Lucene search
+L

9394 matches found

Redos
Redos
•added 2026/07/06 12:00 a.m.•23 views

ROS-20260706-73-0032

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.5CVSS7AI score0.00595EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/06 12:00 a.m.•27 views

PT-2026-56041

A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3...

5.9AI score0.00219EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/06 12:00 a.m.•41 views

PT-2026-55916

The throttling event handling mechanism in multiple WSO2 products accepts user-supplied JSON payloads without sufficient validation of their structure and content. This allows an unauthenticated remote attacker to inject malicious JSON data that can lead to a persistent denial of service conditio...

8.6CVSS6AI score0.00557EPSS
SaveExploits0References2
Redos
Redos
•added 2026/07/06 12:00 a.m.•21 views

ROS-20260706-73-0064

The vulnerability of the gfisomapplesettagex function in the MP4Box packaging tool of the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00143EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•17 views

ROS-20260706-73-0038

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.5CVSS7AI score0.00595EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•24 views

ROS-20260706-73-0039

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.5CVSS7AI score0.00595EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/06 12:00 a.m.•45 views

NetScaler ADC Buffer Overflow DoS

The vulnerability of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could all...

10CVSS7.2AI score0.01011EPSS
SaveExploits3References3Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/07/06 12:00 a.m.•9 views

Linux smc_clc_prfx_match6_rcu Heap Buffer Overflow DoS

The vulnerability of the smcclcprfxmatch6rcu function in the net/smc/smcclc.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS6.5AI score0.0042EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2026/07/06 12:00 a.m.•23 views

Enterprise Infrastructure Security Unauthenticated Access DoS

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures usi...

9.4CVSS6.5AI score0.00494EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/06 12:00 a.m.•14 views

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the xhcifreevirtdevice function in the drivers/usb/host/xhci-mem.c module of the Linux device driver framework is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.00168EPSS
SaveExploits0References13Affected Software3
EUVD
EUVD
•added 2026/07/04 12:00 p.m.•30 views

EUVD-2026-41670

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. The impacted element is the function AIAgent.runconversation of the file runagent.py of the component HTTP API. This manipulation of the argument todos causes denial of service. The attack can be initiated remotely. The...

5.3CVSS5AI score0.00471EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/07/04 11:13 a.m.•16 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the RRCInactiveTransitionReport function of the NGAP Message Handler component. An attacker can cause a service disruption by sending specially crafted messages remotely. Remediation Upgrade...

5.3CVSS5.2AI score0.00545EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/04 11:13 a.m.•18 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the RRCInactiveTransitionReport function of the NGAP Message Handler component. An attacker can cause a service disruption by sending specially crafted messages remotely. Remediation Upgrade...

5.3CVSS5.2AI score0.00545EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/04 11:13 a.m.•15 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the RRCInactiveTransitionReport function of the NGAP Message Handler component. An attacker can cause a service disruption by sending specially crafted messages remotely. Remediation Upgrade...

5.3CVSS5.2AI score0.00545EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/04 11:13 a.m.•18 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the RRCInactiveTransitionReport function of the NGAP Message Handler component. An attacker can cause a service disruption by sending specially crafted messages remotely. Remediation Upgrade...

5.3CVSS5.2AI score0.00545EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/04 11:13 a.m.•31 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the RRCInactiveTransitionReport function of the NGAP Message Handler component. An attacker can cause a service disruption by sending specially crafted messages remotely. Remediation Upgrade...

5.3CVSS5.2AI score0.00545EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/04 11:13 a.m.•17 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the NGSetupRequest process. An attacker can cause the service to become unavailable by sending specially crafted requests remotely. Remediation Upgrade github.com/omec-project/amf/nas/nassecurity...

5.3CVSS5.6AI score0.00545EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/04 11:13 a.m.•19 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the NGSetupRequest process. An attacker can cause the service to become unavailable by sending specially crafted requests remotely. Remediation Upgrade github.com/omec-project/amf/gmm to version...

5.3CVSS5.6AI score0.00545EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/04 2:16 a.m.•27 views

CVE-2025-71380

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading to data exfiltration, service disruption, or...

8.8CVSS0.00571EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/04 1:23 a.m.•82 views

CVE-2025-71380

CVE-2025-71380 : The n8n Execute Command node is vulnerable to arbitrary command execution by authenticated users on the host running n8n. The issue allows user- or credential-compromised attackers to run commands that could exfiltrate data, disrupt services, or fully compromise the host. Concret...

8.8CVSS6.5AI score0.00571EPSS
SaveExploits0References2
Rows per page
Query Builder