Lucene search
+L

208464 matches found

Circl
Circl
•added 2026/07/29 9:32 a.m.•14 views

GHSA-WJV6-JCFJ-MF9R

creationtimestamp| type| source ---|---|--- 2026-07-29 09:32:26+00:00| seen| https://gist.github.com/alon710/22ff7de2f68c39286e130a0c2981900e...

5.8AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/29 9:31 a.m.•10 views

CVE-2026-14488 Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter

The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the templateredirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handlerequest function routing the mbfsdelete action without any capability or...

9.1CVSS5.9AI score0.00523EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/29 9:16 a.m.•11 views

DEBIAN-CVE-2026-58153

Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue...

6.3CVSS5.8AI score0.00639EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/29 8:55 a.m.•12 views

CVE-2026-58183

The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the iss...

8.2CVSS5.8AI score0.00662EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/07/29 8:44 a.m.•14 views

CVE-2026-58179 Apache Traffic Server: regex_remap plugin overflows the stack from attacker input

The Apache Traffic Server regexremap plugin overflows the stack and integers from substitution input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

9.2CVSS5.4AI score
SaveExploits0References3
Circl
Circl
•added 2026/07/29 8:31 a.m.•16 views

GHSA-RJRW-MJQ6-HPMM

creationtimestamp| type| source ---|---|--- 2026-07-29 08:31:18+00:00| seen| https://gist.github.com/alon710/b7d97e28e81c8217964934097e896a47...

5.8AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/29 8:25 a.m.•41 views

CVE-2026-58157 Apache Traffic Server: Improper server-session reuse can expose data across client connections

Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4,...

8.7CVSS0.00485EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/29 8:24 a.m.•17 views

CVE-2026-58155

Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling, and policy bypass. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or...

9.3CVSS5.8AI score0.00537EPSS
SaveExploits0References2Affected Software1
Chainguard
Chainguard
•added 2026/07/29 8:22 a.m.•27 views

GHSA-PWCW-F3FJ-7VR2 vulnerabilities

Vulnerabilities for packages: imagemagick...

5.8AI score
SaveExploits0
Circl
Circl
•added 2026/07/29 8:01 a.m.•18 views

GHSA-FVCV-HH55-X3R4

creationtimestamp| type| source ---|---|--- 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1758 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1758 2026-08-01 20:00:05+00:00| published-proof-of-concept| https://t.me/nxblog/1758 2026-08-02 00:00:22+00:00| published-proof-of-concept|...

5.3AI score
SaveExploits0References1
Circl
Circl
•added 2026/07/29 7:31 a.m.•18 views

GHSA-HQ33-8JGP-8QQ3

creationtimestamp| type| source ---|---|--- 2026-07-29 07:31:46+00:00| seen| https://gist.github.com/alon710/5949a16fe56601aa95656371bd907946...

5.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/29 7:30 a.m.•13 views

CVE-2026-58150

Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4...

10CVSS5.8AI score0.00568EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/07/29 7:25 a.m.•12 views

EUVD-2026-50172

Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue...

10CVSS5.8AI score0.00609EPSS
SaveExploits0References1
Circl
Circl
•added 2026/07/29 6:32 a.m.•14 views

GHSA-WG2Q-39H6-66X9

creationtimestamp| type| source ---|---|--- 2026-07-29 06:32:35+00:00| seen| https://gist.github.com/alon710/9b6eb86646df2d26df9c07ebf0051d99...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/07/29 6:06 a.m.•12 views

BELL-CVE-2026-64502

Bulletin has no description...

7.8CVSS5.8AI score0.00173EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/29 6:05 a.m.•11 views

BELL-CVE-2026-64404

Bulletin has no description...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/29 6:05 a.m.•11 views

BELL-CVE-2026-64542

Bulletin has no description...

5.8AI score0.00215EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/29 6:05 a.m.•12 views

BELL-CVE-2026-64510

Bulletin has no description...

7CVSS5.8AI score0.00151EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/29 6:05 a.m.•11 views

BELL-CVE-2026-64455

Bulletin has no description...

5.8AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/29 6:05 a.m.•10 views

BELL-CVE-2026-64347

Bulletin has no description...

5.5CVSS5.8AI score0.00095EPSS
SaveExploits0References1
Rows per page
Query Builder