Lucene search
+L

3804 matches found

Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.10 views

PT-2026-7313

Name of the Vulnerable Software and Affected Versions Intel Quick Assist Technology affected versions not specified Description A missing protection mechanism for an alternate hardware interface within Ring 0 may allow an escalation of privilege. A system software adversary with privileged user...

7.9CVSS5.2AI score0.00151EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/02/09 2:26 p.m.3 views

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the certtool --verify command. An attacker can cause excessive CPU and memory consumption by submitting specially crafted certificates containing a large number of SANs and Name Constraints...

6.9CVSS5.6AI score0.00638EPSS
SaveExploits1References2
NVD
NVD
added 2026/02/09 5:16 a.m.11 views

CVE-2026-2215

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRETKEY results in use of default cryptographic key. The attack can be initiated...

6.3CVSS0.00268EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/02/09 4:32 a.m.38 views

CVE-2026-2215 rachelos WeRSS we-mp-rss JWT auth.py default key

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRETKEY results in use of default cryptographic key. The attack can be initiated...

6.3CVSS0.00268EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/09 4:32 a.m.10 views

CVE-2026-2215

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRETKEY results in use of default cryptographic key. The attack can be initiated...

6.3CVSS4.6AI score0.00268EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/09 4:32 a.m.8 views

CVE-2026-2215 rachelos WeRSS we-mp-rss JWT auth.py default key

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRETKEY results in use of default cryptographic key. The attack can be initiated...

6.3CVSS5AI score0.00268EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/02/09 1:33 a.m.7 views

CVE-2026-2110

A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing a manipulation results in improper restriction of excessive authentication attempts. Remote...

8.1CVSS4.3AI score0.00681EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/02/09 12:0 a.m.11 views

PT-2026-7067

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRET KEY results in use of default cryptographic key. The attack can be initiated...

6.3CVSS5AI score0.00268EPSS
SaveExploits0References5
OSV
OSV
added 2026/02/07 8:15 p.m.6 views

CVE-2026-2110

A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing a manipulation results in improper restriction of excessive authentication attempts. Remote...

8.1CVSS4.9AI score0.00681EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/02/07 8:2 p.m.10 views

EUVD-2026-5717

A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing a manipulation results in improper restriction of excessive authentication attempts. Remote...

6.3CVSS4.5AI score0.00681EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/02/07 8:2 p.m.47 views

CVE-2026-2110 Tasin1025 SwiftBuy login.php excessive authentication

A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing a manipulation results in improper restriction of excessive authentication attempts. Remote...

6.3CVSS0.00681EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/02/07 8:2 p.m.4 views

CVE-2026-2110 Tasin1025 SwiftBuy login.php excessive authentication

A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing a manipulation results in improper restriction of excessive authentication attempts. Remote...

6.3CVSS4.5AI score0.00681EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/02/06 1:26 a.m.7 views

CVE-2026-1892

A security vulnerability has been detected in WeKan up to 8.20. This affects the function setBoardOrgs of the file models/boards.js of the component REST API. Such manipulation of the argument item.cardId/item.checklistId/card.boardId leads to improper authorization. The attack may be launched...

5CVSS5AI score0.00241EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/02/06 12:0 a.m.6 views

The vulnerabilities of the `appendChild()` and `_clear_id_cache()` functions in the Python programming language interpreter (CPython) allow attackers to trigger a denial-of-service attack.

The vulnerability of the appendChild and clearidcache functions in the Python programming language interpreter CPython is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.3CVSS5.8AI score0.00781EPSS
SaveExploits0References18Affected Software5
NVD
NVD
added 2026/02/05 6:16 p.m.9 views

CVE-2025-47911

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS0.00502EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/05 6:16 p.m.8 views

AZL-76977 CVE-2025-47911 affecting package packer for versions less than 1.9.5-18

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS6.7AI score0.00502EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/05 6:16 p.m.6 views

AZL-76886 CVE-2025-47911 affecting package cloud-provider-kubevirt 0.5.1-2

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS6.7AI score0.00502EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/05 6:16 p.m.9 views

AZL-76935 CVE-2025-47911 affecting package keda for versions less than 2.4.0-32

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS6.7AI score0.00502EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/05 6:16 p.m.9 views

AZL-76898 CVE-2025-47911 affecting package cni-plugins 1.4.0-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS5.7AI score0.00502EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/05 6:16 p.m.9 views

AZL-76793 CVE-2025-47911 affecting package azl-otel-collector 0.127.0-1

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS7.3AI score0.00502EPSS
SaveExploits0References1
Rows per page
Query Builder