Lucene search
+L

122861 matches found

RedHat Linux
RedHat Linux
added 2026/07/08 3:52 p.m.20 views

github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability

A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service DoS or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation...

9.8CVSS6.2AI score0.00561EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/08 3:22 p.m.10 views

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

9.8CVSS6.6AI score0.00426EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/08 12:17 p.m.17 views

CVE-2026-41042

Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter. Vulnerability in Apache Gravitino. This issue affects Apache Gravitino: before 1.2.1. Users are recommended to upgrade to version...

9.1CVSS0.00285EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/08 12:6 p.m.8 views

RLSA-2026:36189 Important: perl-HTTP-Daemon security update

The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fixes: perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in...

8.1CVSS6.4AI score0.01398EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/08 12:3 p.m.18 views

Important: Red Hat Security Advisory: nginx:1.26 security, bug fix, and enhancement update

An update for the nginx:1.26 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.2CVSS7.9AI score0.04044EPSS
SaveExploits2References2
EUVD
EUVD
added 2026/07/08 11:38 a.m.14 views

EUVD-2026-42221

Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter. Vulnerability in Apache Gravitino. This issue affects Apache Gravitino: before 1.2.1. Users are recommended to upgrade to version...

9.1CVSS6.2AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/08 4:38 a.m.37 views

CVE-2026-56437

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...

8.4CVSS0.00134EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/08 4:38 a.m.22 views

CVE-2026-56437

The CVE-2026-56437 issue affects Pupsman versions prior to 3.9.0. An Uncontrolled search path element allows arbitrary code execution with SYSTEM privileges if a crafted DLL is placed in the same folder as the affected installer and the installer is executed. No exploitation details or fixes are ...

8.4CVSS7.2AI score0.00134EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/08 12:37 a.m.11 views

EUVD-2026-42120

The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution...

8.4CVSS6.2AI score0.0014EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/08 12:37 a.m.11 views

EUVD-2026-42122

The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

8.4CVSS6.5AI score0.0013EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/08 12:0 a.m.5 views

ALSA-2026:36832 Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

7.8CVSS7.3AI score0.00157EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:0 a.m.8 views

The vulnerability of Sun’s console-based graphic editor ImageMagick decoder allows a hacker to execute arbitrary code.

The vulnerability of the Sun console-based graphic editor ImageMagick relates to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code...

10CVSS7.4AI score0.00302EPSS
SaveExploits0References6Affected Software4
Tenable Nessus
Tenable Nessus
added 2026/07/08 12:0 a.m.13 views

RHEL 9 : nginx:1.26 (RHSA-2026:36639)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:36639 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

9.2CVSS7.8AI score0.04044EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:0 a.m.11 views

The vulnerability of the Merge() function in the Gogs automated Git repository creation tool allows a hacker to execute arbitrary code.

The vulnerability of the Merge function in the Gogs automated Git repository creation tool is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS6.2AI score0.01464EPSS
SaveExploits1References4Affected Software1
Hewlett-Packard
Hewlett-Packard
added 2026/07/08 12:0 a.m.9 views

AMD Client UEFI Firmware Security Update

AMD has informed HP of a potential security vulnerability identified in some AMD client platform firmware, which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate this vulnerability. AMD has released updates to mitigate the potential vulnerability. HP has...

7.5CVSS7.3AI score0.00145EPSS
SaveExploits1Affected Software267
Positive Technologies
Positive Technologies
added 2026/07/08 12:0 a.m.17 views

PT-2026-56520

Name of the Vulnerable Software and Affected Versions Horde Virtual File System VFS API versions prior to 3.0.1 Description The Horde Vfs Smb driver contains an OS command injection flaw where the escapeShellCommand method does not properly sanitize command substitution sequences. Authenticated...

8.8CVSS6.2AI score0.01761EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/07/08 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-14380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute...

8.8CVSS6AI score0.00479EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/07/08 12:0 a.m.12 views

The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

7.8CVSS7.8AI score0.00107EPSS
SaveExploits0References6Affected Software5
Redos
Redos
added 2026/07/08 12:0 a.m.8 views

ROS-20260708-73-0039

The vulnerability in glibc is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS6.3AI score0.00237EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/08 12:0 a.m.9 views

RockyLinux 8 : perl-HTTP-Daemon (RLSA-2026:36188)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:36188 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description block...

9.1CVSS6.5AI score0.01398EPSS
SaveExploits0References3
Rows per page
Query Builder