Lucene search
+L

132244 matches found

OSV
OSV
•added 2026/05/22 1:16 p.m.•21 views

USN-8295-1 evince vulnerability

It was discovered that Evince did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code...

8.4CVSS6.1AI score0.00415EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2026/05/22 1:16 p.m.•39 views

USN-8295-1: Evince vulnerability

It was discovered that Evince did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code...

8.4CVSS6.1AI score0.00415EPSS
SaveExploits1
OSV
OSV
•added 2026/05/22 11:11 a.m.•8 views

OESA-2026-2462 postgresql-17 security update

PostgreSQL client programs Security Fixes: Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use searchpath to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the...

8.8CVSS7.7AI score0.01006EPSS
SaveExploits0References11
The Hacker News
The Hacker News
•added 2026/05/22 5:47 a.m.•61 views

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities in question are listed below -...

9.4CVSS8.1AI score0.92808EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•1 views

CVE-2026-5817: Inclusion of Functionality from Untrusted Control Sphere

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trustremotecode=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.frompretrained to import and execute arbitrary Python files included in any model pulled fr...

8.8CVSS6.6AI score0.00184EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/05/22 12:00 a.m.•32 views

CVE-2026-37470

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

6.2AI score0.00477EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•0 views

CVE-2026-8992: Improper Certificate Validation

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code...

8.8CVSS6.6AI score0.01168EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•42 views

PT-2026-42800

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

6.2AI score0.00477EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•24 views

RockyLinux 8 : openssl (RLSA-2026:3042)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3042 advisory. openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS12 processing CVE-2025-69419 Tenable has extracted the preceding description block...

6.2AI score0.00616EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-8973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha...

6AI score0.00458EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•16 views

Debian dsa-6288 : thunderbird - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6288 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6288-1 [email protected]...

9.8CVSS6.2AI score0.0064EPSS
SaveExploits0References39
FreeBSD
FreeBSD
•added 2026/05/22 12:00 a.m.•99 views

nginx -- heap buffer overflow in ngx_http_rewrite_module

The nginx developers report: A heap memory buffer overflow might occur in a worker process when using a configuration with overlapping captures in ngxhttprewritemodule, potentially resulting in arbitrary code execution CVE-2026-9256...

9.2CVSS6.3AI score0.02697EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•0 views

CVE-2026-37470: Improper Restriction of Rendered UI Layers or Frames

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

7.3CVSS6.5AI score0.00477EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/05/22 12:00 a.m.•19 views

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL request structure, allows attackers to execute arbitrary code.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

10CVSS6.1AI score0.004EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/22 12:00 a.m.•15 views

The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise products is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00466EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/05/22 12:00 a.m.•16 views

The vulnerability of the Volume Manager Extension Driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Volume Manager Extension Driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

6.8CVSS6.3AI score0.00419EPSS
SaveExploits0References2Affected Software21
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•15 views

Unity Linux 20.1060e / 20.1070e Security Update: logback (UTSA-2026-016687)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016687 advisory. In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to...

8.5CVSS6.2AI score0.04439EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•26 views

Docker Model Runner 安全漏洞

Docker Model Runner is an open-source Docker model runner developed by Docker. Docker Model Runner vllm-metal contains a security vulnerability. This vulnerability arises from setting trustremotecode=True without any sandbox protection. It may allow arbitrary Python files to be executed during...

8.8CVSS6.3AI score0.00184EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•27 views

RockyLinux 9 : nginx (RLSA-2026:18029)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:18029 advisory. nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 Tenable has extracted the preceding description block directly from the RockyLinux security...

9.2CVSS6.1AI score0.03396EPSS
SaveExploits42References3
attackerkb
attackerkb
•added 2026/05/22 12:00 a.m.•16 views

CVE-2026-37470

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components...

7.3CVSS6.2AI score0.00477EPSS
SaveExploits0References3
Rows per page
Query Builder