Lucene search
+L

208225 matches found

IBM Security Bulletins
IBM Security Bulletins
added 4 days ago14 views

Security Bulletin: Langflow is affected by security vulnerabilities in Model Context Protocol features

Summary Langflow uses Model Context Protocol MCP features to manage external server connections, project access, file resources, and local client integration. Weaknesses in MCP command and configuration validation, authentication and authorization enforcement, file resource handling, and request...

6.4AI score
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 4 days ago7 views

CVE-2026-67341

ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with LANGUAGE js. Attackers with database access can execute arbitrary JavaScript code by submitting DEFINE FUNCTION statements, bypassing security controls intended to restrict...

9.8CVSS6AI score0.00319EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 4 days ago9 views

CVE-2026-67338

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...

6.1CVSS5.6AI score0.00175EPSS
SaveExploits0References5
Nuclei
Nuclei
added 4 days ago94 views

SPIP Porte Plume Plugin - Remote Code Execution

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. id: CVE-2024-7954 info: name: SPIP Porte Plume...

9.8CVSS8.6AI score0.90053EPSS
SaveExploits10References5
OSV
OSV
added 4 days ago5 views

CVE-2026-17605 Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.56 - Authenticated (Administrator+) Local File Inclusion via Payment Form 'type' Element Field

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.56 via the getpaidpaymentformelement function. This makes it possible for authenticated attackers, with administrator-level acces...

6.6CVSS6.4AI score
SaveExploits0References12
SUSE CVE
SUSE CVE
added 4 days ago8 views

SUSE CVE-2026-16527

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...

7.3CVSS6.3AI score0.00395EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 4 days ago9 views

vim security update

An update is available for vim. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

8.4CVSS6.2AI score0.00216EPSS
SaveExploits1
OSV
OSV
added 4 days ago10 views

RLSA-2026:48650 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion CVE-2026-57456 vim: Vim:...

7.8CVSS6.2AI score0.00216EPSS
SaveExploits1References6
NVD
NVD
added 5 days ago8 views

CVE-2026-34641

Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00139EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago39 views

CVE-2026-34641 Premiere Pro | Out-of-bounds Write (CWE-787)

Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00139EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago24 views

CVE-2026-34641

CVE-2026-34641 (Premiere Pro) is an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. This is supported by NVD and CVE listings that describe Prem...

7.8CVSS6.2AI score0.00139EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 5 days ago12 views

kernel: tipc: fix double-free in tipc_buf_append()

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...

9.8CVSS6.1AI score0.00368EPSS
SaveExploits0References5
Cvelist
Cvelist
added 5 days ago40 views

CVE-2026-68770 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

9.8CVSS0.00521EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 5 days ago7 views

vim security update

An update is available for vim. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

8.4CVSS6.2AI score0.00145EPSS
SaveExploits0
OSV
OSV
added 5 days ago5 views

RLSA-2026:48703 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion CVE-2026-57456 vim: Vim:...

7.8CVSS6.1AI score0.00145EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 5 days ago14 views

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.4CVSS6.2AI score0.00216EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 5 days ago7 views

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature...

8.4CVSS6AI score0.00137EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 5 days ago7 views

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

8.4CVSS5.5AI score0.00145EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 5 days ago9 views

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

8.4CVSS6.2AI score0.00145EPSS
SaveExploits0References5
NVD
NVD
added 5 days ago8 views

CVE-2026-13392

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not prevent a custom-widget definition saved by a user with administrative capabilities from being written verbatim into a generated PHP file that the ElementsKit Elementor Addons WordPress plugin before 3.10.01 subsequently...

7.2CVSS0.0037EPSS
SaveExploits0References1
Rows per page
Query Builder