Lucene search
+L

9795 matches found

Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•16 views

PT-2026-81643

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Passwords component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome ...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•19 views

PT-2026-81814

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect reference resolution in CustomTabs allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome ...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•22 views

PT-2026-81318

Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.58 Description A Server-Side Request Forgery SSRF issue exists in the multi-agent teams system. The function host is blocked in spider tools.py fails to perform DNS resolution on hostnames before they are...

8.5CVSS5.9AI score0.00357EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•11 views

JetBrains TeamCity < 2018.2.3 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2018.2.3. It is, therefore, affected by multiple vulnerabilities: - A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.3. CVE-2019-12844 - The...

6.1CVSS6.6AI score0.00925EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•6 views

CVE-2026-79103: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS5.5AI score0.00295EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/25 12:00 a.m.•15 views

CVE-2026-78680

NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can...

8.5CVSS7.8AI score0.00177EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•2 views

CVE-2026-79273: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

4.3CVSS6AI score0.00328EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•6 views

CVE-2026-66153: Improper Link Resolution Before File Access

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

7CVSS7.8AI score0.00235EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•16 views

PT-2026-81554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Loader allows a remote attacker to bypass the web origin policy through crafted network traffic. The web origin policy is a security mechanism...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•19 views

PT-2026-81832

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An incorrect reference resolution in the WebView component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References335
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•3 views

CVE-2026-78942: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

4.3CVSS5.6AI score0.00278EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•10 views

EulerOS Virtualization 2.13.0 : python-lxml (EulerOS-SA-2026-3230)

According to the versions of the python-lxml packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the...

7.5CVSS6AI score0.00324EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•17 views

EulerOS Virtualization 2.13.1 : python-lxml (EulerOS-SA-2026-3190)

According to the versions of the python-lxml packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the...

7.5CVSS6AI score0.00324EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•60 views

PT-2026-81256

Name of the Vulnerable Software and Affected Versions Apache Hive versions prior to 4.2.1 Description An authenticated remote attacker with CREATE TABLE privileges can execute a Server-Side Request Forgery SSRF during Avro SerDe schema resolution. By setting the avro.schema.url table property on ...

9.1CVSS5.8AI score0.01038EPSS
SaveExploits0References12
NVD
NVD
•added 2026/08/24 8:17 p.m.•10 views

CVE-2026-77310

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

5.3CVSS0.00313EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/24 7:40 p.m.•38 views

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

6.6CVSS0.00139EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/24 7:40 p.m.•12 views

EUVD-2026-65091

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

6.6CVSS5.3AI score0.00139EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/24 7:40 p.m.•11 views

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

6.6CVSS5.9AI score0.00139EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/08/24 7:24 p.m.•12 views

CVE-2026-77310

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

5.3CVSS5.8AI score0.00313EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/08/24 7:24 p.m.•9 views

CVE-2026-77310 jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

5.3CVSS5.8AI score0.00313EPSS
SaveExploits0References1
Rows per page
Query Builder