Lucene search
+L

12013 matches found

osv_cve
osv_cve
•added 2026/01/23 3:28 a.m.•18 views

CVE-2026-0760 Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability

Foundation Agents MetaGPT deserializemessage Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foundation Agents MetaGPT. Authentication is not required to exploit this...

9.8CVSS9.1AI score
SaveExploits0References3
CVE
CVE
•added 2026/01/23 3:26 a.m.•38 views

CVE-2026-0756

The CVE-2026-0756 issue affects github-kanban-mcp-server and stems from improper validation of the create_issue input before it is used in a system call, allowing an attacker to execute arbitrary code with the service account privileges, with no authentication required. References indicate this i...

9.8CVSS8.6AI score0.01843EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/23 2:49 a.m.•16 views

CVE-2025-15059

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS7.9AI score0.00836EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•12 views

CVE-2026-0763: Deserialization of Untrusted Data

GPT Academic runinsubprocesswrapperfunc Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability. The specific...

9.8CVSS8.7AI score0.01289EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•11 views

CVE-2025-15062: Use After Free

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.8AI score0.00333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•7 views

CVE-2026-0755: Improper Neutralization of Special Elements used in an OS Command

gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of gemini-mcp-tool. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS8.7AI score0.0342EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•9 views

CVE-2026-0780: Improper Neutralization of Special Elements used in an OS Command

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

8.8CVSS7.8AI score0.01661EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•12 views

CVE-2025-15350: Deserialization of Untrusted Data

Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. User interaction is required to exploit this vulnerability in that the...

7.8CVSS7.8AI score0.00366EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•6 views

CVE-2026-0771: Improper Control of Generation of Code

Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The specific flaw exis...

7.1CVSS7.8AI score0.00627EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•11 views

CVE-2026-0784: Improper Neutralization of Special Elements used in an OS Command

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

8.8CVSS7.8AI score0.01642EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•24 views

Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-010 (ALASGIMP-2026-010)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2GIMP-2026-010 advisory. GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

7.8CVSS7.9AI score0.00624EPSS
SaveExploits1References4
osv_opensuse
osv_opensuse
•added 2026/01/16 4:13 p.m.•13 views

OPENSUSE-SU-2026:20055-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: Update to 3.0.6: - Security: - During development, we received reports from the Zero Day Initiative of potential security issues with some of our file import plug-ins. While these issues are very unlikely to occur with real files,...

7.8CVSS7.9AI score0.18759EPSS
SaveExploits0References10
Circl
Circl
•added 2026/01/13 6:01 p.m.•33 views

CVE-2026-20856

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

8.1CVSS7.5AI score0.01116EPSS
SaveExploits0References2
Circl
Circl
•added 2026/01/13 6:01 p.m.•21 views

CVE-2026-20832

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

7.8CVSS7.3AI score0.00478EPSS
SaveExploits0References2
Circl
Circl
•added 2026/01/13 6:01 p.m.•24 views

CVE-2026-20857

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

7.8CVSS7.3AI score0.00478EPSS
SaveExploits0References2
Circl
Circl
•added 2026/01/13 6:01 p.m.•20 views

CVE-2026-20876

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-03-24 15:48:22+00:00| seen|...

6.7CVSS7AI score0.00508EPSS
SaveExploits0References3
Circl
Circl
•added 2026/01/13 6:01 p.m.•17 views

CVE-2026-20814

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

7CVSS7AI score0.00293EPSS
SaveExploits0References2
Circl
Circl
•added 2026/01/13 6:01 p.m.•16 views

CVE-2026-20877

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

7.8CVSS7.3AI score0.00303EPSS
SaveExploits0References2
Circl
Circl
•added 2026/01/13 6:01 p.m.•26 views

CVE-2026-20937

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

5.5CVSS6AI score0.00505EPSS
SaveExploits1References2
Circl
Circl
•added 2026/01/13 6:01 p.m.•22 views

CVE-2026-20926

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

7.5CVSS7.3AI score0.00799EPSS
SaveExploits0References2
Rows per page
Query Builder