Lucene search
+L

4575 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/19 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-63800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pNFS: Fix use-after-free in pnfsupdatelayout When hitting the NFSLAYOUTRETURN branch in pnfsupdatelayout, the code calls pnfspreparetoretrylayoutgetlo. If it...

9.8CVSS6.2AI score0.00527EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/19 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-53399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to...

9.8CVSS5.6AI score0.00543EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•26 views

PT-2026-61116

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the pNFS component. When the NFS LAYOUT RETURN branch is triggered within the pnfs update layout function, the system calls pnfs prepare to retry...

9.8CVSS5.7AI score0.00527EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•12 views

Fedora 43 : log4cxx (2026-31a8569c4b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-31a8569c4b advisory. Update to log4cxx 1.7.0. Fixes CVE-2026-40023: XMLLayout did not escape characters forbidden by the XML 1.0 specification, which could cause conforming XML...

6.3CVSS5.5AI score0.00981EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2026/07/17 12:29 p.m.•41 views

Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS Amazon Web Services IoT Internet of Things policy flaw that could turn one compromised device into a remote-control skeleton key for many others in the same region, with access to cameras, maps, and Wi‑Fi passwords. A...

6AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/07/16 6:03 p.m.•24 views

SUSE CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

8.1CVSS6.3AI score0.00894EPSS
SaveExploits6References12
UbuntuCve
UbuntuCve
•added 2026/07/16 12:00 a.m.•21 views

CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

9.2CVSS7.8AI score0.00894EPSS
SaveExploits6References9
OSV
OSV
•added 2026/07/15 7:52 p.m.•17 views

DRUPAL-CORE-2026-012

The Layout Builder module doesn't sufficiently sanitize block labels in certain scenarios, which can lead to a cross-site scripting XSS vulnerability. This is mitigated by the fact that both the attacker and the targeted user need to be using the Layout Builder editing interface...

5.4CVSS6AI score0.00226EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/15 3:16 p.m.•21 views

ALPINE-CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

9.2CVSS8.7AI score0.00894EPSS
SaveExploits6References1
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•45 views

PT-2026-60391

Name of the Vulnerable Software and Affected Versions Drupal core versions 0.0.0 through 10.6.13 Drupal core versions 11.3.0 through 11.3.14 Drupal core versions 11.4.0 through 11.4.4 Drupal core versions 0.0.0 through 11.0.x Drupal core versions 0.0.0 through 11.1.x Drupal core versions 0.0.0...

5.2AI score0.00226EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/07/15 12:00 a.m.•19 views

Drupal 10.6.x < 10.6.13 / 11.3.x < 11.3.14 / 11.4.x < 11.4.4 Multiple Vulnerabilities (drupal-2026-07-15)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.6.x prior to 10.6.13, 11.3.x prior to 11.3.14, or 11.4.x prior to 11.4.4. It is, therefore, affected by multiple vulnerabilities. - Drupal core 11.2 and above integrate the HTMX JavaScript librar...

5.4CVSS5.2AI score0.00226EPSS
SaveExploits0References12
Drupal
Drupal
•added 2026/07/15 12:00 a.m.•30 views

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012

The Layout Builder module doesn't sufficiently sanitize block labels in certain scenarios, which can lead to a cross-site scripting XSS vulnerability. This is mitigated by the fact that both the attacker and the targeted user need to be using the Layout Builder editing interface...

5.4CVSS6AI score0.00226EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/07/14 9:00 p.m.•6 views

Cross-site Scripting (XSS)

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Layout Builder module, which does not sufficiently sanitize block labels in certain scenarios. ...

5.4CVSS5.2AI score0.00226EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/14 12:31 a.m.•16 views

EUVD-2026-43553

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits1References6
NVD
NVD
•added 2026/07/13 10:16 p.m.•19 views

CVE-2026-15598

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS0.00424EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/07/13 10:00 p.m.•10 views

CVE-2026-15598 antv layout object.js setNestedValue prototype pollution

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits1References5
CVE
CVE
•added 2026/07/13 10:00 p.m.•36 views

CVE-2026-15598

The CVE affects antv layout 2.0.0, specifically the setNestedValue function in lib/util/object.js. A manipulation of the argument path can lead to prototype pollution, allowing remote modification of object prototype attributes. The advisory notes the attack can be launched remotely, with low att...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/07/13 10:00 p.m.•13 views

CVE-2026-15598

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2026/07/13 10:00 p.m.•44 views

CVE-2026-15598 antv layout object.js setNestedValue prototype pollution

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS0.00424EPSS
SaveExploits1References5
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•27 views

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. PatchesThis has been fixed in pypdf==6.13.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder