Lucene search
+L

12385 matches found

Snyk
Snyk
added 2026/07/02 9:13 p.m.13 views

User Impersonation

Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to User Impersonation via the isLocalRequest function. An attacker can gain unauthorized access to restricted routes and interact with child processes by spoofing the Host and Orig...

8.3CVSS6AI score0.00231EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/02 2:50 p.m.64 views

CVE-2026-55115

The CVE-2026-55115 entry describes a Server-Side Request Forgery (SSRF) in the UniFi Protect Application that could allow a low-privilege, network-accessible attacker to escalate privileges on the host. The available sources state the affected component as the UniFi Protect Application and identi...

9.9CVSS5.8AI score0.00523EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/07/01 11:43 p.m.6 views

MINI-QVM8-9QC4-PHQ3

Bulletin has no description...

6.9CVSS6.5AI score0.00223EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/01 8:21 p.m.17 views

CVE-2026-7374 vulnerabilities

Vulnerabilities for packages: harvester-fips, docker-machine-driver-harvester, harvester...

9.9CVSS7.6AI score0.00596EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/01 8:21 p.m.28 views

GHSA-7JCP-V9W4-WJMG vulnerabilities

Vulnerabilities for packages: harvester-fips, docker-machine-driver-harvester, harvester...

5.4AI score
SaveExploits0
Wolfi
Wolfi
added 2026/07/01 8:21 p.m.24 views

CVE-2026-7374 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

9.9CVSS5.8AI score0.00596EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/07/01 8:21 p.m.24 views

GHSA-7JCP-V9W4-WJMG vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/07/01 7:51 p.m.13 views

CVE-2026-53345

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. This vulnerability occurs when a virtual machine is shutting down, and KVM attempts to mark memory as dirty without an active virtual CPU. This can lead to a memory leak, impacting system stability and resource...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/01 6:34 p.m.11 views

Malicious code in base65-85x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94610a3e8258b4f3f141cda2ade7a2bdeafbf9f8c1a9251d72c8b0c6dd4cff0 Package name base65-85x impersonates the widely-used base-x encoding library, with package.json copying base-x's homepage, bugs.url, and repository.u...

5.5AI score
SaveExploits0References2
NVD
NVD
added 2026/07/01 5:16 p.m.26 views

CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS0.00324EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/01 5:16 p.m.6 views

UBUNTU-CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/01 4:21 p.m.42 views

CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS0.00324EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/01 4:21 p.m.5 views

CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.9AI score
SaveExploits0References3
EUVD
EUVD
added 2026/07/01 4:21 p.m.16 views

EUVD-2026-41072

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/01 4:21 p.m.93 views

CVE-2026-56149

CVE-2026-56149 affects Elasticsearch and stems from Allocation of Resources Without Limits or Throttling (CWE-770), enabling a denial of service via Excessive memory allocation when a user with privileges to manage trained models submits a crafted machine learning request. Affected versions inclu...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/01 4:21 p.m.49 views

CVE-2026-56149

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the...

4.9CVSS5.8AI score0.00324EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/07/01 2:16 p.m.13 views

CVE-2026-53345

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

5.5CVSS0.00114EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/01 1:32 p.m.45 views

CVE-2026-53345

CVE-2026-53345 affects the Linux kernel KVM implementation. The issue arises when marking a guest page dirty: a warning is emitted about not having a running vCPU unless the VM’s refcount is non-zero, which could leak memory for SEV-ES guests. Connected advisories show Debian/Ubuntu/RootOS patche...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/01 1:32 p.m.7 views

CVE-2026-53345

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

5.8AI score0.00114EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2026/07/01 1:32 p.m.10 views

CVE-2026-53345

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain about not having a running/loaded vCPU if and only if the VM is still alive, i.e. its refcount is non-zero. This will...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0
Rows per page
Query Builder