Lucene search
+L

212993 matches found

CVE
CVE
added 2026/08/21 8:48 p.m.11 views

CVE-2026-69228

CVE-2026-69228 is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior. A remote, unauthenticated attacker can access a specific resource that should require authentication; the documents clarify this does not expose user content. The CVSS 3.1 score is 5.3 (Med...

5.3CVSS5.3AI score0.00343EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 8:46 p.m.24 views

CVE-2026-69225 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

5.9CVSS0.00331EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:46 p.m.10 views

EUVD-2026-64154

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

5.9CVSS5.3AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 8:46 p.m.25 views

CVE-2026-69238 HTML injection vulnerability in Esri Portal for ArcGIS

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All...

3.5CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:46 p.m.10 views

CVE-2026-69238

Esri Portal for ArcGIS versions 11.5 and prior are affected by an HTML injection vulnerability in the Portal for ArcGIS Home application . A remote, highly privileged attacker can insert arbitrary HTML into the application. The CVSS 3.1 score is 3.5 (LOW) , reflecting the high privilege requireme...

3.5CVSS5.5AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:45 p.m.11 views

CVE-2026-69224

Esri Portal for ArcGIS versions 12.0 and earlier are affected by an information disclosure vulnerability that may allow a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body. The vulnerability requires difficult to reproduce circumstances , reflected in the ...

5.9CVSS5.2AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/21 7:21 p.m.10 views

CVE-2026-26081

A flaw was found in HAProxy. This vulnerability, stemming from a missing length check in the NEWTOKEN format, could allow a remote attacker to cause a low impact on data integrity and availability. This means an attacker might be able to subtly alter data or temporarily disrupt the service...

4.8CVSS5.2AI score0.00363EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/21 7:21 p.m.7 views

CVE-2026-13501

A flaw was found in antlr ANTLR4. This vulnerability allows a local attacker to execute arbitrary commands by manipulating the GoTarget function within the gofmt component. This command injection can lead to unauthorized actions on the system where the affected software is running...

5.3CVSS5.8AI score0.00679EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/08/21 7:20 p.m.7 views

CVE-2026-10037

A flaw was found in OpenJDK. A local attacker with low privileges can exploit a sandbox escape vulnerability in the OpenJDK packages. This occurs because the .jar MIME handlers, when the mailcap package is installed, execute files marked as executable. A malicious sandboxed application can write ...

8.8CVSS6.4AI score0.0012EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 7:11 p.m.6 views

CVE-2026-50813

A flaw was found in SQLite. A local attacker can exploit this vulnerability by manipulating the Session Extension changeset concat/changegroup merge path. This allows the attacker to obtain sensitive information, leading to information disclosure...

6.1CVSS5.2AI score0.0011EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/21 7:09 p.m.9 views

CVE-2026-74580

A flaw was found in the Linux kernel's vhost subsystem. A local attacker could exploit this vulnerability by reconfiguring a virtual ring vring using specific ioctl commands while a device Input/Output Memory Management Unit IOTLB is attached. This improper handling of the vring metadata cache ca...

7CVSS5.4AI score0.00165EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 5:57 p.m.9 views

CVE-2026-74581

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

7.8CVSS5.4AI score0.00165EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/21 4:57 p.m.10 views

python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

A flaw was found in Python's pkgutil.getdata function, which is used to retrieve data from packages. This function did not properly validate the resource argument, allowing a local attacker to perform path traversal attacks. Path traversal enables an attacker to access files and directories store...

4.4AI score0.00238EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/21 4:17 p.m.8 views

CVE-2026-49114

In ONNX before 1.21.0, the 'saveexternaldata' function builds the external-data file path from the model's externaldata location field and opens it for writing without 'ONOFOLLOW/OEXCL', after a non-atomic 'os.path.isfile' check. A local attacker with write access to the directory where a victim...

7.1CVSS0.00109EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/21 4:17 p.m.10 views

CVE-2026-22681

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server ...

8.5CVSS0.00276EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/21 4:13 p.m.16 views

EUVD-2026-63999

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server ...

8.5CVSS5.5AI score0.00276EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/21 4:13 p.m.17 views

CVE-2026-22681

OpenViking (by Volcengine) before 0.3.4 is vulnerable to Server-Side Request Forgery (SSRF) via the /api/v1/resources endpoint. An authenticated low-privilege attacker can POST a crafted URL, causing the server to issue outbound HEAD and GET requests with redirects enabled to loopback, RFC 1918, ...

8.5CVSS5.5AI score0.00276EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/21 4:10 p.m.8 views

CVE-2026-49114 ONNX symlink-following and path-traversal arbitrary file write

In ONNX before 1.21.0, the 'saveexternaldata' function builds the external-data file path from the model's externaldata location field and opens it for writing without 'ONOFOLLOW/OEXCL', after a non-atomic 'os.path.isfile' check. A local attacker with write access to the directory where a victim...

7.1CVSS5.3AI score0.00109EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 4:10 p.m.15 views

CVE-2026-49114

ONNX before 1.21.0 is vulnerable to a symlink-following arbitrary file write in the save_external_data function. The function constructs the output path from the model's external_data location field and opens it for writing without O_NOFOLLOW/O_EXCL, relying on a non-atomic os.path.isfile() check...

7.1CVSS5.3AI score0.00109EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/21 2:16 p.m.8 views

CVE-2026-75946

A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

8.2CVSS0.00073EPSS
SaveExploits0References1
Rows per page
Query Builder