Lucene search
+L

50032 matches found

NVD
NVD
added 2026/09/09 11:17 a.m.7 views

CVE-2026-54048

Specifying tblproperties'avro.schema.url'=' http://...' or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error...

5.3CVSS0.00583EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/09 11:16 a.m.8 views

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

7.5CVSS5.8AI score0.00798EPSS
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/09 7:37 a.m.8 views

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to ...

9.8CVSS7.7AI score0.04581EPSS
SaveExploits2Affected Software1
RedHat Linux
RedHat Linux
added 2026/09/09 7:28 a.m.8 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.46 security and extras update

Red Hat OpenShift Container Platform release 4.19.46 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

7.5CVSS5.8AI score0.00781EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/09 2:16 a.m.6 views

UBUNTU-CVE-2026-87724

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

6.5CVSS5.7AI score0.0026EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/09 2:16 a.m.9 views

CVE-2026-87724

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

6.5CVSS5.7AI score0.0026EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/09/09 1:05 a.m.10 views

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

7.5CVSS5.8AI score0.00798EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/09 1:05 a.m.9 views

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.46 security update

Red Hat build of MicroShift release 4.19.46 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

7.5CVSS5.8AI score0.00798EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Adobe Experience Manager 6.5.0 < 6.5.3 / 2026.7.0 < 2026.8.0 Multiple Vulnerabilities (APSB26-98)

The version of Adobe Experience Manager installed on the remote host is prior to 2026.8.0, 6.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-98 advisory. - Critical XXE in Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1 and tika-parsers...

9.9CVSS7.5AI score0.87688EPSS
SaveExploits6References110
Cvelist
Cvelist
added 2026/09/09 12:00 a.m.27 views

CVE-2026-39020

An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file...

5.5CVSS0.001EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.12 views

AlmaLinux 10 : glib2 (ALSA-2026:64799)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64799 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block directly...

7.1CVSS6.2AI score0.00245EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-82055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted...

7.1CVSS5.4AI score0.00289EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-19614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The API is prone to XML external entity XXE injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3. CVE-2026-19614 Not...

5.3CVSS5.7AI score0.00232EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.20 views

RHEL 10 : gstreamer1-plugins-good (RHSA-2026:65959)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65959 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages...

7.5CVSS7.3AI score0.00883EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2026/09/09 12:00 a.m.7 views

The vulnerability of the `ieee80211_parse_tx_radiotap()` function in the `net/mac80211/tx.c` module of the `mac80211` stack implementation in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...

7.6CVSS6.8AI score0.00231EPSS
SaveExploits0References10Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-106757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106757 advisory. A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length...

6.6CVSS5.9AI score0.00131EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.10 views

PT-2026-89672

This update for strongswan fixes the following issues: - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7...

7.5CVSS5.5AI score0.0067EPSS
SaveExploits0References37
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.8 views

TencentOS Server 4: iscsi-initiator-utils (TSSA-2026:0983)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0983 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

6.5CVSS5.8AI score0.00206EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.10 views

PT-2026-88990

league/commonmark versions before 2.6.0 contain polynomial time complexity vulnerabilities in Markdown parsing that allow attackers to cause denial of service. Attackers can submit carefully crafted Markdown inputs designed to trigger worst-case performance, and sending multiple requests in...

8.7CVSS5.7AI score0.00278EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/09 12:00 a.m.14 views

CVE-2026-39020

Wings3D v.2.4.1 is vulnerable to a denial of service when a local attacker supplies a crafted Wavefront OBJ file for processing. The CVSS 3.1 score is 5.5 (MEDIUM) , with local attack vector, low complexity, no privileges required, and user interaction required, impacting only availability. The v...

5.5CVSS5.7AI score0.001EPSS
SaveExploits0References1
Rows per page
Query Builder