Lucene search
+L

223706 matches found

EUVD
EUVD
added yesterday5 views

EUVD-2026-53460

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The...

9.9CVSS5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday18 views

CVE-2026-20304 Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The...

9.9CVSS
SaveExploits0References1
CVE
CVE
added yesterday50 views

CVE-2026-20304

Cisco CVE-2026-20304 relates to improper access control (CWE-284) in Cisco Catalyst SD-WAN. The connected documents indicate a hardening software release addressing multiple internally discovered vulnerabilities. Metrics show a 3.1 CVSSv3.1 base score of 9.9 (CRITICAL) with NETWORK attack vector,...

9.9CVSS5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-20271

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

8.6CVSS5.5AI score
SaveExploits0References2Affected Software1
CVE
CVE
added yesterday26 views

CVE-2026-20271

CVE-2026-20271 relates to Cisco IOS XE Software and stems from insufficient control flow management (CWE-691). The connected sources indicate a set of software hardening releases by Cisco to address multiple internally discovered vulnerabilities, but do not specify the affected IOS XE versions, e...

8.6CVSS5.5AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-53457

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

8.6CVSS5.5AI score
SaveExploits0References1
CVE
CVE
added yesterday37 views

CVE-2026-20269

Technical details (affected product/version/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from Cisco/NVD/CVE sources.

8.6CVSS5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-20269

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

8.6CVSS5.5AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added yesterday7 views

EUVD-2026-53455

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

8.6CVSS5.5AI score
SaveExploits0References1
CVE
CVE
added yesterday44 views

CVE-2026-20267

Technical details (affected products, versions, root cause, impact) are not publicly available in the provided documents. Monitor for updates from Cisco advisories and cross-reference linked sources for concrete mitigation steps.

9CVSS5.5AI score
SaveExploits0References1
EUVD
EUVD
added yesterday8 views

EUVD-2026-53453

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

9CVSS5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-20267

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

9CVSS5.5AI score
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added yesterday18 views

CVE-2026-20267 Cisco IOS XE Software Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

9CVSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added yesterday3 views

keycloak-services: keycloak-services: Default DCR policy allows role forgery via User Property mappers

A flaw was found in the Dynamic Client Registration DCR component of Keycloak, an identity and access management solution. The default DCR policy fails to properly validate the claim path for User Property mappers, allowing them to write values to sensitive internal claim locations. An attacker...

8.1CVSS5.5AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday5 views

keycloak-services: keycloak-services: SAML IdP-initiated broker login bypasses link-only restriction

A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue occurs because the IdP-initiated Single Sign-On endpoint fails to check if a provider is restricted to account linking only. This allows an attacker with contr...

7.4CVSS5.4AI score
SaveExploits0References4
OSV
OSV
added yesterday6 views

MAL-2026-13311 Malicious code in dolyame-boxy-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cfc61444739291be87199c8b4118dd762690f12041bdadcd6b5792b4a3c9c3 On require of dolyame-boxy-fonts, index.js unconditionally loads./loader.js, which reconstructs C2 hostnames from split-string arrays Cloudflare...

6AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added yesterday5 views

gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

7.3CVSS6AI score0.00128EPSS
SaveExploits0References4
OSV
OSV
added yesterday6 views

MAL-2026-12859 Malicious code in blocks-sahred-atom-mobile-app-bar-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe2a177df3e33a917705f95afeb12c308bc01b65328114e5fa34411b210659 On require of this package, index.js exposes a trivial stub class and then loads bridge.js, which selects a platform-specific endpoint, fetches an...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday6 views

Malicious code in bnpl-blocks-atom-bnpl-dangerously-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168aaa53563331be51ccf856023735e18048226dacc413d15a9252e1f1c085c9 On any require of this package, index.js loads compat.js which unconditionally downloads a platform-specific binary from hardcoded Cloudflare Workers...

5.6AI score
SaveExploits0References2
OSV
OSV
added yesterday6 views

MAL-2026-12870 Malicious code in bnpl-blocks-atom-bnpl-dangerously-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168aaa53563331be51ccf856023735e18048226dacc413d15a9252e1f1c085c9 On any require of this package, index.js loads compat.js which unconditionally downloads a platform-specific binary from hardcoded Cloudflare Workers...

5.6AI score
SaveExploits0References2
Rows per page
Query Builder