Lucene search
+L

13729 matches found

OSV
OSV
•added 2026/08/14 6:17 p.m.•12 views

UBUNTU-CVE-2026-49263

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...

2CVSS5.9AI score0.00171EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/14 5:44 p.m.•71 views

CVE-2026-49282

Capstone (disassembly framework) vulnerability CVE-2026-49282 affects builds prior to 6.0.0-Alpha9: the cs_insn_name() API forwards caller-provided instruction IDs to architecture backends, with M68K and RISCV backends lacking sufficient bounds checks. A caller-controlled invalid instruction ID o...

5.1CVSS6.2AI score0.00176EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/14 5:44 p.m.•20 views

CVE-2026-49282 Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...

5.1CVSS6.2AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/08/14 5:44 p.m.•17 views

EUVD-2026-58744

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...

5.1CVSS6.2AI score0.00176EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/14 5:44 p.m.•29 views

CVE-2026-49282

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...

6.2AI score0.00176EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2026/08/14 5:17 p.m.•15 views

CVE-2026-19838

A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...

5.3CVSS0.00407EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/14 4:16 p.m.•19 views

CVE-2026-19836

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

5.3CVSS0.00407EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/14 4:00 p.m.•26 views

CVE-2026-19838

CVE-2026-19838 affects Webkul Bagisto up to 2.4.4, targeting the Backend Reporting Endpoint under /admin/reporting/sales/. The issue is an authorization bypass in an unknown code path of the Backend Reporting Endpoint, with remote exploitation possible. Public exploitation has been disclosed. The...

5.3CVSS5.1AI score0.00407EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/14 4:00 p.m.•10 views

EUVD-2026-58710

A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...

5.3CVSS4.9AI score0.00407EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/14 4:00 p.m.•20 views

CVE-2026-19838

A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...

4.9AI score0.00407EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/08/14 3:30 p.m.•49 views

CVE-2026-19836 Webkul Bagisto Backend Customer Detail Feature view authorization

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

5.3CVSS0.00407EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/14 3:30 p.m.•13 views

EUVD-2026-58682

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

5.3CVSS5.1AI score0.00407EPSS
SaveExploits0References5
Chainguard
Chainguard
•added 2026/08/14 8:25 a.m.•37 views

GO-2025-3635 vulnerabilities

Vulnerabilities for packages: hubble, hubble-fips, hubble-ui-backend-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:25 a.m.•38 views

GO-2026-5400 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-fips, kubescape-operator, kubescape-server-fips, kubescape, kubescape-operator-fips, kubescape-server, hubble-ui-backend-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:25 a.m.•37 views

GO-2024-2653 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:25 a.m.•40 views

GO-2024-2656 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:25 a.m.•36 views

GO-2024-2657 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:25 a.m.•41 views

GO-2025-4167 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:25 a.m.•39 views

GO-2026-5914 vulnerabilities

Vulnerabilities for packages: hubble-ui, kubescape-operator, kubescape-server-fips, kubescape, kubescape-operator-fips, kubescape-server, hubble-ui-backend-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:24 a.m.•36 views

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, commercial-chainloop-backend, kots, spire-server, kine, commercial-expanso-edge, commercial-grafana, envoy-gateway, k3s...

5.8AI score
SaveExploits0
Rows per page
Query Builder