Lucene search
+L

558840 matches found

CVE
CVE
added 2026/08/13 7:45 p.m.30 views

CVE-2026-19747

The CVE-2026-19747 entry identifies a vulnerability in Tenda devices (CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C, TC3T15C) affecting the ATE Module’s Kylin component, specifically the CAte::HandleCmd function. This manipulation enables remote command injection, implying a netwo...

10CVSS8.2AI score0.02364EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/13 7:45 p.m.6 views

CVE-2026-19747

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...

10CVSS8.2AI score0.02364EPSS
SaveExploits0References7Affected Software10
Cvelist
Cvelist
added 2026/08/13 7:45 p.m.29 views

CVE-2026-19747 Tenda CH7 ATE Module Kylin HandleCmd command injection

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...

10CVSS0.02364EPSS
SaveExploits0References6
F5 Networks
F5 Networks
added 2026/08/13 7:40 p.m.18 views

K000162918: Linux kernel vulnerability CVE-2026-52927

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix OOB read in compatmtwfromuser Luxiao Xu says: The function compatmtwfromuser converts ebtables extensions from 32-bit user structures to kernel native structures. However, it...

7.8CVSS4.7AI score0.0012EPSS
SaveExploits0Affected Software4
NVD
NVD
added 2026/08/13 7:17 p.m.10 views

CVE-2026-73038

NodeBB before 4.15.0 contains a stored cross-site scripting vulnerability in the renderEmoji function that fails to escape tag.icon.url and tag.name attributes. Attackers can deliver malicious ActivityPub Create/Note objects with crafted emoji tags to inject arbitrary HTML and JavaScript into...

6.1CVSS0.00194EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/13 7:15 p.m.15 views

CVE-2026-19746

Calix GigaSpire 26.1.0 contains a vulnerability in the traceroute.cmd file where an unknown function can be manipulated to cause a denial of service. The issue can be triggered remotely, with public disclosure of the exploit. No remediation details are provided in the supplied documents. The vend...

5.3CVSS4.9AI score0.00345EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/13 7:15 p.m.5 views

CVE-2026-19746

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

5.3CVSS4.8AI score0.00345EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/08/13 7:15 p.m.6 views

EUVD-2026-58225

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

5.3CVSS4.9AI score0.00345EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/13 7:15 p.m.33 views

CVE-2026-19746 Calix GigaSpire traceroute.cmd denial of service

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

5.3CVSS0.00345EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/13 7:15 p.m.10 views

CVE-2026-19746 Calix GigaSpire traceroute.cmd denial of service

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

5.3CVSS4.9AI score0.00345EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/08/13 7:00 p.m.8 views

Prototype Pollution

Overview browserslist is a Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset Affected versions of this package are vulnerable to Prototype Pollution via the normalizeStats function in node.js. An attacker can crash the process or alter an...

8.7CVSS6.5AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/13 7:00 p.m.5 views

Information Exposure

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Information Exposure via the validationexceptionhandler function. An attacker can obtain sensitive information such as operating system usernames,...

6.9CVSS5.4AI score0.00255EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/13 7:00 p.m.5 views

Race Condition

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Race Condition through the safeloadpromptembeds function in vllm/renderers/embedutils.py when concurrent prompt parts are submitted to the...

6.3CVSS5.5AI score0.00251EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/13 7:00 p.m.7 views

CVE-2026-19745 Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service

A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...

5.3CVSS4.9AI score0.00345EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/13 7:00 p.m.5 views

CVE-2026-19745

A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...

5.3CVSS4.8AI score0.00345EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/08/13 7:00 p.m.29 views

CVE-2026-19745 Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service

A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...

5.3CVSS0.00345EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/13 7:00 p.m.6 views

EUVD-2026-58241

A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...

5.3CVSS4.9AI score0.00345EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/13 7:00 p.m.16 views

CVE-2026-19745

Technical details for CVE-2026-19745 are not publicly available in the provided documents. Monitor for updates.

5.3CVSS4.9AI score0.00345EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2026/08/13 6:45 p.m.9 views

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote code execution RCE. The security defect remain...

7.1AI score
SaveExploits0
OSV
OSV
added 2026/08/13 6:41 p.m.9 views

CVE-2026-73038 NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name

NodeBB before 4.15.0 contains a stored cross-site scripting vulnerability in the renderEmoji function that fails to escape tag.icon.url and tag.name attributes. Attackers can deliver malicious ActivityPub Create/Note objects with crafted emoji tags to inject arbitrary HTML and JavaScript into...

5.3CVSS5.3AI score
SaveExploits0References7
Rows per page
Query Builder