Lucene search
+L

29698 matches found

OSV
OSV
added 2026/06/29 2:0 p.m.12 views

CVE-2026-13573 llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS6AI score
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/06/29 2:0 p.m.9 views

CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS6AI score0.00124EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2026/06/29 2:0 p.m.12 views

CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The...

4.8CVSS6AI score0.00124EPSS
SaveExploits0
OSV
OSV
added 2026/06/29 11:50 a.m.12 views

PYSEC-2026-498 Code Injection in pyload-ng

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

9.8CVSS7.4AI score0.95845EPSS
SaveExploits13References7
OSV
OSV
added 2026/06/29 11:50 a.m.12 views

PYSEC-2026-573 wger vulnerable to brute force attempts

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

9.8CVSS7.1AI score0.00661EPSS
SaveExploits1References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/29 6:12 a.m.16 views

Malicious code in openai-agents-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768ddf82a7644f1678a27f3037c8a3fc4fae5f00b6181d6507a49892d20a7fda On npm install, scripts/postinstall.js automatically reads a broad set of installer-side identity and cloud-configuration files — /.gitconfig and the...

5.9AI score
SaveExploits0References26
OSV
OSV
added 2026/06/29 6:1 a.m.10 views

BIT-GITLAB-2026-3176 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with limited permissions to access project information due to insufficient authorization...

3.1CVSS5.8AI score0.00182EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/29 12:0 a.m.17 views

PT-2026-53314

Name of the Vulnerable Software and Affected Versions Rancher versions prior to 2.14.2 Rancher versions prior to 2.13.6 Rancher versions prior to 2.12.10 Description Improper privilege handling allows users assigned the Project Owner role to escalate their privileges. Recommendations Update Ranch...

9.4CVSS5.8AI score0.00414EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/28 9:50 p.m.19 views

Malicious code in skillspector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c77584b4e40db9023ca0b8a90fa1bd611c859ed486f99ca3a7c9a83dbfa9877 This package presents itself as a redistribution of NVIDIA/skillspector pyproject Homepage points to github.com/NVIDIA/skillspector and the source...

5.9AI score
SaveExploits0References4
NVD
NVD
added 2026/06/28 4:16 p.m.17 views

CVE-2026-13504

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

5.1CVSS0.00203EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/28 3:30 p.m.17 views

CVE-2026-13504

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

5.1CVSS4AI score0.00203EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/06/28 3:30 p.m.16 views

EUVD-2026-40002

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

5.1CVSS4AI score0.00203EPSS
SaveExploits0References6
CVE
CVE
added 2026/06/28 3:30 p.m.70 views

CVE-2026-13504

CVE-2026-13504 affects code-projects Project Management System 1.0, specifically the /mail.php Mail Compose Page. The vulnerability is a cross-site scripting flaw in unknown code paths within that file, exploitable remotely and with user interaction required. The description notes public disclosu...

5.1CVSS4AI score0.00203EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/06/28 3:30 p.m.61 views

CVE-2026-13504 code-projects Project Management System Mail Compose mail.php cross site scripting

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

5.1CVSS0.00203EPSS
SaveExploits0References6
NVD
NVD
added 2026/06/28 12:17 p.m.17 views

CVE-2026-13490

A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the file front/document.send.php of the component Document Handler. Such manipulation of the argument docid leads to authorization bypass. The attack can be...

6.3CVSS0.00309EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/28 12:17 p.m.8 views

UBUNTU-CVE-2026-13490

A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the file front/document.send.php of the component Document Handler. Such manipulation of the argument docid leads to authorization bypass. The attack can be...

6.3CVSS5.4AI score0.00309EPSS
SaveExploits0References6
OSV
OSV
added 2026/06/28 12:0 p.m.26 views

RUSTSEC-2026-0192 `ttf-parser` is unmaintained

The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes see the referenced issue. Alternatives - skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" fontations project...

5.8AI score
SaveExploits0References3
CVE
CVE
added 2026/06/28 11:0 a.m.44 views

CVE-2026-13490

The CVE concerns glpi-project glpi versions 11.0.5/11.0.6/11.0.7. It affects the Document Handler, specifically Document::canViewFile in front/document.send.php. Manipulating the docid argument can bypass authorization, enabling a remote attack. The description notes high complexity and that expl...

6.3CVSS5.4AI score0.00309EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/28 11:0 a.m.18 views

EUVD-2026-39990

A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the file front/document.send.php of the component Document Handler. Such manipulation of the argument docid leads to authorization bypass. The attack can be...

6.3CVSS5.4AI score0.00309EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/28 11:0 a.m.61 views

CVE-2026-13490 glpi-project glpi Document document.send.php canViewFile authorization

A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the file front/document.send.php of the component Document Handler. Such manipulation of the argument docid leads to authorization bypass. The attack can be...

6.3CVSS0.00309EPSS
SaveExploits0References4
Rows per page
Query Builder