Lucene search
+L

29776 matches found

CNNVD
CNNVD
added 2026/06/03 12:0 a.m.16 views

ERPNext 跨站脚本漏洞

ERPNext is a set of open-source enterprise resource planning solutions developed by the Indian company ERPNext. Version 16.16.0 of ERPNext contains a cross-site scripting vulnerability. This vulnerability arises from users with project record editing privileges being able to persist arbitrary...

4.8CVSS5.1AI score0.00261EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/03 12:0 a.m.8 views

CVE-2025-60477

A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

5CVSS5.9AI score
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2026/06/03 12:0 a.m.23 views

Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: libexpat: denial of service via crafted XML input CVE-2026-45186 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the...

7.5CVSS5.8AI score0.00443EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.19 views

PT-2026-45933

A NULL pointer dereference in the gf filter pid resolve file template ex function /filter core/filter pid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

5.8AI score0.00107EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/06/02 8:34 p.m.53 views

CVE-2026-49144 BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler

BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the default HTTP handler in lib/server.js that allows unauthenticated network-adjacent attackers to read arbitrary files. Attackers can exploit the unauthenticated HTTP server bound on all interfaces to traverse outside...

7.1CVSS0.00208EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/02 2:16 p.m.24 views

CVE-2026-42795

Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file collection helpers gleamfiles, nativefiles, privatefiles in compiler-cli/src/fs.rs use followlinkstrue when walking publishable directories...

5.1CVSS0.00132EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/02 1:41 p.m.45 views

CVE-2026-42795

Gleam: Symlink following in Hex package export vulnerability (CVE-2026-42795) allows embedding files outside the project root into the generated Hex package. Root cause: file collection in compiler-cli/src/fs.rs uses follow_links(true) for publishable directories (e.g., src/, priv/) and add_path_...

5.1CVSS5.9AI score0.00132EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/02 1:41 p.m.14 views

EUVD-2026-33928

Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file collection helpers gleamfiles, nativefiles, privatefiles in compiler-cli/src/fs.rs use followlinkstrue when walking publishable directories...

5.1CVSS5.9AI score0.00132EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/02 1:41 p.m.12 views

CVE-2026-42795

Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file collection helpers gleamfiles, nativefiles, privatefiles in compiler-cli/src/fs.rs use followlinkstrue when walking publishable directories...

5.1CVSS5.9AI score0.00132EPSS
SaveExploits0References5
OSV
OSV
added 2026/06/02 1:41 p.m.18 views

EEF-CVE-2026-42795 Symlink Following in Hex Package Export Allows Embedding Files Outside Project Root

Summary Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file collection helpers gleam\files, native\files, private\files in compiler-cli/src/fs.rs use follow\linkstrue when walking publishable...

5.1CVSS6.2AI score0.00132EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/02 1:41 p.m.73 views

CVE-2026-32685

CVE-2026-32685 describes a path traversal in Gleam’s docs build process. The vulnerability arises from unvalidated handling of documentation.pages paths and sources in gleam.toml, enabling an attacker to read arbitrary local files and to write generated documentation outside the intended output d...

4.6CVSS5.9AI score0.00152EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/02 1:41 p.m.14 views

EUVD-2026-33927

Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages entries from gleam.toml are incorporated into filesystem paths without sufficient validation or...

4.6CVSS5.9AI score0.00152EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/06/02 1:41 p.m.9 views

CVE-2026-32685

Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages entries from gleam.toml are incorporated into filesystem paths without sufficient validation or...

4.6CVSS5.9AI score0.00152EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/06/02 1:41 p.m.23 views

EEF-CVE-2026-32685 Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write

Summary Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages entries from gleam.toml are incorporated into filesystem paths without sufficient validatio...

4.6CVSS6.2AI score0.00152EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/02 1:41 p.m.9 views

CVE-2026-32685 Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write

Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages entries from gleam.toml are incorporated into filesystem paths without sufficient validation or...

4.6CVSS6AI score0.00152EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2026/06/02 1:41 p.m.15 views

CVE-2026-32685 Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write

Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages entries from gleam.toml are incorporated into filesystem paths without sufficient validation or...

4.6CVSS5.9AI score0.00152EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2026/06/02 11:58 a.m.34 views

AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.

AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are being discovered, reproduced, and weaponized faster than ever in the history of enterprise security. As a result, the window between a vulnerability being disclosed and...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/02 4:3 a.m.20 views

CVE-2025-60485

A segmentation violation in the gfisomapplesettagex function /isomedia/isomwrite.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/02 12:0 a.m.35 views

PT-2026-45676

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unknown function of the file src/main/java/com/zhiliao/module/web/system/ScheduleJobController.java of the component Task Scheduling Management Module. Executing a manipulation can...

4.8CVSS4.1AI score0.0021EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.12 views

gleam 安全漏洞

Gleam is an open-source, type-safe, extensible system construction language developed by Gleam. Versions of Gleam from 0.10.0-rc1 to 1.17.0 contain security vulnerabilities. These vulnerabilities stem from a symbol linking issue, which may cause files located outside the project root directory to...

5.1CVSS5.3AI score0.00132EPSS
SaveExploits0References4
Rows per page
Query Builder