Lucene search
+L

42226 matches found

SUSE CVE
SUSE CVE
added 2026/06/23 2:28 a.m.14 views

SUSE CVE-2026-23879

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...

8CVSS6.2AI score0.00566EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/23 2:20 a.m.12 views

SUSE CVE-2026-53488

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config LABEL instruction in Dockerfile to a container without validation. This may result in executing an arbitrary command on the host, via ...

8.8CVSS6AI score0.00163EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/23 2:19 a.m.12 views

SUSE CVE-2026-55206

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo.read in archiveinfo.py used an On^2 cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted...

8.7CVSS6.1AI score0.00321EPSS
SaveExploits0References3
Redos
Redos
added 2026/06/23 12:00 a.m.19 views

ROS-20260623-73-0024

Vulnerability in Python 3.9 related to the failure to address CRWL sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.7CVSS6.2AI score0.00562EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:00 a.m.14 views

ROS-20260623-73-0002

The vulnerability of the ASF plugin for the Gstreamer multimedia framework is related to insufficient data validation. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.00773EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/22 8:20 p.m.22 views

CVE-2026-49214 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

5.3CVSS5.8AI score0.0019EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/22 8:20 p.m.16 views

GHSA-34XG-WGJX-8XPH vulnerabilities

Vulnerabilities for packages: nextcloud-server...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/22 8:20 p.m.21 views

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, renovate, prism, vitess, npm, saf...

7.5CVSS5.9AI score0.00789EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/22 8:20 p.m.23 views

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, renovate, prism, vitess, npm, saf...

3.7CVSS5.9AI score0.0022EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/22 8:20 p.m.27 views

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, renovate, prism, vitess, npm, saf...

5.2AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/22 8:20 p.m.22 views

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: code-server, node-gyp, renovate, prism, vitess, npm, saf...

5.9CVSS5.9AI score0.00257EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/22 7:31 a.m.16 views

Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary IBM SDK, Java Technology Edition Quarterly CPU - Apr 2026 - Includes Oracle April 2026 CPU Critical Patch Update CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007 Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable...

7.5CVSS5.9AI score0.00702EPSS
SaveExploits1Affected Software1
UbuntuCve
UbuntuCve
added 2026/06/22 12:00 a.m.9 views

CVE-2026-54604

Unknown description...

6.1AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-50269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker- controlled input included into multipart/payload...

7.5CVSS5.3AI score0.00301EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-12805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseFile in the library ofstd/libsrc/ofxml.cc. Executing a...

7.5CVSS6.1AI score0.00468EPSS
SaveExploits0References3
Amazon
Amazon
added 2026/06/22 12:00 a.m.23 views

Important: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and...

7.5CVSS6AI score0.00353EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/06/21 3:55 p.m.17 views

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

6.9CVSS5.9AI score0.00139EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/06/21 3:52 p.m.15 views

CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

6.5CVSS5.9AI score0.00134EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/21 2:16 a.m.21 views

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator, ruby3.4-rails, ruby3.2-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

8.2CVSS7.2AI score0.00673EPSS
SaveExploits1
Wolfi
Wolfi
added 2026/06/21 2:16 a.m.21 views

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.2-rails, ruby3.4-rails...

5.2AI score
SaveExploits0
Rows per page
Query Builder