Lucene search
+L

9238 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•4 views

CVE-2026-7803: Improper Input Validation

IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields...

9.8CVSS6.3AI score0.00643EPSS
SaveExploits0References3
Redos
Redos
•added 2026/06/30 12:00 a.m.•14 views

ROS-20260630-73-0048

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6AI score0.00142EPSS
SaveExploits0
Redos
Redos
•added 2026/06/30 12:00 a.m.•19 views

ROS-20260630-73-0040

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.6AI score0.00139EPSS
SaveExploits0
Redos
Redos
•added 2026/06/30 12:00 a.m.•14 views

ROS-20260630-73-0036

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.8AI score0.00186EPSS
SaveExploits0
Redos
Redos
•added 2026/06/30 12:00 a.m.•14 views

ROS-20260630-73-0035

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS5.8AI score0.00142EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•36 views

PT-2026-53947

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description Improper validation of flow nodes that have missing or empty component type fields can lead to arbitrary code execution. Arbitrary code execution occurs when an attacker can run...

9.8CVSS6.6AI score0.00643EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•8 views

CVE-2026-56328: Always-Incorrect Control Flow Implementation

Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unnamed /updates requests without defaultChannel implicitly resolve to a single hidden winner channel. An authorized app or channel manager can create ambiguous default update stat...

7.1CVSS5.8AI score0.00349EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•30 views

Apache Tomcat 9.0.0.M1 < 9.0.119 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.119. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.119security-9 advisory. - Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles...

9.1CVSS6.7AI score0.04091EPSS
SaveExploits1References13
BDU FSTEC
BDU FSTEC
•added 2026/06/30 12:00 a.m.•23 views

The vulnerability of the `pp_set_fine_grain_clk_vol()` function in the driver/gpu/drm/amd/pm/powerplay/amd_powerplay.c file of the Direct Rendering Infrastructure (DRI) graphics card driver for Linux kernel is exploited by attackers to cause system failures.

The vulnerability of the ppsetfinegrainclkvol function in the driver/gpu/drm/amd/pm/powerplay/amdpowerplay.c file of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability...

5.5CVSS6.3AI score0.00239EPSS
SaveExploits0References11Affected Software3
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-40082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing sessionregenerateid after login, leading to Session...

5.4CVSS6AI score0.0032EPSS
SaveExploits1References3
Snyk
Snyk
•added 2026/06/29 10:23 p.m.•14 views

Always-Incorrect Control Flow Implementation

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation due to incorrect control flow in the RewriteValve process. An attacker can bypass...

7.3CVSS7.2AI score0.00652EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/29 10:23 p.m.•13 views

Always-Incorrect Control Flow Implementation

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation due to incorrect control flow in the RewriteValve process. An attacker can bypass intended rewrite rules by crafting...

7.3CVSS7.2AI score0.00652EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/29 10:23 p.m.•15 views

Always-Incorrect Control Flow Implementation

Overview org.apache.tomcat:tomcat is an implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation due to incorrect control flow in the RewriteValv...

7.3CVSS7.1AI score0.00652EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/29 9:16 p.m.•27 views

CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

9.1CVSS0.00607EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/29 9:16 p.m.•25 views

DEBIAN-CVE-2026-53404

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

7.3CVSS7.1AI score0.00652EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/29 9:16 p.m.•51 views

CVE-2026-53404

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

7.3CVSS0.00652EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/29 9:16 p.m.•15 views

UBUNTU-CVE-2026-53404

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

7.3CVSS7.1AI score0.00652EPSS
SaveExploits0References8
OSV
OSV
•added 2026/06/29 9:16 p.m.•19 views

UBUNTU-CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

9.1CVSS7.7AI score0.00607EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/06/29 9:16 p.m.•17 views

CVE-2026-53404

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

7.3CVSS7.1AI score0.00652EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/06/29 8:42 p.m.•104 views

CVE-2026-55276 Apache Tomcat: Logged effective web.xml is incomplete

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

0.00607EPSS
SaveExploits0References1
Rows per page
Query Builder