Lucene search
+L

3998 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/01 3:23 a.m.•20 views

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to stored cross-site scripting due to Angular (CVE-2025-66412)

Summary IBM Storage Protect for Space Management uses Angular to provide web-based user interface components. A stored cross-site scripting XSS vulnerability in the Angular Template Compiler could allow an attacker to bypass Angular's built-in security sanitization and execute malicious scripts...

8.5CVSS5.7AI score0.00413EPSS
SaveExploits1Affected Software1
RedHat Linux
RedHat Linux
•added 2026/07/29 10:29 p.m.•17 views

golang: cmd/compile: no-op interface conversion bypasses overlap checking

A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data...

7.1CVSS7AI score0.00181EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/07/29 10:29 p.m.•18 views

golang: cmd/compile: possible memory corruption after bound check elimination

A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially...

9.8CVSS7.1AI score0.00661EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/07/29 9:17 p.m.•15 views

golang: cmd/compile: possible memory corruption after bound check elimination

A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially...

9.8CVSS7.1AI score0.00661EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/07/29 9:17 p.m.•20 views

golang: cmd/compile: no-op interface conversion bypasses overlap checking

A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data...

7.1CVSS7AI score0.00181EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/27 12:00 a.m.•0 views

CVE-2026-56747: Improper Control of Generation of Code

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value...

8.8CVSS6.4AI score0.00669EPSS
SaveExploits0References3
Fedora
Fedora
•added 2026/07/23 1:21 a.m.•12 views

[SECURITY] Fedora 44 Update: llvm-22.1.8-4.fc44

LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality...

4.8CVSS5.5AI score0.00173EPSS
SaveExploits0
Redos
Redos
•added 2026/07/23 12:00 a.m.•11 views

ROS-20260723-73-0072

The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3AI score0.00451EPSS
SaveExploits3
SUSE CVE
SUSE CVE
•added 2026/07/22 12:09 a.m.•18 views

SUSE CVE-2026-16410

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

9.8CVSS5.8AI score0.00305EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/07/21 11:55 a.m.•14 views

Access of Resource Using Incompatible Type ('Type Confusion')

Overview fory-compiler is a FDL Fory Definition Language compiler for Apache Fory cross-language serialization Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' in the deserialization process when operating in compatible mode, the...

7.3CVSS5.9AI score0.00806EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/07/20 12:00 a.m.•16 views

The vulnerability of the JIT-compiler of the Mozilla Firefox browser allows a hacker to execute arbitrary code.

The vulnerability of the JIT-compiler of the Mozilla Firefox browser is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS6AI score0.00856EPSS
SaveExploits1References8Affected Software2
attackerkb
attackerkb
•added 2026/07/16 4:05 p.m.•14 views

CVE-2026-44632

Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino...

9.1CVSS6.5AI score0.01116EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/16 12:00 a.m.•0 views

CVE-2026-44632: Improper Control of Generation of Code

Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino...

9.1CVSS6.3AI score0.01116EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/07/16 12:00 a.m.•21 views

Oracle Linux 8 : libreoffice (ELSA-2026-35839)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35839 advisory. - Fix CVE-2026-8357 buffer overflow in Calc formula compiler with formulas composed entirely of open tokens Tenable has extracted the preceding description blo...

6.9CVSS7.6AI score0.00227EPSS
SaveExploits0References2
Redos
Redos
•added 2026/07/15 12:00 a.m.•12 views

ROS-20260715-73-0035

The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.3AI score0.00451EPSS
SaveExploits0
OSV
OSV
•added 2026/07/14 9:41 p.m.•17 views

JLSEC-2026-688 Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into...

Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information disclosure through timing side-channel attacks...

1CVSS6.1AI score0.00147EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/14 9:14 p.m.•16 views

CVE-2026-46633 Twig: PHP code injection via `{% use %}` template name

Twig is a template language for PHP. Prior to 3.26.0, Compiler::string does not escape single quotes when a template name from a % use % tag is placed inside a PHP single-quoted string literal, allowing a crafted template name to terminate the string and inject arbitrary PHP expressions into the...

8.7CVSS6.2AI score
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
•added 2026/07/14 2:18 p.m.•13 views

Security Bulletin: IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service (CVE-2026-7771)

Summary IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service. Vulnerability Details CVEID:CVE-2026-7771 DESCRIPTION: IBM Db2 is vulnerable to a trap when compiling a specially crafted statements containing subqueries...

5.5CVSS6.1AI score0.00148EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•1 views

CVE-2026-46633: Improper Control of Generation of Code

Twig is a template language for PHP. Prior to 3.26.0, Compiler::string does not escape single quotes when a template name from a % use % tag is placed inside a PHP single-quoted string literal, allowing a crafted template name to terminate the string and inject arbitrary PHP expressions into the...

9.8CVSS6AI score0.00688EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•1 views

CVE-2026-15607: Improperly Controlled Modification of Object Prototype Attributes

A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes. The attack ma...

5.3CVSS5.2AI score0.00437EPSS
SaveExploits0References3
Rows per page
Query Builder