Lucene search
+L

22302 matches found

attackerkb
attackerkb
•added 2026/07/17 12:07 a.m.•16 views

CVE-2026-62237

Grav before 2.0.4 contains a regular expression denial of service ReDoS vulnerability in the regexreplace filter and function, which are allowlisted in the Twig content sandbox. When Twig processing in page content is enabled security.twigcontent.processenabled: true, disabled by default, an...

6.5CVSS6.1AI score0.00436EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/17 12:07 a.m.•41 views

CVE-2026-62237

CVE-2026-62237 affects Grav before 2.0.4. The vulnerability is a ReDoS in the regex_replace filter and function that are allowlisted in the Twig content sandbox. When Twig processing of page content is enabled (security.twig_content.process_enabled: true), an authenticated page editor can supply ...

6.5CVSS6.1AI score0.00436EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/17 12:07 a.m.•19 views

CVE-2026-62237 Grav < 2.0.4 ReDoS via regex_replace in Sandbox

Grav before 2.0.4 contains a regular expression denial of service ReDoS vulnerability in the regexreplace filter and function, which are allowlisted in the Twig content sandbox. When Twig processing in page content is enabled security.twigcontent.processenabled: true, disabled by default, an...

6CVSS5.3AI score0.00381EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/17 12:00 a.m.•21 views

PT-2026-60736

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by naming an arbitrarily high gas price. When the mpp Elixir library is configured as fee payer fee payer: true, MPP.Tempo.Transaction.cosign...

8.3CVSS5.5AI score0.00524EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/17 12:00 a.m.•12 views

CVE-2026-42168

django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmdreceive and cmdsend fields on the Partner model. These fields are passed directly to os.system in pyas2/utils.py without sanitization, allowing an authenticated admin user to execute arbitrary commands on the server when ...

9.1CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/07/17 12:00 a.m.•29 views

CVE-2025-51677

An issue was discovered in openRISC OR1200 commit 83ac6b where an output mismatch exists between the RTL and the netlist of the OR1200 CPU output port. This discrepancy can lead to unexpected behavior . No specific exploit details or remediation steps are provided in the documents.

9.1CVSS5.4AI score0.00626EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•20 views

Microsoft Edge (Chromium) < 150.0.4078.83 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.83. It is, therefore, affected by multiple vulnerabilities as referenced in the July 17, 2026 advisory. - Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker w...

9.6CVSS6.2AI score0.00413EPSS
SaveExploits1References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/17 12:00 a.m.•2 views

CVE-2026-15995: Concurrent Execution using Shared Resource with Improper Synchronization

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

5.4CVSS5.8AI score0.00167EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•144 views

The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

5.3CVSS6.4AI score0.0032EPSS
SaveExploits0References11Affected Software6
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•16 views

SUSE SLES16: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2026:22646-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22646-1 advisory. This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper...

9.1CVSS6.4AI score0.04091EPSS
SaveExploits1References19
Positive Technologies
Positive Technologies
•added 2026/07/17 12:00 a.m.•22 views

PT-2026-60647

Name of the Vulnerable Software and Affected Versions Grav versions prior to 2.0.4 Description A regular expression denial of service ReDoS exists in the regex replace filter and function, which are allowlisted in the Twig content sandbox. When Twig processing in page content is enabled via the...

6.5CVSS5.6AI score0.00436EPSS
SaveExploits0References12
Kaspersky
Kaspersky
•added 2026/07/17 12:00 a.m.•17 views

KLA91156 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in Media can be exploited...

9.6CVSS7.1AI score0.00413EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/07/17 12:00 a.m.•23 views

PT-2026-60761

HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. An attacker may use the contents of error messages to help launch another ,more focused attack...

5.3CVSS5.2AI score0.0033EPSS
SaveExploits0References2
Redos
Redos
•added 2026/07/17 12:00 a.m.•12 views

ROS-20260717-73-0011

The vulnerability of Google Chrome browsers’ graphics processing units is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created HTML page...

8.8CVSS7.1AI score0.00773EPSS
SaveExploits0
Redos
Redos
•added 2026/07/17 12:00 a.m.•12 views

ROS-20260717-73-0028

The vulnerability of the Metrics component in Google Chrome browser relates to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

8.8CVSS8.3AI score0.01118EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/07/16 11:44 p.m.•61 views

CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...

7.5CVSS0.00369EPSS
SaveExploits1References1
OSV
OSV
•added 2026/07/16 11:44 p.m.•18 views

CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...

7.5CVSS5.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/16 7:48 p.m.•50 views

CVE-2026-15352 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference

A vulnerability exists in the Health & Safety HS application of NASA's Core Flight System cFS. The flaw allows the application to crash via segmentation fault when processing a routine Housekeeping Telemetry request, leading to denial of service...

8.2CVSS0.00609EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/16 7:34 p.m.•17 views

CVE-2026-62963 Centrifugo: Decompression bomb DoS via permessage-deflate in unidirectional WebSocket transport

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.4, Centrifugo unidirectional WebSocket transport with uniwebsocket.compression enabled enforced uniwebsocket.messagesizelimit against compressed wire-frame length in internal/websocket/conn.go advanceFrame, but...

8.7CVSS5.3AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/07/16 2:35 p.m.•20 views

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

7.5CVSS7.3AI score0.00615EPSS
SaveExploits0References8
Rows per page
Query Builder