Lucene search
+L

3680 matches found

NVD
NVD
added 2026/06/30 3:16 p.m.20 views

CVE-2026-44947

A missing clean-up in the legacy Project Role Template Binding PRTB reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission PSA permissions after an administrator removes those permissions from a RoleTemplate...

6.9CVSS0.00388EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 2:21 p.m.47 views

CVE-2026-44947

CVE-2026-44947 describes a missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher, affecting versions 2.13.0–2.13.7 and 2.14.0–2.14.3. The issue allows users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those per...

6.9CVSS5.7AI score0.00388EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/30 2:21 p.m.14 views

CVE-2026-44947 Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

A missing clean-up in the legacy Project Role Template Binding PRTB reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission PSA permissions after an administrator removes those permissions from a RoleTemplate...

6.9CVSS5.9AI score
SaveExploits0References4
OSV
OSV
added 2026/06/30 9:06 a.m.11 views

SUSE-SU-2026:2695-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: - CVE-2026-48618: tls: normalize hostname for server identity checks bsc1268593. - CVE-2026-48933: crypto: guard WebCrypto cipher output length bsc1268592. - CVE-2026-48615: lib,test: redact proxy credentials in tunnel errors bsc1268598. -...

9.8CVSS6.1AI score0.03711EPSS
SaveExploits3References39
FreeBSD
FreeBSD
added 2026/06/30 12:00 a.m.20 views

PostgresSQL JDBC -- Silent channel-binding authentication downgrade via unsupported certificate algorithms

PostgreSQL project reports: channelBinding=require connections can be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it, losing the man-in-the-middle protection the setting is meant to guarantee. An attacker who can intercept the TLS connection...

8.2CVSS5.8AI score0.00236EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:00 a.m.15 views

FreeBSD : PostgresSQL JDBC -- Silent channel-binding authentication downgrade via unsupported certificate algorithms (7701f760-745c-11f1-bc50-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7701f760-745c-11f1-bc50-6cc21735f730 advisory. PostgreSQL project reports: channelBinding=require connections can be silently downgraded from...

8.2CVSS5.5AI score0.00236EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/29 1:50 p.m.23 views

CVE-2026-12244

A flaw was found in nsd. When nsd is configured as a secondary server for a zone, a remote attacker, acting as the primary server for that zone, can send a specially crafted DNS message within an AXFR Asynchronous Full Zone Transfer request. This message, containing a malformed SVCB Service Bindi...

8.8CVSS6.2AI score0.00325EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/29 11:50 a.m.21 views

PYSEC-2026-410 mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

Resolution Fixed in v3.1.0, released 2026-05-25. The fix was merged in PR 95 at commit 1c7d3f9. The fix changes the default HTTP bind host to 127.0.0.1, refuses non-loopback HTTP/HTTPS exposure unless OAuth is enabled, makes Helm exposure opt-in and OAuth-gated, and adds parser-backed...

10CVSS6.1AI score0.0093EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/29 11:50 a.m.18 views

PYSEC-2026-567 vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

Impacted Environments This issue ONLY impacts environments using the PyNcclPipe KV cache transfer integration with the V0 engine. No other configurations are affected. Summary vLLM supports the use of the PyNcclPipe class to establish a peer-to-peer communication domain for data transmission...

9.8CVSS7.9AI score0.00959EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2026/06/29 8:19 a.m.19 views

CVE-2026-53292

A flaw was found in the Linux kernel's phonet networking subsystem. A local user could trigger a kernel panic by sending a specially crafted message, leading to a denial of service. This occurs because the pnsocketautobind function incorrectly assumes a socket is already bound when pnsocketbind...

5.5CVSS5.7AI score0.00107EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/29 7:12 a.m.20 views

CVE-2026-41696

A flaw was found in Spring Data MongoDB. Repository query methods that use regular expression regex parameter binding perform insufficient validation of the bound parameter. A remote attacker can exploit this by supplying a crafted string, which could lead to breaking out of the intended regular...

