Lucene search
+L

11994 matches found

CVE
CVE
added 2026/08/11 7:10 p.m.314 views

CVE-2026-73281

CVE-2026-73281 affects the ssh-agent component of OpenSSH prior to version 10.5. The issue arises from a misinteraction between agent locking and the [email protected] extension, allowing some operations that were intended to be local to occur remotely (e.g., adding tokens or using keys). ...

3.5CVSS5.3AI score0.00158EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2026/08/11 12:00 a.m.24 views

...[ More ]

A proof of concept exploit for a local privilege escalation vulnerability in QEMU Guest Agent version 11.0.3. The vulnerability exists in the guest-ssh-add-authorized-keys handler, where improper handling of symbolic links allows an unprivileged guest user to redirect root-privileged file...

7.3CVSS5.5AI score0.00181EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/10 12:04 p.m.11 views

EUVD-2026-55603

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siwcreateqp currently calls siwqpadd before the queues, CQ pointers, state, completion, and device list entry are ready. A QPN lookup can therefore reach a QP that is still being...

5.3AI score0.0012EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/10 12:04 p.m.13 views

EUVD-2026-55602

In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...

5.4AI score0.00156EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/10 12:04 p.m.45 views

CVE-2026-68416

Linux kernel CVE-2026-68416 fixes a double-free in add_mtd_device() for MTD partitions and prevents a WARN_ON by overriding dev->type and dev->release before put_device() in error paths. The patch ensures mtd_release() is not called during error handling, avoiding freeing mtd_info twice. Fo...

5.4AI score0.00156EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/10 12:02 p.m.78 views

CVE-2026-68317

The CVE-2026-68317 entry concerns the Linux kernel pds_core component, focusing on races when adding or deleting an auxiliary device slot (pf->vfs[vf_id].padev). Root cause: both the VF and PF paths (pdsc_reset_done and devlink enable_vnet/disable_vnet) serialize on config_lock but fail to gua...

5.3AI score0.00168EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/10 11:58 a.m.35 views

CVE-2026-68128 ice: reject out-of-range ptype in ice_parser_profile_init

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

8.8CVSS0.00138EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/10 11:58 a.m.44 views

CVE-2026-68099

The CVE-2026-68099 vulnerability is in ksmbd within the Linux kernel, where check_add_overflow() could cause an on-wire NT ACL to be malformed. In the affected DACL builders (set_posix_acl_entries_dacl() and set_ntacl_dacl()), overflow handling previously allowed the loop to break while the desti...

5.4AI score0.00173EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/10 9:20 a.m.14 views

CVE-2026-64564

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. A remote attacker could send a specially crafted sequence of ASCONF Add IP Address Configuration chunks, including DEL-IP Delete IP Address parameters, to trigger a use-after-free condition...

9.8CVSS6.3AI score0.01482EPSS
SaveExploits2References4
CVE
CVE
added 2026/08/09 8:45 p.m.109 views

CVE-2026-19369

The CVE concerns KS-GEN-AI jira-mcp-server 0.2.0. It affects the add_attachment_from_public_url path in src/index.ts, specifically the function axios.get. Maliciously manipulating the imageUrl parameter enables server-side request forgery (SSRF) and requires a local attack. Exploit maturity is sh...

5.3CVSS5.5AI score0.00103EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/09 8:45 p.m.17 views

EUVD-2026-54953

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component addattachmentfrompublicurl. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The proje...

5.3CVSS5.5AI score0.00103EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/07 4:37 p.m.36 views

CVE-2026-71556 go-git: Worktree operations may follow symlinks

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...

7.1CVSS0.00357EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/08/07 4:37 p.m.12 views

CVE-2026-71556

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...

7.1CVSS5.3AI score0.00357EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/08/06 10:18 p.m.13 views

CVE-2026-71445

AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...

8.2CVSS0.00319EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/06 10:17 p.m.12 views

CVE-2026-48075

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the add-to-tunnel endpoint creates a new appointment row in any client tunnel without any caller authentication. A request that supplies any valid tunnelId and any...

6.5CVSS0.00391EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/06 8:39 p.m.15 views

CVE-2026-48075 OpenReception's unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injections

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the add-to-tunnel endpoint creates a new appointment row in any client tunnel without any caller authentication. A request that supplies any valid tunnelId and any...

6.5CVSS5.7AI score
SaveExploits0References4
CVE
CVE
added 2026/08/06 8:39 p.m.90 views

CVE-2026-48075

OpenReception’s OpenReception appointment-booking software contains an unauthenticated add-to-tunnel endpoint prior to version 1.0.5. The endpoint accepts any valid tunnelId and any emailHash (even across tunnels) to insert an appointment with status = CONFIRMED, attacker-controlled ciphertext fi...

6.5CVSS5.7AI score0.00391EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/06 4:48 p.m.33 views

CVE-2026-71445 Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework

AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...

8.2CVSS0.00319EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/06 4:48 p.m.59 views

CVE-2026-71445

The CVE-2026-71445 entry concerns AIL Framework. It describes an authenticated reflected cross-site scripting flaw in the /tag/add_tags endpoint, where an error message is emitted directly as HTML via str(res[0]), allowing attacker-controlled input to be reflected without proper encoding. Exploit...

8.2CVSS5.5AI score0.00319EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/06 4:48 p.m.14 views

CVE-2026-71445 Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework

AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...

8.2CVSS5.3AI score
SaveExploits0References4
Rows per page
Query Builder