Lucene search
+L

33080 matches found

RedhatCVE
RedhatCVE
added 2026/07/22 5:5 a.m.13 views

CVE-2026-57962

A flaw was found in Thunderbird. A remote attacker, by operating a malicious Lightweight Directory Access Protocol LDAP server, can cause a Thunderbird client to crash due to memory exhaustion. This occurs when a user's Thunderbird client is configured to query the malicious LDAP server for...

6.5CVSS5.4AI score0.0022EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/22 12:9 a.m.8 views

SUSE CVE-2026-16403

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

6.5CVSS5.8AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.13 views

PT-2026-63382

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.7.0 through 1.25.1 Description An issue exists where an auth/rpz zone with a configured primary hostname that resolves to BOGUS A/AAAA records is still treated as a potential XFR endpoint. XFR Zone Transfer is a...

6.5CVSS5.8AI score0.00128EPSS
SaveExploits0References30
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.34 views

PT-2026-63508

Name of the Vulnerable Software and Affected Versions IP Login affected versions not specified Description The IP Login extension for Joomla trusts forwarded client-IP headers without requiring a configured trusted proxy. This allows attackers to spoof the IP address used for automatic login, whi...

5.9AI score0.00202EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.16 views

PT-2026-63381

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.6.2 through 1.25.1 Description When configured with the respip module before the validator, along with a response-ip redirect rule or an RPZ file using an RPZ-IP trigger, the rewriting handler fails to verify the...

6.3CVSS5.8AI score0.00107EPSS
SaveExploits0References30
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.15 views

PT-2026-63418

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.18.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.24 BIND 9 versions 9.18.11-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.24-S1 Description Unexpected program termination occurs in named due to the...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References25
Circl
Circl
added 2026/07/21 11:52 p.m.13 views

CVE-2026-16317

creationtimestamp| type| source ---|---|--- 2026-07-21 23:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6yw4265r2a 2026-07-22 13:13:59+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mrafotbn332r...

8.3CVSS4.8AI score0.00186EPSS
SaveExploits0References2
Circl
Circl
added 2026/07/21 11:18 p.m.12 views

CVE-2026-60244

creationtimestamp| type| source ---|---|--- 2026-07-21 23:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wy5huul2r 2026-07-23 16:49:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 21:37:06+00:00| seen|...

9.8CVSS7.1AI score0.00354EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/21 11:16 p.m.4 views

DEBIAN-CVE-2026-16415

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...

5.4CVSS5.5AI score0.00159EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/21 10:6 p.m.11 views

GHSA-RWJ8-PGH3-R573 GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Summary Repo.clonefrom passes the caller-supplied remote URL through Git.polishurl, which on every non-Cygwin platform calls os.path.expandvars on the URL before handing it to git clone. An attacker who controls the URL argument — the documented use case for clonefrom in "import repository from...

7.5CVSS5.7AI score0.00266EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/21 9:32 p.m.12 views

EUVD-2026-46421

mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the visitpage tool, which only validates the URL protocol without filtering private or reserved IP...

8.3CVSS5.4AI score0.00231EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/21 9:25 p.m.9 views

CVE-2026-63922

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

9.8CVSS5.2AI score0.00695EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/21 9:16 p.m.15 views

CVE-2026-65056

mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the visitpage tool, which only validates the URL protocol without filtering private or reserved IP...

8.3CVSS0.00231EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/21 9:16 p.m.7 views

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

6.9CVSS0.00257EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 9:16 p.m.9 views

CVE-2026-47689

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the buildRow method in fogpage.class.php substitutes data values into HTML table cell templates using strreplace without any HTML escaping. An unauthenticated...

5.2CVSS0.00324EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2026/07/21 9:0 p.m.9 views

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

6.9CVSS5.7AI score0.00257EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/21 8:39 p.m.35 views

CVE-2026-47687 FOGProject has stored XSS via unescaped option label in selectForm() accessible from unauthenticated inventory endpoint

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the selectForm helper in fogpage.class.php renders labels using raw, unescaped user input. An unauthenticated attacker who knows any registered host's MAC address...

7.3CVSS0.00271EPSS
SaveExploits1References1
OSV
OSV
added 2026/07/21 8:37 p.m.6 views

GHSA-XMJ7-XJ85-HFC3 Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL

Summary Gitea's restore-repo CLI command restores a repository from a dump directory/archive. When parsing pullrequest.yml from that dump, the Head.CloneURL field is used to add a git remote and fetch from it with no validation, because the safety check that's supposed to guard it...

6.3CVSS5.8AI score
SaveExploits0References3
OSV
OSV
added 2026/07/21 8:33 p.m.6 views

GHSA-RQHX-647V-WX32 Gitea: SSRF via HTTP Redirect in Repository Migration

Summary Gitea 1.25.4 validates the initial URL provided to the repository migration endpoint POST /api/v1/repos/migrate and correctly blocks requests to internal addresses like 127.0.0.1 or RFC1918 ranges. However, if the initial URL points to an attacker-controlled server that responds with an...

6.5CVSS5.4AI score0.00244EPSS
SaveExploits0References7
Circl
Circl
added 2026/07/21 7:35 p.m.11 views

CVE-2026-44880

creationtimestamp| type| source ---|---|--- 2026-07-21 19:35:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kjqlhyq27 2026-07-22 14:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mraldxwopq2n...

8.8CVSS4.8AI score0.00527EPSS
SaveExploits0References2
Rows per page
Query Builder