5.9CVSS5.8AI score0.00262EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/29 12:00 a.m.17 views

PT-2026-53636

Impacted Environments This issue ONLY impacts environments using the PyNcclPipe KV cache transfer integration with the V0 engine. No other configurations are affected. Summary vLLM supports the use of the PyNcclPipe class to establish a peer-to-peer communication domain for data transmission...

9.8CVSS6.6AI score0.00959EPSS
SaveExploits1References9
Microsoft CVE
Microsoft CVE
added 2026/06/27 8:05 a.m.33 views

libexpat before 2.8.2 has an integer overflow in addBinding.

...

6.9CVSS5.8AI score0.00206EPSS
SaveExploits0
OSV
OSV
added 2026/06/26 10:59 p.m.13 views

GHSA-CJHR-43R9-CFMW pnpm binds unscoped user-level npm auth credentials to a repository-selected registry

Summary pnpm can send user-level unscoped npm authentication credentials to a registry chosen by a repository-local .npmrc file. In the reproduced case, the user's npm config contains a default registry and an unscoped authToken. The repository does not provide a token-bearing auth line. It only...

6.9CVSS6AI score0.00437EPSS
SaveExploits1References3
Hacker One
Hacker One
added 2026/06/26 10:02 p.m.71 views

Rocket.Chat: Authentication Bypass via XML Signature Wrapping in SAML SSO

The SAML SSO implementation in Rocket.Chat verified XML signatures but did not bind the validated signature to the samlp:Response or saml:Assertion. As a result, an attacker could submit a wrapped document carrying forged identity attributes alongside a valid signature made by the trusted IdP...

9.8CVSS5.9AI score0.00234EPSS
SaveExploits0
OSV
OSV
added 2026/06/26 9:05 p.m.12 views

GHSA-73CV-556C-W3G6 mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

Resolution Fixed in v3.1.0, released 2026-05-25. The fix was merged in PR 95 at commit 1c7d3f9. The fix changes the default HTTP bind host to 127.0.0.1, refuses non-loopback HTTP/HTTPS exposure unless OAuth is enabled, makes Helm exposure opt-in and OAuth-gated, and adds parser-backed...

10CVSS6.1AI score0.0093EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/06/26 8:34 p.m.14 views

CVE-2026-50132 Budibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in Budibase

Budibase is an open-source low-code platform. Prior to 3.39.0, GET /api/chat-links/:instance/:token/handoff is a public endpoint no auth required that performs a permanent, state-changing operation: it binds an external chat identity Slack/Discord/MS Teams to an authenticated Budibase user accoun...

7.3CVSS5.8AI score0.00192EPSS
SaveExploits1References1
CVE
CVE
added 2026/06/26 8:34 p.m.77 views

CVE-2026-50132

Summary (CVE-2026-50132) Budibase exposes a public GET endpoint GET /api/chat-links/:instance/:token/handoff that, before version 3.39.0, can silently link an attacker’s external chat identity (Slack/Discord/MS Teams) to a victim’s Budibase account without consent or CSRF protection. The flow: an...

7.3CVSS5.8AI score0.00192EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
added 2026/06/26 8:34 p.m.15 views

CVE-2026-50132

Budibase is an open-source low-code platform. Prior to 3.39.0, GET /api/chat-links/:instance/:token/handoff is a public endpoint no auth required that performs a permanent, state-changing operation: it binds an external chat identity Slack/Discord/MS Teams to an authenticated Budibase user accoun...

7.3CVSS5.8AI score0.00192EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
added 2026/06/26 7:41 p.m.13 views

CVE-2026-53305

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ps883x: Fix Oops at unbind When trying to unbind a device in order to bind to it vfio-platform as: echo bc0000.geniqup /sys/bus/platform/devices/bc0000.geniqup/driver/unbind I get the following Oops: 436.478639 Unable...

5.7AI score0.00121EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder