Lucene search
+L

588903 matches found

Rockylinux
Rockylinux
added 2 days ago9 views

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

9.8CVSS6.1AI score0.00436EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2 days ago9 views

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

9.8CVSS6.1AI score0.00436EPSS
SaveExploits0
CVE
CVE
added 2 days ago37 views

CVE-2024-39024

CVE-2024-39024 affects PacketFence 13.2.0. The issue is an authenticated remote code execution via the WebGui interface setting, enabling a low-privilege attacker with network access to trigger a compromise. The CVSS v3.1 vector indicates high impact across confidentiality, integrity, and availab...

8.8CVSS5.9AI score0.00423EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2 days ago7 views

FreeBSD : MySQL 9.7 -- Multiple vulnerabilities (10f5f76e-90a5-11f1-bc30-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5f76e-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which...

8.4CVSS5.8AI score0.00453EPSS
SaveExploits0References46
Tenable Nessus
Tenable Nessus
added 2 days ago8 views

Linux Distros Unpatched Vulnerability : CVE-2026-64590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIGDMAAPIDEBUGSG is enabled, importing a udmabuf into a DRM driver e.g. amdgpu...

5.3AI score0.00156EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago9 views

RockyLinux 9 : thunderbird (RLSA-2026:49921)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49921 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

9.8CVSS5.7AI score0.00436EPSS
SaveExploits0References67
Photon
Photon
added 2 days ago8 views

Critical Photon OS Security Update - PHSA-2026-5.0-92-0946

Updates of 'perl', 'acl' packages of Photon OS have been released...

8.4CVSS5.3AI score0.00153EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2 days ago8 views

Linux Distros Unpatched Vulnerability : CVE-2026-45103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the...

7.5CVSS5.7AI score0.00328EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2 days ago8 views

Linux Distros Unpatched Vulnerability : CVE-2026-71309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does...

8.6CVSS5.4AI score0.00314EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago6 views

AlmaLinux 10 : firefox (ALSA-2026:47101)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:47101 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

9.8CVSS5.8AI score0.00436EPSS
SaveExploits0References34
NVD
NVD
added 3 days ago7 views

CVE-2026-71321

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint /nuxtisland/... decodes and hashes attacker-controlled JSON body input with destr and ohash before validating the URL-resident hash. An unauthenticated POST...

7.5CVSS0.00422EPSS
SaveExploits0References5
NVD
NVD
added 3 days ago7 views

CVE-2025-63822

SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the...

8.1CVSS0.00221EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago10 views

EUVD-2026-53648

Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools development mode only exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the...

9.6CVSS5.8AI score0.00324EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago7 views

CVE-2026-34966

Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths that use Go's default http.Get without a custom DialContext. Attackers can supply...

8.3CVSS0.00314EPSS
SaveExploits0References4
NVD
NVD
added 3 days ago6 views

CVE-2026-71309

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and pass...

8.6CVSS0.00314EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago6 views

CVE-2026-18411

The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can leverage this weakness to issue unauthorized commands to the vehicle, potentially allowing unauthorized access...

8.1CVSS0.00335EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 3 days ago8 views

Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

Impact When a page is covered by routeRules cache / swr / isr, Nuxt enables runtime payload extraction and serves //payload.json. On affected versions the renderer stored the SSR payload in the shared cache:nuxt:payload storage under a path-only key no cookie, authorization, or cache.varies...

7.5CVSS5.6AI score0.00297EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
added 3 days ago8 views

NPM: Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

NPM: Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients vulnerability discovered by ? in WordPress Npm nuxt versions = 4.4.0, = 4.5.0...

7.5CVSS5.5AI score0.00297EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 3 days ago42 views

CVE-2026-71316

CVE-2026-71316 affects Nuxt (Vue.js framework). From 4.4.0 through 4.5.1, runtime cache:nuxt:payload entries for //_payload.json could be returned before route middleware and page guards because import.meta.prerender was not enforced, potentially disclosing another user’s SSR data. The issue is f...

7.5CVSS5.4AI score0.00297EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 3 days ago8 views

Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

Impact An unauthenticated attacker can crash a Nuxt server that renders any island / server component containing a v-for over a prop for example v-for="n in count" or a . Because the island URL hash is a non-secret digest of the request, the attacker can compute a valid hash for arbitrary props a...

7.5CVSS5.6AI score0.004EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder