Lucene search
K

448 matches found

Circl
Circl
added 2026/05/27 5:17 a.m.8 views

CVE-2026-8450

creationtimestamp| type| source ---|---|--- 2026-05-27 05:17:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqxmuwt222 2026-05-27 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116645011565190190 2026-05-27 06:00:29+00:00| seen|...

9.1CVSS5.8AI score0.00234EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/11 9:31 p.m.6 views

EUVD-2026-29300

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory...

5.8AI score0.00048EPSS
Exploits0References9
Cvelist
Cvelist
added 2026/05/11 8:7 p.m.27 views

CVE-2026-28996

A race condition was addressed with additional validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to access sensitive user data...

0.00011EPSS
Exploits0References7
Circl
Circl
added 2026/04/11 1:30 a.m.0 views

CVE-2026-4149

creationtimestamp| type| source ---|---|--- 2026-04-11 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116383483774809251 2026-04-11 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mj6osz6g672t 2026-04-11 03:06:41+00:00| seen|...

10CVSS8.7AI score0.01052EPSS
Exploits0References6
Circl
Circl
added 2026/04/10 2:50 a.m.1 views

CVE-2026-5994

creationtimestamp| type| source ---|---|--- 2026-04-10 02:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4ct7u4dc2o 2026-04-10 03:17:30+00:00| published-proof-of-concept| Telegram/Fvik4eX2xz-nzJuB7IaHT1kkv6IwgWipFYk1oHJ2HiAA0EI 2026-04-10 05:01:00+00:00| seen|...

10CVSS7.3AI score0.01221EPSS
Exploits0References4
Circl
Circl
added 2026/04/10 1:30 a.m.0 views

CVE-2026-5995

creationtimestamp| type| source ---|---|--- 2026-04-10 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116377821414965974 2026-04-10 01:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mj46e3334v2r 2026-04-10 02:55:37+00:00| seen|...

10CVSS7.3AI score0.01221EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/25 12:32 a.m.5 views

CVE-2026-28876

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to access sensitive user da...

5.8AI score0.00057EPSS
Exploits0References7
NVD
NVD
added 2026/03/05 4:16 p.m.4 views

CVE-2026-30792

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Strategy sync, HTTP API client, config options engine modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...

9.1CVSS0.0007EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/05 3:27 p.m.3 views

CVE-2026-30795 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop modules allows Sniffing Attacks. This vulnerability is associated with program files src/hbbshttp/sync.Rs and program routine...

8.7CVSS5.9AI score0.00023EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/05 2:47 p.m.32 views

CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS0.00024EPSS
Exploits1References3
CNVD
CNVD
added 2026/02/11 12:0 a.m.2 views

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14675)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from improper neutralization of...

6.5CVSS6.1AI score0.00036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:17 a.m.5 views

CVE-2019-2320

Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053...

10CVSS7.2AI score0.0033EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:0 a.m.3 views

CVE-2020-7224

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load...

9.8CVSS6.7AI score0.00623EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.3 views

KDE Connect 安全漏洞

KDE Connect is a software from the KDE community that connects cell phones and computers. A security vulnerability exists in versions of KDE Connect prior to 2025-11-28 that stems from an unassociated device ID and could affect KDE Connect clients on multiple platforms...

4.7CVSS6.3AI score0.00022EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/11/22 10:31 p.m.5 views

CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

2.7CVSS6.8AI score0.00018EPSS
Exploits0References1
OSV
OSV
added 2025/11/21 11:15 p.m.1 views

UBUNTU-CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

2.7CVSS5.8AI score0.00018EPSS
Exploits0References4
CNVD
CNVD
added 2025/11/18 12:0 a.m.2 views

WordPress WP Content Pilot plugin missing license vulnerability

WordPress WP Content Pilot plugin is an automated content capture plugin designed for WordPress that supports grabbing content from multiple platforms e.g. Amazon, Pinterest, Instagram, etc. and posting it to the site automatically. A lack of authorization vulnerability exists in the WordPress WP...

5.4CVSS6.8AI score0.00051EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/11/04 1:15 a.m.2 views

CVE-2025-43433

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption...

8.8CVSS6.6AI score0.00076EPSS
Exploits0
Cvelist
Cvelist
added 2025/10/27 8:37 p.m.3 views

CVE-2025-62725 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...

8.9CVSS0.00044EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-7544

Malware in sbrugna...

10CVSS6AI score0.07368EPSS
Exploits0References8
Rows per page
Query Builder