Lucene search
+L

57704 matches found

EUVD
EUVD
added 2026/07/06 7:55 a.m.13 views

EUVD-2026-41826

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

8.1CVSS6.3AI score0.00972EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/07/06 7:55 a.m.46 views

CVE-2026-43865 Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

0.00972EPSS
SaveExploits1References1
CVE
CVE
added 2026/07/06 7:55 a.m.23 views

CVE-2026-43865

CVE-2026-43865 — Apache Camel Hazelcast deserialization risk The Camel Hazelcast component, when using default configuration, does not enable a Java deserialization filter, causing objects received over the Hazelcast cluster protocol to be deserialized inside Hazelcast before Camel processes them...

8.1CVSS6.3AI score0.00972EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/07/06 7:55 a.m.12 views

CVE-2026-43865 Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

8.1CVSS6.2AI score
SaveExploits0References5
OSV
OSV
added 2026/07/06 6:28 a.m.11 views

OESA-2026-2850 alsa-lib security update

The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in...

7CVSS6AI score0.00138EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/06 6:28 a.m.8 views

OESA-2026-2849 alsa-lib security update

The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in...

7CVSS6AI score0.00138EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/06 6:27 a.m.9 views

OESA-2026-2848 alsa-lib security update

The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in...

7CVSS6AI score0.00138EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/06 6:27 a.m.8 views

OESA-2026-2847 alsa-lib security update

The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fixes: The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in...

7CVSS6AI score0.00138EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.12 views

PT-2026-56072

Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.34.2 Coder versions prior to 2.33.8 Coder versions prior to 2.32.7 Coder versions prior to 2.29.17 Description The tailnet coordinator fails to validate that an agent's AllowedIPs derive from its authenticated UUID,...

8.2CVSS6AI score0.00246EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.27 views

PT-2026-55951

Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support affected versions not specified Description A critical pre-authentication flaw exists in the authentication subsystem. Improper processing of authentication requests allows an unauthenticated remote attacker to bypas...

9.8CVSS6.2AI score0.00674EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.21 views

PT-2026-55950

Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support and Privileged Remote Access versions prior to 26.2.1 BeyondTrust Remote Support and Privileged Remote Access versions prior to 25.3.3 Description A critical pre-authentication flaw exists in the authentication...

9.2CVSS6.2AI score0.00441EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.22 views

PT-2026-55884

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description The camel-hazelcast component manages Hazelcast instances using a default configuration that lacks a...

8.1CVSS6.5AI score0.00972EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.26 views

PT-2026-55969

Name of the Vulnerable Software and Affected Versions Tenda firmware versions US FH1201V1.0BR V1.2.0.14408 EN TD Tenda firmware versions US W15EV1.0br V15.11.0.51068 1567 841 EN TDE Tenda firmware versions US AC10V1.0re V15.03.06.46 multi TDE01 Tenda firmware versions US AC5V1.0RTL V15.03.06.48...

10CVSS7.2AI score0.01616EPSS
SaveExploits1References50
ATTACKERKB
ATTACKERKB
added 2026/07/05 10:23 p.m.14 views

CVE-2026-10657

Zephyr's DNS resolver detects mDNS .local queries in dnsresolvenameinternal subsys/net/lib/dns/resolve.c with memcmpstrrchrquery, '.', ".local", 7, which always reads a fixed 7 bytes from the suffix pointer. When the resolved hostname's final label is shorter than 7 bytes e.g. names ending in .or...

5.3CVSS6.2AI score0.00285EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/05 7:15 a.m.13 views

CVE-2026-14721

A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase5g of the component Web Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack is possible to be carried o...

9CVSS7.6AI score0.00447EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
added 2026/07/04 9:0 p.m.10 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code and was identified as part of the PolinRider supply chain campaign, linked to North Korean threat actors associated with the Contagious Interview/Famous Chollima activity...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/04 9:0 p.m.7 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code and was identified as part of the PolinRider supply chain campaign, linked to North Korean threat actors associated with the Contagious Interview/Famous Chollima activity...

9.8CVSS6AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/07/04 6:45 a.m.126 views

Exploit for Improper Input Validation in Apache Activemq

Apache ActiveMQ Classic — RCE Research Private research archi...

8.8CVSS7AI score0.9722EPSS
SaveExploits15
Fedora
Fedora
added 2026/07/04 12:51 a.m.18 views

[SECURITY] Fedora 44 Update: openqa-5^20260604git6376095-3.fc44

openQA is a testing framework that allows you to test GUI applications on one hand and bootloader and kernel on the other. In both cases, it is difficult to script tests and verify the output. Output can be a popup window or it can be an error in early boot even before init is executed. openQA is...

9.8CVSS6.7AI score0.02566EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/07/03 2:16 p.m.37 views

CVE-2026-9828 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, zookeeper, nextflow, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, cassandra, keycloak-config-cli, cassandra-reaper, akhq...

6.3CVSS4.5AI score0.0037EPSS
SaveExploits0
Rows per page
Query Builder