Lucene search
+L

202217 matches found

NVD
NVD
added 2026/07/21 5:17 p.m.14 views

CVE-2026-47410

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal "dev-secret-change-me" when PLATFORMJWTSECRET is unset. A safety check exists but only...

9.8CVSS0.00638EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/21 5:17 p.m.13 views

CVE-2026-16451

A security flaw has been discovered in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This impacts an unknown function of the file /api/system/file/upload of the component com.zs.file.controller.SysFileController. Performing a manipulation of the argument File results in...

6.5CVSS0.00347EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/21 5:17 p.m.10 views

UBUNTU-CVE-2026-15792

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...

7.5CVSS5.8AI score0.00243EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/21 4:42 p.m.6 views

CVE-2026-15432 Observable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerification

When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the correct tag. This in...

8.2CVSS5.3AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 4:17 p.m.15 views

CVE-2026-47390

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, spidertools URL validation can be bypassed using alternate loopback host encodings. The tool contains a URL validation function intended to block local or unsafe...

5.5CVSS0.00175EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/21 4:17 p.m.15 views

CVE-2026-16450

A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the function getTenantId of the file /api/system/sys/dept/page of the component MyBatis-Plus Tenant Plugin. Such manipulation of the argument X-Tenant-Id leads to authorization...

5.3CVSS0.00374EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/21 4:07 p.m.13 views

EUVD-2026-44354

Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability...

8.8CVSS5.1AI score0.00736EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/21 4:06 p.m.25 views

EUVD-2026-44395

Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability...

7.5CVSS5.2AI score0.0084EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/21 4:02 p.m.24 views

httpd: NULL pointer dereference via specially crafted request

A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...

7.5CVSS7.2AI score0.00594EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/21 3:16 p.m.15 views

CVE-2026-56587

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications...

3.7CVSS0.00244EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/21 3:16 p.m.9 views

CVE-2026-64823 Home Assistant Core < 2026.5.4 XSS via Shelly media_player.py thumb URI

Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's asyncgetmediaimage method that allows attackers controlling a Shelly device's thumb field to serve arbitrary HTML content by supplying a data URI with a text/html content type without...

2.1CVSS5.1AI score
SaveExploits0References7
EUVD
EUVD
added 2026/07/21 2:48 p.m.11 views

EUVD-2026-46279

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

3.1CVSS5.3AI score0.00122EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/07/21 1:17 p.m.10 views

SUSE CVE-2026-9537

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...

5.3CVSS5.2AI score0.00322EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:06 p.m.10 views

SUSE CVE-2026-56741

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...

7.5CVSS5.4AI score0.00595EPSS
SaveExploits1References4
NCSC
NCSC
added 2026/07/21 9:42 a.m.12 views

Vulnerabilities handled in IBM Langflow OSS

IBM has addressed several vulnerabilities in the IBM Langflow OSS versions from 1.0.0 to 1.10.0. The vulnerabilities in IBM Langflow OSS include: - Execution of arbitrary file modifications by authorized users through specially crafted Content-Disposition headers. - Server-side request forgery SS...

10CVSS7.2AI score0.34734EPSS
SaveExploits7References24
GithubExploit
GithubExploit
added 2026/07/21 7:55 a.m.56 views

Exploit for Deserialization of Untrusted Data in Qwik

No d...

9.8CVSS5.2AI score0.05416EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/07/21 5:09 a.m.9 views

CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

4.8CVSS5.7AI score0.00256EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/21 5:00 a.m.7 views

CVE-2023-37507

HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed...

6.9CVSS5.3AI score0.00249EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/21 5:00 a.m.11 views

EUVD-2023-60604

HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed...

6.9CVSS5.3AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 1:16 a.m.11 views

CVE-2026-16331

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

7.5CVSS0.01574EPSS
SaveExploits0References6
Rows per page
Query Builder