Lucene search
+L

2862 matches found

NVD
NVD
•added 2026/01/19 8:15 p.m.•27 views

CVE-2026-1173

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

9.8CVSS0.00788EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/19 7:32 p.m.•6 views

CVE-2026-1173 birkir prime GraphQL Array Based Query Batch graphql denial of service

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

6.9CVSS5.2AI score0.00788EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/19 7:32 p.m.•43 views

CVE-2026-1173

CVE-2026-1173 affects the birkir prime project up to version 0.4.0.beta.0 , specifically the GraphQL Array Based Query Batch Handler’s unknown function in the /graphql file. The issue enables a remote denial of service and an exploit has been publicly disclosed. Remediation: upgrade to a version ...

9.8CVSS5.2AI score0.00788EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/01/19 7:32 p.m.•38 views

CVE-2026-1173 birkir prime GraphQL Array Based Query Batch graphql denial of service

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

6.9CVSS0.00788EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/01/19 7:32 p.m.•17 views

EUVD-2026-3200

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

6.9CVSS5.2AI score0.00788EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/01/19 7:32 p.m.•13 views

CVE-2026-1173

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

9.8CVSS5.1AI score0.00788EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/01/19 7:32 p.m.•13 views

CVE-2026-1173 birkir prime GraphQL Array Based Query Batch graphql denial of service

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

6.9CVSS5.6AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/01/19 12:00 a.m.•37 views

PT-2026-3489

Name of the Vulnerable Software and Affected Versions birkir versions prior to 0.4.0.beta.0 Description A flaw exists in birkir that could lead to a denial of service. The issue is located within the GraphQL Array Based Query Batch Handler component, specifically affecting an unknown function...

6.9CVSS5.7AI score0.00788EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/19 12:00 a.m.•3 views

CVE-2026-1173: Improper Resource Shutdown or Release

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

9.8CVSS5.2AI score0.00788EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2026/01/17 12:24 a.m.•17 views

SUSE CVE-2026-22864

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.5.6, a prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path's extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and...

9.8CVSS6.8AI score0.00682EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/01/16 11:31 p.m.•15 views

CVE-2026-22864

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.5.6, a prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path’s extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and...

9.8CVSS6.8AI score0.00682EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/16 7:16 p.m.•16 views

CVE-2021-47816

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands...

8.8CVSS0.01832EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/01/16 3:49 p.m.•23 views

Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass

Summary A prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path’s extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and therefore can be bypassed when the extension uses alternate casing for...

9.8CVSS5.9AI score0.02084EPSS
SaveExploits2References4Affected Software1
OSV
OSV
•added 2026/01/16 3:49 p.m.•18 views

GHSA-M3C4-PRHW-MRX6 Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass

Summary A prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path’s extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and therefore can be bypassed when the extension uses alternate casing for...

8.1CVSS7.1AI score0.00682EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000778)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000778 advisory. The nfnetlinkrcvbatch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, whi...

5CVSS6.5AI score0.01507EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•11 views

MiracleLinux 4 : ipa-3.0.0-26.2.0.1.AXS4 (AXSA:2013-421:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-421:02 advisory. IPA is an integrated solution to provide centrally managed Identity machine, user, virtual machines, groups, authentication credentials, Policy configuration...

4.3CVSS6AI score0.01189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•12 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001522 advisory. An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operatio...

5.5CVSS6.4AI score0.00346EPSS
SaveExploits0References4
NVD
NVD
•added 2026/01/15 11:15 p.m.•22 views

CVE-2026-22864

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.5.6, a prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path’s extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and...

9.8CVSS0.00682EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/01/15 10:58 p.m.•2 views

CVE-2026-22864 Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.5.6, a prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path’s extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and...

8.1CVSS5.8AI score0.00682EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/15 10:58 p.m.•41 views

CVE-2026-22864 Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.5.6, a prior patch aimed to block spawning Windows batch/shell files by returning an error when a spawned path’s extension matched .bat or .cmd. That check performs a case-sensitive comparison against lowercase literals and...

8.1CVSS0.00682EPSS
SaveExploits1References2
Rows per page
Query Builder