Lucene search
+L

555995 matches found

CVE
CVE
added 6 days ago48 views

CVE-2026-29036

Affected software: cJSON library (versions 1.5.0–1.7.19). Component: decode_pointer_inplace() in cJSON_Utils.c. Issue: Incorrectly-resolved name/reference vulnerability that lets unauthenticated attackers manipulate JSON Patch paths by supplying crafted JSON Pointer escape sequences (~0, ~1). Imp...

8.7CVSS5.3AI score0.00258EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 6 days ago6 views

CVE-2026-29036

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

8.7CVSS5.4AI score0.00258EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 6 days ago7 views

CVE-2026-29036

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

8.7CVSS5.3AI score0.00258EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 6 days ago4 views

CVE-2026-29036 cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

8.7CVSS5.3AI score0.00258EPSS
SaveExploits0References2
OSV
OSV
added 6 days ago14 views

CVE-2026-29036 cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

8.7CVSS5.4AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 6 days ago6 views

CVE-2026-66098 Mira Hormone Monitor, Mira Android App Missing authentication for critical function

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow...

7.1CVSS5.3AI score0.00197EPSS
SaveExploits0References2
Cvelist
Cvelist
added 6 days ago27 views

CVE-2026-66098 Mira Hormone Monitor, Mira Android App Missing authentication for critical function

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow...

7.1CVSS0.00197EPSS
SaveExploits0References2
OSV
OSV
added 6 days ago4 views

SUSE-SU-2026:23068-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

10CVSS7.2AI score0.99907EPSS
SaveExploits259References1826
OSV
OSV
added 6 days ago3 views

DEBIAN-CVE-2026-29035

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...

8.3CVSS6.1AI score0.00467EPSS
SaveExploits0References1
NVD
NVD
added 6 days ago7 views

CVE-2026-29035

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...

8.3CVSS0.00467EPSS
SaveExploits0References2
Rapid7 Blog
Rapid7 Blog
added 6 days ago13 views

Patch Tuesday - August 2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...

8.1CVSS7.7AI score0.01081EPSS
SaveExploits2
OSV
OSV
added 6 days ago4 views

SUSE-SU-2026:23066-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

10CVSS7.2AI score0.99907EPSS
SaveExploits259References1826
RedhatCVE
RedhatCVE
added 6 days ago5 views

CVE-2026-6368

A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...

5.5CVSS5.3AI score0.00107EPSS
SaveExploits0References5
Malwarebytes
Malwarebytes
added 6 days ago6 views

Fake CCleaner installs GhostDesk Chrome spyware

A fake version of the popular PC cleaning tool CCleaner is being used to infect Windows users with a malicious Chrome extension called GhostDesk, which acts as spyware inside the browser. With more than 2 billion downloads worldwide, CCleaner is one of the best-known Windows utilities, making it ...

6.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 6 days ago5 views

CVE-2026-43627

A flaw was found in llama.cpp. An integer overflow vulnerability exists in the llamabatchinit function due to unchecked multiplications during memory allocation. Attackers can provide specially crafted input parameters, leading to heap corruption. This could potentially allow for arbitrary code...

8.5CVSS6AI score0.00139EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago7 views

CVE-2026-68098

A flaw was found in ksmbd, a Linux kernel module. The setntacldacl function, which processes Discretionary Access Control Lists DACLs, can stop copying Access Control Entries ACEs prematurely due to a size accounting overflow. This can cause a subsequent deduplication process to read beyond the...

8.8CVSS5.3AI score0.00414EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago7 views

CVE-2026-6791

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

9CVSS5.3AI score0.00207EPSS
SaveExploits0References4
OSV
OSV
added 6 days ago3 views

GO-2026-5516 Pre-Auth DQL injection in upsert condition field in github.com/dgraph-io/dgraph

A DQL injection vulnerability in Dgraph allows an unauthenticated remote attacker to exfiltrate data from the database. The injection occurs via the "cond" field in upsert mutations. The buildUpsertQuery function fails to properly validate the condition string, allowing an attacker to craft a...

9.1CVSS5.8AI score0.005EPSS
SaveExploits1References2
OSV
OSV
added 6 days ago5 views

DEBIAN-CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

8.3CVSS5.4AI score0.0035EPSS
SaveExploits0References1
NVD
NVD
added 6 days ago9 views

CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

8.3CVSS0.0035EPSS
SaveExploits0References4
Rows per page
Query Builder