Lucene search
+L

12389 matches found

OSV
OSV
added 2026/07/03 7:16 a.m.11 views

ALPINE-CVE-2026-9545

In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker's impostor machine - without a valid certificate. When libcurl returns to the hostname the second time with a cached SSL...

7.5CVSS5.9AI score0.00268EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2026/07/03 6:17 a.m.12 views

CVE-2026-9545

In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker's impostor machine - without a valid certificate. When libcurl returns to the hostname the second time with a cached SSL...

7.5CVSS5.9AI score0.00268EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/07/03 6:17 a.m.12 views

EUVD-2026-41493

In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker's impostor machine - without a valid certificate. When libcurl returns to the hostname the second time with a cached SSL...

5.8AI score0.00268EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/07/02 9:13 p.m.25 views

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING

Summary The fix for CVE-2026-46339 unauthenticated RCE via unprotected MCP plugin routes introduced a local-only access gate in src/dashboardGuard.js that restricts spawn-capable routes /api/mcp/, /api/tunnel/, /api/cli-tools/ to loopback requests. The gate determines "local" by inspecting the Ho...

10CVSS6.6AI score0.02395EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2026/07/02 9:13 p.m.13 views

User Impersonation

Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to User Impersonation via the isLocalRequest function. An attacker can gain unauthorized access to restricted routes and interact with child processes by spoofing the Host and Orig...

8.3CVSS6AI score0.00231EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/02 2:50 p.m.64 views

CVE-2026-55115

The CVE-2026-55115 entry describes a Server-Side Request Forgery (SSRF) in the UniFi Protect Application that could allow a low-privilege, network-accessible attacker to escalate privileges on the host. The available sources state the affected component as the UniFi Protect Application and identi...

9.9CVSS5.8AI score0.00523EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/07/01 11:43 p.m.6 views

MINI-QVM8-9QC4-PHQ3

Bulletin has no description...

6.9CVSS6.5AI score0.00223EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/01 8:21 p.m.17 views

CVE-2026-7374 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester, docker-machine-driver-harvester...

9.9CVSS7.6AI score0.00596EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/01 8:21 p.m.28 views

GHSA-7JCP-V9W4-WJMG vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester, docker-machine-driver-harvester...

5.4AI score
SaveExploits0
Wolfi
Wolfi
added 2026/07/01 8:21 p.m.24 views

GHSA-7JCP-V9W4-WJMG vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 2026/07/01 8:21 p.m.24 views

CVE-2026-7374 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

9.9CVSS5.8AI score0.00596EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/07/01 7:51 p.m.13 views

CVE-2026-53345

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. This vulnerability occurs when a virtual machine is shutting down, and KVM attempts to mark memory as dirty without an active virtual CPU. This can lead to a memory leak, impacting system stability and resource...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/01 6:34 p.m.11 views

Malicious code in base65-85x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94610a3e8258b4f3f141cda2ade7a2bdeafbf9f8c1a9251d72c8b0c6dd4cff0 Package name base65-85x impersonates the widely-used base-x encoding library, with package.json copying base-x's homepage, bugs.url, and repository.u...

5.5AI score
SaveExploits0References2
NVD
NVD
added 2026/07/01 5:16 p.m.26 views

CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS0.00324EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/01 5:16 p.m.6 views

UBUNTU-CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/01 4:21 p.m.42 views

CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS0.00324EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/01 4:21 p.m.6 views

CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.9AI score
SaveExploits0References3
CVE
CVE
added 2026/07/01 4:21 p.m.93 views

CVE-2026-56149

CVE-2026-56149 affects Elasticsearch and stems from Allocation of Resources Without Limits or Throttling (CWE-770), enabling a denial of service via Excessive memory allocation when a user with privileges to manage trained models submits a crafted machine learning request. Affected versions inclu...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/01 4:21 p.m.16 views

EUVD-2026-41072

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/01 4:21 p.m.49 views

CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder