Lucene search
+L

4569 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•12 views

Fedora 43 : log4cxx (2026-31a8569c4b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-31a8569c4b advisory. Update to log4cxx 1.7.0. Fixes CVE-2026-40023: XMLLayout did not escape characters forbidden by the XML 1.0 specification, which could cause conforming XML...

6.3CVSS5.5AI score0.00981EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2026/07/17 12:29 p.m.•41 views

Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS Amazon Web Services IoT Internet of Things policy flaw that could turn one compromised device into a remote-control skeleton key for many others in the same region, with access to cameras, maps, and Wi‑Fi passwords. A...

6AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/07/16 6:03 p.m.•24 views

SUSE CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

8.1CVSS6.3AI score0.00894EPSS
SaveExploits6References12
UbuntuCve
UbuntuCve
•added 2026/07/16 12:00 a.m.•21 views

CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

9.2CVSS7.8AI score0.00894EPSS
SaveExploits6References9
OSV
OSV
•added 2026/07/15 7:52 p.m.•17 views

DRUPAL-CORE-2026-012

The Layout Builder module doesn't sufficiently sanitize block labels in certain scenarios, which can lead to a cross-site scripting XSS vulnerability. This is mitigated by the fact that both the attacker and the targeted user need to be using the Layout Builder editing interface...

5.4CVSS6AI score0.00226EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/15 3:16 p.m.•21 views

ALPINE-CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

9.2CVSS8.7AI score0.00894EPSS
SaveExploits6References1
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•45 views

PT-2026-60391

Name of the Vulnerable Software and Affected Versions Drupal core versions 0.0.0 through 10.6.13 Drupal core versions 11.3.0 through 11.3.14 Drupal core versions 11.4.0 through 11.4.4 Drupal core versions 0.0.0 through 11.0.x Drupal core versions 0.0.0 through 11.1.x Drupal core versions 0.0.0...

5.2AI score0.00226EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/07/15 12:00 a.m.•19 views

Drupal 10.6.x < 10.6.13 / 11.3.x < 11.3.14 / 11.4.x < 11.4.4 Multiple Vulnerabilities (drupal-2026-07-15)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.6.x prior to 10.6.13, 11.3.x prior to 11.3.14, or 11.4.x prior to 11.4.4. It is, therefore, affected by multiple vulnerabilities. - Drupal core 11.2 and above integrate the HTMX JavaScript librar...

5.4CVSS5.2AI score0.00226EPSS
SaveExploits0References12
Drupal
Drupal
•added 2026/07/15 12:00 a.m.•30 views

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012

The Layout Builder module doesn't sufficiently sanitize block labels in certain scenarios, which can lead to a cross-site scripting XSS vulnerability. This is mitigated by the fact that both the attacker and the targeted user need to be using the Layout Builder editing interface...

5.4CVSS6AI score0.00226EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/07/14 9:00 p.m.•6 views

Cross-site Scripting (XSS)

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Layout Builder module, which does not sufficiently sanitize block labels in certain scenarios. ...

5.4CVSS5.2AI score0.00226EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/14 12:31 a.m.•16 views

EUVD-2026-43553

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits1References6
NVD
NVD
•added 2026/07/13 10:16 p.m.•19 views

CVE-2026-15598

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS0.00424EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/07/13 10:00 p.m.•10 views

CVE-2026-15598 antv layout object.js setNestedValue prototype pollution

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits1References5
CVE
CVE
•added 2026/07/13 10:00 p.m.•36 views

CVE-2026-15598

The CVE affects antv layout 2.0.0, specifically the setNestedValue function in lib/util/object.js. A manipulation of the argument path can lead to prototype pollution, allowing remote modification of object prototype attributes. The advisory notes the attack can be launched remotely, with low att...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/07/13 10:00 p.m.•44 views

CVE-2026-15598 antv layout object.js setNestedValue prototype pollution

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS0.00424EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/07/13 10:00 p.m.•13 views

CVE-2026-15598

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•27 views

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. PatchesThis has been fixed in pypdf==6.13.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/07/13 3:46 p.m.•12 views

PYSEC-2026-3009 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. Patches This has been fixed in pypdf==6.13.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References7
OSV
OSV
•added 2026/07/13 3:46 p.m.•11 views

PYSEC-2026-3016 pypdf: Possible large memory usage for large offsets for layout mode text

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. Patches This has been fixed in pypdf==6.12.0. Workarounds If developers are unable to immediately upgrade, they should...

4.8CVSS6AI score0.00179EPSS
SaveExploits0References7
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•23 views

pypdf: Possible large memory usage for large offsets for layout mode text

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. PatchesThis has been fixed in pypdf==6.12.0. WorkaroundsIf developers are unable to immediately upgrade, they should consider...

5.5CVSS6AI score0.00179EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder