Lucene search
+L

367316 matches found

EUVD
EUVD
added 4 hours ago3 views

EUVD-2026-53451

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

8.8CVSS6AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 4 hours ago3 views

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...

8.1CVSS6.4AI score0.00712EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 4 hours ago3 views

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

8.1CVSS6.2AI score0.00779EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 4 hours ago3 views

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

8.1CVSS6.2AI score0.00779EPSS
SaveExploits1References7
NVD
NVD
added 4 hours ago2 views

CVE-2026-8400

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes...

8.1CVSS
SaveExploits0References1
NVD
NVD
added 4 hours ago3 views

CVE-2026-13477

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input...

4.7CVSS
SaveExploits0References1
CVE
CVE
added 4 hours ago38 views

CVE-2026-8400

The CVE-2026-8400 issue affects IBM WebSphere Application Server 8.5, 9.0, and WebSphere Application Server Liberty Continuous Delivery, due to a flaw in the ORB component of IBM SDK, Java Technology Edition. The flaw may allow a malicious IIOP server to induce loading and instantiation of arbitr...

8.1CVSS5.6AI score
SaveExploits0References1
Cvelist
Cvelist
added 4 hours ago9 views

CVE-2026-8400 Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes...

8.1CVSS
SaveExploits0References1
EUVD
EUVD
added 4 hours ago3 views

EUVD-2026-53438

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes...

8.1CVSS5.6AI score
SaveExploits0References1
OSV
OSV
added 5 hours ago0 views

MAL-2026-13327 Malicious code in dolyame-boxy-independent-bnpl-scheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce523b3385816616192d462b5ac251d22886682d021200c4bd76bd22b95003c On require of this package, index.js loads setup.js which downloads a platform-specific native binary from author-controlled Cloudflare Workers hosts...

SaveExploits0References1
Cvelist
Cvelist
added 7 hours ago9 views

CVE-2026-67623 Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook

Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repository's .git/config file, which is triggered when vibe invokes git status --porcelain without suppressing hook...

8.8CVSS
SaveExploits0References6
EUVD
EUVD
added 7 hours ago4 views

EUVD-2026-53341

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

8.1CVSS6.5AI score
SaveExploits0References10
Cvelist
Cvelist
added 7 hours ago8 views

CVE-2026-15979 Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

8.1CVSS
SaveExploits0References10
NVD
NVD
added 7 hours ago5 views

CVE-2026-71284

Fledge's backup-restore upload handler, uploadbackup python/fledge/services/core/api/backuprestore.py, takes the first extracted tar member's filename tarfilenames0 and builds a shell command via string formatting: cmd = "cp ".formatsource, backuppath; retcode = os.systemcmd. The only pre-check o...

7.2CVSS
SaveExploits0References2
NVD
NVD
added 7 hours ago5 views

CVE-2026-71283

Fledge's backup-restore upload handler, uploadbackup python/fledge/services/core/api/backuprestore.py, calls tarfile.extractalltemppath on an admin-uploaded tar archive with no filter argument and no per-member path validation. A crafted tar archive containing member names with ../ path component...

4.9CVSS
SaveExploits0References2
NVD
NVD
added 7 hours ago5 views

CVE-2026-71277

rust-iot-platform's AuthToken request-guard implementation api/src/main.rs only checks whether the Authorization HTTP header is present, and never validates its value against any session, token store, or signature. Any request carrying an arbitrary non-empty Authorization header e.g. Authorizatio...

9.1CVSS
SaveExploits0References2
NVD
NVD
added 7 hours ago7 views

CVE-2026-71269

Node-RED's local-filesystem library storage module getLibraryEntry and saveLibraryEntry in packages/nodemodules/@node-red/runtime/lib/storage/localfilesystem/library.js, reachable via GET/POST /library/:lib/:type/path, joins the user-supplied path parameter directly into the filesystem path via...

7.2CVSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 7 hours ago4 views

libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

A flaw was found in libpng, a library used for processing PNG Portable Network Graphics image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can...

7.5CVSS6.3AI score0.01052EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
added 7 hours ago7 views

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

8.8CVSS8.5AI score0.00454EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 8 hours ago3 views

Malicious code in log-min (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc78815e8c40947273929a7224aa04230de911771e62580045fb8bb213468c9 The package publishes as 'log-min' with a description claiming it is a JavaScript library for the Theta Blockchain, while its README identifies the...

6.2AI score
SaveExploits0References1
Rows per page
Query Builder