Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 11 hours ago5 views

CVE-2026-56379

A flaw was found in ImageMagick. This command injection vulnerability in the SVG Scalable Vector Graphics decoder allows a remote attacker to craft malicious SVG files. When these files are processed, the injected Magick Vector Graphics MVG commands can execute, potentially leading to arbitrary...

8.1CVSS6.6AI score
Exploits0References5
NVD
NVD
added 4 days ago13 views

CVE-2026-56307

Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudflare/workerd path that allows authenticated attackers to cause duplicate-page loops and make later rows unreachable. Attackers with app.readdevices access can exploit...

5.3CVSS0.00238EPSS
Exploits0References2
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-38124

Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudflare/workerd path that allows authenticated attackers to cause duplicate-page loops and make later rows unreachable. Attackers with app.readdevices access can exploit...

5.3CVSS5.9AI score0.00238EPSS
Exploits0References2
Cvelist
Cvelist
added 4 days ago30 views

CVE-2026-56307 Cap-go - Broken Cursor Pagination in /private/devices Endpoint

Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudflare/workerd path that allows authenticated attackers to cause duplicate-page loops and make later rows unreachable. Attackers with app.readdevices access can exploit...

5.3CVSS0.00238EPSS
Exploits0References2
CVE
CVE
added 4 days ago14 views

CVE-2026-56307

Cap-go before 12.128.12 has a broken cursor pagination vulnerability in the /private/devices endpoint of the Cloudflare/workerd path. Authenticated attackers with app.read_devices can exploit non-advancing cursor filters to trigger infinite pagination loops, causing duplicate pages and making lat...

5.3CVSS5.9AI score0.00238EPSS
Exploits0References2
OSV
OSV
added 2025/08/20 9:11 a.m.2 views

CLSA-2025-1755681073 Update of systemd

Fix deleting job when iSCSi used - /dev/lve is added into the list of private devices...

5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.4 views

CVE-2022-20290

In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

5.5CVSS5.9AI score0.00096EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/08/12 12:0 a.m.3 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android 13 suffers from a security vulnerability that stems from a privilege bypass in Midi, with the potential to learn about private midi devices, which could lead to local privilege escalation...

5.5CVSS5.9AI score0.00096EPSS
Exploits0References2
Rows per page
Query Builder