Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

91900 matches found

Github Security Blog
Github Security Blog•added 2026/08/06 12:31 a.m.•4 views

Malicious code in bigops-tcrm-permissions (npm)

Source: amazon-inspector a20b19aa6d3666cf99d03011aefd683f0d560b45dac6f27c2915dd68dd95bc0d On require of bigops-tcrm-permissions, index.js loads runtime.js which fetches a platform-specific binary from hardcoded Cloudflare Workers hosts oob-worker.cf101-adf.workers.dev,...

6AI score
SaveExploits0References4Affected Software1
EUVD
EUVD•added 2026/08/06 12:31 a.m.•29 views

EUVD-2026-53659

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.1.1 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

5.7AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/08/06 12:00 a.m.•11 views

PT-2026-68960

Summary There is a high severity vulnerability in Traefik's Kubernetes Gateway API provider. Router and service identities for HTTPRoute, GRPCRoute, TCPRoute and TLSRoute objects were built by hyphen-concatenating the route namespace, the route name, the Gateway identity, the entry point and the...

8.2CVSS5.8AI score
SaveExploits0References7
Positive Technologies
Positive Technologies•added 2026/08/06 12:00 a.m.•8 views

PT-2026-68940

Summary There is a low severity vulnerability in Traefik's BasicAuth middleware. Concurrent password verifications are deduplicated through a singleflight group whose key was the delimiter-free concatenation of the submitted password and the stored secret, so a request carrying an unconfigured...

2.1CVSS6.3AI score
SaveExploits0References7
Tenable Nessus
Tenable Nessus•added 2026/08/06 12:00 a.m.•30 views

EulerOS 2.0 SP13 : golang (EulerOS-SA-2026-3017)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 If a trusted template...

9CVSS7.3AI score0.00875EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus•added 2026/08/06 12:00 a.m.•28 views

AlmaLinux 10 : java-25-openjdk (ALSA-2026:42899)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42899 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance...

7.5CVSS6.6AI score0.00364EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus•added 2026/08/06 12:00 a.m.•25 views

EulerOS 2.0 SP15 : golang (EulerOS-SA-2026-2885)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a meta tag's content attribute. If the URL content were to...

9.8CVSS7.4AI score0.00875EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus•added 2026/08/06 12:00 a.m.•35 views

EulerOS 2.0 SP13 : golang (EulerOS-SA-2026-2967)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 If a trusted template...

9CVSS7.3AI score0.00875EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus•added 2026/08/06 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-19023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a...

6.8CVSS5.7AI score0.00172EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus•added 2026/08/06 12:00 a.m.•25 views

EulerOS 2.0 SP15 : golang (EulerOS-SA-2026-2926)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a meta tag's content attribute. If the URL content were to...

9.8CVSS7.4AI score0.00875EPSS
SaveExploits0References19
osv_azl
osv_azl•added 2026/08/05 11:16 p.m.•29 views

AZL-94493 CVE-2026-19023 affecting package hdf5 1.14.6-6

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.7AI score0.00172EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2026/08/05 11:16 p.m.•25 views

DEBIAN-CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.7AI score0.00172EPSS
SaveExploits0References1
NVD
NVD•added 2026/08/05 11:16 p.m.•34 views

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS0.00172EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2026/08/05 11:16 p.m.•30 views

UBUNTU-CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.7AI score0.00172EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve•added 2026/08/05 11:16 p.m.•19 views

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.7AI score0.00172EPSS
SaveExploits0References2
Kitploit
Kitploit•added 2026/08/05 11:05 p.m.•45 views

katana v1.7.0

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

6.5AI score
SaveExploits0References10
Kitploit
Kitploit•added 2026/08/05 10:40 p.m.•26 views

safe-chain v1.5.15

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

5.8AI score
SaveExploits0References6
osv_cve
osv_cve•added 2026/08/05 10:13 p.m.•37 views

CVE-2026-19023 HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.7AI score0.00172EPSS
SaveExploits0References3
Debian CVE
Debian CVE•added 2026/08/05 10:13 p.m.•25 views

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.7AI score0.00172EPSS
SaveExploits0
attackerkb
attackerkb•added 2026/08/05 10:13 p.m.•34 views

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.1.1 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

5.7AI score0.00172EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder