8435-1 squid vulnerabilities

It was discovered that Squid incorrectly handled FTP gateway processing under certain circumstances, which could result in an out-of-bounds read. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information...

6.5CVSS6.6AI score0.01503EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/06/16 2:20 p.m.•28 views

EUVD-2026-37122

An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication...

8.8CVSS5.3AI score0.00435EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/16 2:10 p.m.•47 views

CVE-2026-48780 Forem vulnerable to bypass of email address domain restrictions

Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The issue is patched as of a2ab6d4. As a workaround,...

8.2CVSS0.0037EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2026/06/16 1:45 p.m.•27 views

USN-8433-1: OpenStack Keystone vulnerabilities

It was discovered that OpenStack Keystone allowed restricted application credentials to create EC2 credentials. An authenticated attacker with only a reader role could possibly use this issue to bypass the role restrictions imposed on the application credential. CVE-2026-33551 It was discovered...

8.8CVSS6AI score0.00587EPSS
SaveExploits6
osv_debian
osv_debian
•added 2026/06/16 1:16 p.m.•12 views

DEBIAN-CVE-2026-12310

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

7.5CVSS7.3AI score0.00252EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/06/16 1:16 p.m.•11 views

DEBIAN-CVE-2026-12309

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

6.5CVSS6.7AI score0.00235EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/06/16 1:16 p.m.•17 views

DEBIAN-CVE-2026-12299

JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

5.4CVSS6.1AI score0.00306EPSS
SaveExploits0References1
Rows per page
Query Builder