Lucene search
+L

123 matches found

EUVD
EUVD
added 5 days ago10 views

EUVD-2026-54680

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...

6.5CVSS5.7AI score0.00221EPSS
SaveExploits0References7
CVE
CVE
added 5 days ago37 views

CVE-2026-19246

HKUDS nanobot up to v0.2.1 has a vulnerability in nanobot/providers/image_generation.py (_download_image_data_url) that enables server-side request forgery through provider-returned image URLs. Attacks can be initiated remotely; CVSS notes PROOF-OF-CONCEPT exploit. A patch identified as 5095 is a...

6.5CVSS5.7AI score0.00221EPSS
SaveExploits0References7
OSV
OSV
added 5 days ago7 views

CVE-2026-19246 HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...

5.3CVSS4.7AI score
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.4 views

Mozilla Thunderbird < 52.6

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-04 advisory. - A use-after-free vulnerability can occur during font face manipulation when a font face is freed while...

9.8CVSS7.7AI score0.07262EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2011-1921

Malware in sbrugna...

4CVSS5.7AI score0.01308EPSS
SaveExploits0References6
Circl
Circl
added 2025/08/07 10:0 a.m.16 views

CVE-2025-5095

creationtimestamp| type| source ---|---|--- 2025-08-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-03 2025-08-09 00:01:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvwhm3brej2m 2025-08-11 04:04:30+00:00| seen|...

9.8CVSS4.8AI score0.00928EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2011-5095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier...

4CVSS6.7AI score0.02088EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/09/20 3:22 p.m.38 views

Moderate: Red Hat Security Advisory: Logging Subsystem 5.6.11 - Red Hat OpenShift security update

Logging Subsystem 5.6.11 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

6.5CVSS6.5AI score0.00486EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.42 views

Debian: Security Advisory (DLA-533-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.5AI score0.05487EPSS
SaveExploits2References3
F5 Networks
F5 Networks
added 2023/02/21 6:34 p.m.59 views

K51390683: PHP vulnerabilities CVE-2016-5094 and CVE-2016-5095

Security Advisory Description CVE-2016-5094 Integer overflow in the phphtmlentities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from...

8.6CVSS9.4AI score0.0464EPSS
SaveExploits0Affected Software18
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.8 views

SUSE CVE-2011-5095

The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923...

4CVSS6.7AI score0.02088EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:1 a.m.6 views

SUSE CVE-2016-5095

Integer overflow in the phpescapehtmlentitiesex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTERSANITIZEFULLSPECIALCHARS...

8.6CVSS7.9AI score0.02636EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2022/07/05 12:0 a.m.60 views

Oracle Linux 8 : grub2, / mokutil, / shim, / and / shim-unsigned-x64 (ELSA-2022-5095)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5095 advisory. - Add CVE-2020-15706, CVE-2020-15707 to the list Orabug: 31225072 - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733 - CVE-2021-3697...

8.1CVSS6.6AI score0.01588EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
added 2022/06/16 12:0 a.m.108 views

RHEL 8 : grub2, mokutil, shim, and shim-unsigned-x64 (RHSA-2022:5095)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5095 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

8.1CVSS7.1AI score0.01284EPSS
SaveExploits0References18
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.19 views

Mageia: Security Advisory (MGASA-2018-0099)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.07262EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2018-0115)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.07262EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.26 views

Mageia: Security Advisory (MGASA-2018-0338)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.21288EPSS
SaveExploits9References9
OpenVAS
OpenVAS
added 2021/11/08 12:0 a.m.20 views

Mozilla Firefox Security Advisory (MFSA2018-02) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

10CVSS7.4AI score0.20024EPSS
SaveExploits0References34
OpenVAS
OpenVAS
added 2021/09/30 12:0 a.m.27 views

Ubuntu: Security Advisory (USN-5095-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6.6AI score0.10233EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/09/30 12:0 a.m.85 views

Ubuntu 18.04 LTS / 20.04 LTS : Apache Commons IO vulnerability (USN-5095-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5095-1 advisory. It was discovered that Apache Commons IO incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information...

5.8CVSS6.7AI score0.10233EPSS
SaveExploits1References2
Rows per page
Query Builder