Lucene search
+L

91837 matches found

OSV
OSV
added 2026/09/08 11:17 p.m.8 views

AZL-100926 CVE-2026-86564 affecting package dpdk 23.11.3-1

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

3.3CVSS5.6AI score0.00103EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 11:17 p.m.7 views

DEBIAN-CVE-2026-86564

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

3.3CVSS5.6AI score0.00103EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 11:17 p.m.5 views

UBUNTU-CVE-2026-86564

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

3.3CVSS5.7AI score0.00103EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/08 11:17 p.m.7 views

CVE-2026-86564

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

3.3CVSS5.7AI score0.00103EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/08 11:09 p.m.6 views

CVE-2026-87063

A flaw was found in konflux-operator-tasks. The Continuous Integration CI process installs the tkn command-line interface CLI from a network download without verifying its integrity through checksums or digital signatures. This vulnerability could allow a compromised distribution channel to...

2.6CVSS5.8AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/08 11:08 p.m.5 views

CVE-2026-87061

A flaw was found in olm-operator-konflux-sample. The bundle-hack/updatebundle.sh script lacks mechanisms to stop execution immediately upon encountering an error. This oversight allows critical data processing steps, such as those involving skopeo or jq commands, to fail silently and proceed with...

2.6CVSS5.8AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/08 11:08 p.m.6 views

CVE-2026-87052

A flaw was found in operator-foundry. The absence of automated dependency-update and vulnerability-scanning configurations in the repository increases the risk of undetected security vulnerabilities. This lack of automated security checks could potentially lead to the inclusion of known vulnerabl...

2.6CVSS5.7AI score
SaveExploits0References3
CVE
CVE
added 2026/09/08 11:07 p.m.15 views

CVE-2026-86564

A flaw in DPDK lib/vhost results from missing length validation before reading command_data in the virtio-net control-queue handler , which can cause an out-of-bounds read and a host process crash . The CVSS v3.1 score is 3.3 (LOW) , with a local attack vector, low privileges required, no user in...

3.3CVSS5.6AI score0.00103EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/08 11:07 p.m.26 views

CVE-2026-86564 Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

3.3CVSS0.00103EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/08 10:22 p.m.33 views

CVE-2026-53639

Sylius (Open Source eCommerce Framework on Symfony) versions 2.0.0 through before 2.0.18, 2.1.15, and 2.2.6 are affected by an IDOR on Shop Payment Request API endpoints. The GET/PUT /api/v2/shop/payment-requests/{hash} and POST /api/v2/shop/orders/{tokenValue}/payment-requests endpoints perform ...

6.3CVSS5.7AI score0.00543EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 10:19 p.m.6 views

CVE-2026-86085

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the...

5.1CVSS0.00255EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/08 9:55 p.m.7 views

CVE-2026-81904 Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

6.3CVSS5.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/08 9:55 p.m.30 views

CVE-2026-81904 Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

6.3CVSS0.00284EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 9:55 p.m.14 views

CVE-2026-81904

Concrete CMS below 9.5.3 is affected by a missing authorization flaw in the asset registration for sub-blocks within a Stack , Container , or layout area. The system registered view assets for every sub-block without verifying whether the requesting user had permission to view that sub-block, all...

6.3CVSS5.8AI score0.00284EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 9:20 p.m.19 views

CVE-2026-86085

n8n (open-source workflow automation platform) prior to 2.37.7 and 2.38.2 suffered a cross-tenant information disclosure vulnerability in its role assignment endpoints (/rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members). The affected controller (packages/cli/src/c...

5.1CVSS5.7AI score0.00255EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/09/08 9:20 p.m.3 views

CVE-2026-86085 n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the...

5.1CVSS5.7AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/08 9:20 p.m.31 views

CVE-2026-86085 n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the...

5.1CVSS0.00255EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/08 9:19 p.m.8 views

CVE-2026-86993 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming...

5.9CVSS5.7AI score0.00264EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/08 9:19 p.m.30 views

CVE-2026-86993 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming...

5.9CVSS0.00264EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/08 9:19 p.m.6 views

CVE-2026-86993 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming...

5.9CVSS5.7AI score
SaveExploits0References6
Rows per page
Query Builder