Lucene search
+L

8196 matches found

OSV
OSV
added 2026/06/11 12:38 a.m.5 views

CLEANSTART-2026-YM13650 Netty is an asynchronous, event-driven network application framework

Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00429EPSS
SaveExploits1References5
OSV
OSV
added 2026/06/11 12:37 a.m.17 views

CLEANSTART-2026-LO88261 Within HostnameError

Multiple security vulnerabilities affect the eck-operator package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS7.5AI score0.00464EPSS
SaveExploits2References7
OSV
OSV
added 2026/06/11 12:37 a.m.17 views

CLEANSTART-2026-GU65783 Within HostnameError

Multiple security vulnerabilities affect the eck-operator package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS7.3AI score0.00464EPSS
SaveExploits2References7
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/11 12:19 a.m.20 views

Malicious code in hex-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d0271fe97ea66e9ff2ba3a0ea225364324f28138af32c337d6ed8b2b99e5ad Package metadata description "A universally-unique, lexicographically-sortable, identifier generator", homepage github.com/ulid/javascript, build...

5.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/11 12:0 a.m.14 views

PT-2026-49103

CVE-2026-12038 - Rejected reason: REJECT DO NOT USE THIS CAND CVE ID :CVE-2026-12038 Published : June 11, 2026, 8:16 p.m. | 1 hour, 13 minutes ago Description :Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and...

5.2AI score
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/11 12:0 a.m.25 views

openSIS Classic 安全漏洞

openSIS Classic is an easy-to-use student information system developed under Open Solutions for Education. It is used to organize student information and school-related operations, thereby improving the efficiency of K-12, trade schools, and higher education school systems. Version 9.3 of openSIS...

7.1CVSS5.5AI score0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/11 12:0 a.m.23 views

PT-2026-48674

IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references...

7.5CVSS5.4AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/11 12:0 a.m.33 views

IBM Langflow 安全漏洞

IBM Langflow is a visual process orchestration tool developed by the American multinational company International Business Machines IBM. Versions 1.0.0 to 1.9.1 of IBM Langflow contain security vulnerabilities. These vulnerabilities stem from insecure direct object references, which could allow...

8.1CVSS5.4AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/10 12:36 p.m.41 views

CVE-2026-49495 Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser

Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O binary with circular references in the export trie causes unbounded queue growth and exponential stri...

6.7CVSS0.00151EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/06/10 12:36 p.m.14 views

EUVD-2026-36004

Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O binary with circular references in the export trie causes unbounded queue growth and exponential stri...

6.7CVSS5.5AI score0.00151EPSS
SaveExploits1References2
OSV
OSV
added 2026/06/10 12:36 p.m.7 views

CVE-2026-49495 Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser

Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O binary with circular references in the export trie causes unbounded queue growth and exponential stri...

6.7CVSS6AI score
SaveExploits0References5
CVE
CVE
added 2026/06/10 12:36 p.m.100 views

CVE-2026-49495

Ghidra 10.2 before 12.1 contains an uncontrolled resource-consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O binary with circular references in the export trie can cause unbounded queue growth and exponential...

6.7CVSS5.5AI score0.00151EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/10 12:36 p.m.15 views

CVE-2026-49495 Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser

Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O binary with circular references in the export trie causes unbounded queue growth and exponential stri...

6.7CVSS5.5AI score0.00151EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2026/06/10 9:40 a.m.11 views

WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by dodoh4t in WordPress Plugin VikRentCar versions = 1.4.5...

7.5CVSS5.3AI score0.0023EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2026/06/10 2:25 a.m.11 views

SUSE CVE-2026-46323

In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skbgroreceive can currently copy frags between the source and GRO skb, without checking the zerocopy status, and in particular the SKBFLMANAGEDFRAGREFS flag. When SKBFLMANAGEDFRAGREFS is set, the...

7CVSS5.3AI score0.00137EPSS
SaveExploits0References108
OSV
OSV
added 2026/06/10 1:8 a.m.5 views

CLEANSTART-2026-FT24360 Flask is a web server gateway interface (WSGI) web application framework

Multiple security vulnerabilities affect the apache-superset package. Flask is a web server gateway interface WSGI web application framework. See references for individual vulnerability details...

9.8CVSS5.8AI score0.0068EPSS
SaveExploits5References33
OSV
OSV
added 2026/06/10 1:0 a.m.9 views

CLEANSTART-2026-HM14899 url

Multiple security vulnerabilities affect the descheduler package. url. See references for individual vulnerability details...

9.8CVSS6.9AI score0.01945EPSS
SaveExploits2References24
OSV
OSV
added 2026/06/10 12:47 a.m.7 views

CLEANSTART-2026-LX00456 url

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. url. See references for individual vulnerability details...

9.8CVSS5.8AI score0.01945EPSS
SaveExploits2References29
OSV
OSV
added 2026/06/10 12:39 a.m.5 views

CLEANSTART-2026-LB01734 Netty is an asynchronous, event-driven network application framework

Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

9.8CVSS6.8AI score0.00429EPSS
SaveExploits1References5
OSV
OSV
added 2026/06/10 12:38 a.m.4 views

CLEANSTART-2026-TL44561 (*x509

Multiple security vulnerabilities affect the kubewatch package. x509. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00591EPSS
SaveExploits0References7
Rows per page
Query Builder