Lucene search
+L

9729 matches found

AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.12 views

Astra Linux – Vulnerability in Firefox and Thunderbird

DOM spoofing issue: Copy & Paste and Drag & Drop components. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

5.4CVSS5.7AI score0.00272EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.8 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Fixed string copying in parseapplysbmountoptions. The strnlen function cannot be used to copy a non-NUL-terminated string into a NUL-terminated string of possibly larger size. Commit 0efc5990bca5 “string.h: Introduce memtos...

7.8CVSS5.9AI score0.00148EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/10 6:00 a.m.41 views

CVE-2026-19077

The CVE covers the Duplicate Post WordPress plugin (before version 1.5.5). The vulnerability arises from missing per-object authorization checks in the plugin’s bulk copy and delete operations, enabling any user whose role has been granted by an administrator to permanently delete arbitrary posts...

6.5CVSS5.5AI score0.00232EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/10 6:00 a.m.7 views

CVE-2026-19077

The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and delete operations, allowing any user whose role an administrator has granted Duplicate Post WordPress plugin before 1.5.5 access to permanently delete arbitrary posts on the site...

5.4AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/10 6:00 a.m.72 views

CVE-2026-13133

LineInst.exe (LINE for Windows) before version 26.4.0 is vulnerable because Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer directory to be loaded ahead of the legitimate System32 copy. The CVSS metrics indicate a HIGH ...

8.4CVSS5.2AI score0.00117EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/08/10 12:00 a.m.6 views

The vulnerability of the digital_in_recv_sdd_res() function in the net/nfc/digital_technology.c module of the NFC subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the digitalinrecvsddres function in the net/nfc/digitaltechnology.c module of the NFC subsystem of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to influence the...

8.8CVSS4.6AI score0.00281EPSS
SaveExploits0References14Affected Software3
NVD
NVD
added 2026/08/09 11:16 p.m.9 views

CVE-2026-19371

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfyuploadimage. Such manipulation of the argument imagepath leads to path traversal. An attack has to be approached locally. The project...

5.3CVSS0.00138EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/07 8:11 p.m.7 views

JLSEC-2026-1222 When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the ...

When a libcurl-based application performs transfers via SCP:// or SFTP:// and utilizes the CURLOPTSSHKEYFUNCTION callback, it may silently accept an untrusted server. This vulnerability occurs when a server presents a host key type that does not match the specific key type already recorded for th...

7.4CVSS5AI score0.00325EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/08/07 5:56 p.m.13 views

EUVD-2026-54561

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

7.5CVSS5.3AI score0.00292EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/07 5:56 p.m.32 views

CVE-2026-19082 Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

0.00292EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/07 9:16 a.m.14 views

CVE-2026-66493

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS0.00313EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/07 8:03 a.m.12 views

CVE-2026-66493 Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS5.2AI score0.00313EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/07 8:03 a.m.51 views

CVE-2026-66493

CVE-2026-66493 affects the Joomla extension Phoca Commander (phoca.cz) versions 1.0.0 through 6.1.3. The issue is a path traversal vulnerability caused by improper limitation of paths for delete, copy, and move actions. The CVSS data indicates NETWORK access with low complexity and high privilege...

6.4CVSS5.2AI score0.00313EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/07 8:03 a.m.10 views

CVE-2026-66493

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS5.2AI score0.00313EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/07 8:03 a.m.12 views

EUVD-2026-54409

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS5.2AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/07 12:31 a.m.10 views

EUVD-2026-54164

FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates...

6.8CVSS5.7AI score0.00135EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/08/06 10:25 a.m.11 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: Fixed a issue where partial COW operations by pedit led to corruption of the page cache. tcfpeditact calculates the COW range for skbensurewritable once before the key loop, using tcfpoffmaxhint. However, this hint...

7.8CVSS6.4AI score0.00525EPSS
SaveExploits13References3
AstraLinux
AstraLinux
added 2026/08/06 10:25 a.m.7 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: The reuseport cBPF prog is freed after the RCU grace period. Eulgyu Kim reported the issue below with a reproduction example. The reproduction example sets up a UDP reuseport group with a cBPF prog and replaces it with a new...

7.8CVSS6.5AI score0.00104EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/06 10:23 a.m.11 views

CVE-2026-64566

A flaw was found in the Linux kernel's iptfs module, which handles network packet processing. When copying shared packet fragments, a critical flag indicating shared memory is not correctly propagated. This can lead to memory corruption within the kernel, potentially causing the system to crash a...

9.8CVSS5.6AI score0.00352EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/06 10:02 a.m.12 views

CVE-2026-71192

A flaw was found in the S3API middleware of OpenStack Swift. When configured with s3acl=true non-default, Swift-native control headers such as X-Copy-From and X-Copy-From-Account are not sanitized from S3 API requests. Because the S3 ACL mode bypasses Swift's native authorization, an authenticate...

6.5CVSS5.5AI score0.00253EPSS
SaveExploits0References4
Rows per page
Query Builder