Lucene search
+L

223700 matches found

AstraLinux
AstraLinux
added 2026/07/23 11:4 a.m.5 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00202EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/23 11:4 a.m.5 views

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Low...

8.8CVSS6AI score0.00187EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/23 11:4 a.m.6 views

Astra Linux – Vulnerability in Chromium

In Google Chrome, before version 150.0.7871.47, races in DataTransfer allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.9AI score0.0021EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/23 11:4 a.m.5 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.9AI score0.00152EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/23 11:4 a.m.6 views

Astra Linux – Vulnerability in Chromium

A stack buffer overflow in Skia in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to potentially exploit stack corruption through a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.5AI score0.00352EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/07/23 11:4 a.m.7 views

Astra Linux – Vulnerability in Chromium

In V8, reading out of bounds in Google Chrome before version 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00229EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/23 11:4 a.m.6 views

Astra Linux – Vulnerability in Chromium

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS6AI score0.0039EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/23 11:4 a.m.5 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control through a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00216EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/07/23 10:23 a.m.70 views

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 Exploit Configuration for realme RMX3888 D...

7.8CVSS7.1AI score0.00725EPSS
SaveExploits54
GithubExploit
GithubExploit
added 2026/07/23 9:29 a.m.68 views

Exploit for CVE-2026-64600

cve-id Donate Support the maintenance of this project wit...

5.8AI score0.00507EPSS
SaveExploits6
EUVD
EUVD
added 2026/07/23 8:34 a.m.10 views

EUVD-2026-47927

The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input sanitization and output escaping in the lpageryaddfiltertexttemplatepost function, which is hooked to adminfooter and echoes the...

6.4CVSS5.6AI score0.00243EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/23 8:31 a.m.8 views

openjdk: OpenJDK: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

7.5CVSS7.2AI score0.00463EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/07/23 7:47 a.m.75 views

Exploit for Use After Free in Linux Linux_Kernel

Aristotle ADB Enable A minimal Android app that turns on AD...

7.8CVSS6.8AI score0.00725EPSS
SaveExploits54
RedHat Linux
RedHat Linux
added 2026/07/23 3:49 a.m.7 views

openjdk: OpenJDK: Enhance XBM image support (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The regex defined in XbmImageDecoder matchRegex is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking...

5.3CVSS7.2AI score0.00305EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/07/23 3:49 a.m.76 views

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

6.5CVSS6.8AI score0.88411EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/07/23 3:49 a.m.82 views

Apache Tika < 1.1.8 - Header Command Injection

Apache Tika versions 1.7 to 1.17 allow clients to send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. i...

9.3CVSS7.7AI score0.93972EPSS
SaveExploits10References5
Cvelist
Cvelist
added 2026/07/23 1:15 a.m.39 views

CVE-2026-16653 boazsegev facil.io Public Folder http.c http_sendfile2 path traversal

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function httpsendfile2 of the file lib/facil/http/http.c of the component Public Folder Handler. Performing a manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit...

6.9CVSS0.0048EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/23 12:16 a.m.11 views

CVE-2026-16632

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocketonprotocolerror in the library lib/facil/http/parsers/websocketparser.h of the component WebSocket Frame Parser. This manipulation of the argument onmessage causes improper input validation. The attack can ...

7.5CVSS0.0031EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.17 views

PT-2026-64194

Name of the Vulnerable Software and Affected Versions Ne-Lexa php-zip versions prior to 4.0.3 Description A path traversal issue exists in the ZIP Handler component within the ZipFile::extractTo function located in the src/ZipFile.php file. A remote attacker can exploit this by manipulating the...

6.9CVSS6.7AI score0.00479EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.21 views

PT-2026-64189

Name of the Vulnerable Software and Affected Versions CodeAstro Online Classroom version 1.0 Description Remote SQL injection is possible due to improper handling of the aid argument within the '/OnlineClassroom/loginlinkadmin.php' endpoint. SQL injection is a technique where an attacker inserts...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References8
Rows per page
Query Builder