Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

147410 matches found

RedhatCVE
RedhatCVE•added 2026/10/13 11:36 a.m.•12 views

CVE-2026-109245

A flaw was found in FreeRDP. This vulnerability leads to information disclosure because the internal HTTP client fails to verify Transport Layer Security TLS server certificates or hostnames. An on-path network attacker positioned between the client and identity provider can exploit this flaw by...

7.4CVSS7.3AI score0.00236EPSS
SaveExploits0References5
osv_clsa
osv_clsa•added 2026/10/13 10:25 a.m.•9 views

CLSA-2026-1791887095 Fix CVE(s): CVE-2026-42356

SECURITY UPDATE: wrong handler on internal redirect from a CGI program - debian/patches/CVE-2026-42356.patch: do not propagate the trusted content-type flag to the target of an internal redirect in apinternalredirecthandler in modules/http/httprequest.c. - CVE-2026-42356...

3.7CVSS5.9AI score0.00422EPSS
SaveExploits1References2
osv_clsa
osv_clsa•added 2026/10/13 10:21 a.m.•10 views

CLSA-2026-1791886853 Fix CVE(s): CVE-2026-42356

SECURITY UPDATE: wrong handler on internal redirect from a CGI program - debian/patches/CVE-2026-42356.patch: do not propagate the trusted content-type flag to the target of an internal redirect in apinternalredirecthandler in modules/http/httprequest.c. - CVE-2026-42356...

3.7CVSS5.9AI score0.00422EPSS
SaveExploits1References2
NVD
NVD•added 2026/10/13 10:17 a.m.•12 views

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

6.8CVSS0.00109EPSS
SaveExploits0References1
osv_suse
osv_suse•added 2026/10/13 9:33 a.m.•5 views

SUSE-SU-2026:24318-1 Security update for docker

This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265782. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allow...

9.6CVSS6.8AI score0.01834EPSS
SaveExploits1References12
EUVD
EUVD•added 2026/10/13 9:18 a.m.•11 views

EUVD-2026-98393

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

6.8CVSS5.7AI score0.00109EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/10/13 9:18 a.m.•11 views

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

6.8CVSS5.7AI score0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/10/13 9:18 a.m.•45 views

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

6.8CVSS0.00109EPSS
SaveExploits0References1
CVE
CVE•added 2026/10/13 9:18 a.m.•26 views

CVE-2026-85115

A vulnerability exists in the .NET Client Library for SIMATIC S7 Webserver API (all versions

6.8CVSS5.7AI score0.00109EPSS
SaveExploits0References1
osv_bit
osv_bit•added 2026/10/13 6:50 a.m.•15 views

BIT-GHOST-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

4CVSS5.7AI score0.00298EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux•added 2026/10/13 6:31 a.m.•11 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.37 security and extras update

Red Hat OpenShift Container Platform release 4.21.37 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

7.5CVSS6.1AI score0.0084EPSS
SaveExploits0References2
NVD
NVD•added 2026/10/13 6:16 a.m.•14 views

CVE-2026-108971

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

10CVSS0.00225EPSS
SaveExploits0References6
CVE
CVE•added 2026/10/13 5:45 a.m.•53 views

CVE-2026-108971

A flaw exists in the D-Link DCS-930L (firmware version B1.08B4 ) within the Emergency HTTP Recovery Server component. Specifically, the mpfd_decode function of the bootloader_region.bin file fails to properly verify cryptographic signatures when the firmware argument is manipulated. This vulnerab...

10CVSS8.1AI score0.00225EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/10/13 5:45 a.m.•14 views

EUVD-2026-98294

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

10CVSS8.1AI score0.00225EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment•added 2026/10/13 5:45 a.m.•11 views

CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

10CVSS8.1AI score0.00225EPSS
SaveExploits0References6
Cvelist
Cvelist•added 2026/10/13 5:45 a.m.•108 views

CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

10CVSS0.00225EPSS
SaveExploits0References6
Mageia
Mageia•added 2026/10/13 1:20 a.m.•27 views

Updated golang packages fix security vulnerabilities

net/http: HTTP/2 server crash due to HPACK encoder race net/http: HTTP/2 server memory exhaustion due to Trailer headers crypto/tls: reject malformed ECH outer extension references cmd/go: checksum bypass for golang.org/fips140 cmd/go: checksum database bypass for golang.org/toolchain...

9.1CVSS6AI score0.00627EPSS
SaveExploits0References2
osv_mgasa
osv_mgasa•added 2026/10/13 1:20 a.m.•34 views

MGASA-2026-0497 Updated golang packages fix security vulnerabilities

net/http: HTTP/2 server crash due to HPACK encoder race net/http: HTTP/2 server memory exhaustion due to Trailer headers crypto/tls: reject malformed ECH outer extension references cmd/go: checksum bypass for golang.org/fips140 cmd/go: checksum database bypass for golang.org/toolchain...

9.1CVSS6AI score0.00627EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/13 12:37 a.m.•18 views

CLEANSTART-2026-QO55945 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...

CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details...

7.5CVSS5.9AI score0.00414EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/13 12:37 a.m.•23 views

CLEANSTART-2026-WY73031 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...

9.1CVSS5.8AI score0.00622EPSS
SaveExploits0References3
Rows per page
Query Builder