Lucene search
+L

11684 matches found

RedhatCVE
RedhatCVE
added 2026/07/23 10:51 p.m.12 views

CVE-2026-16357

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...

9.8CVSS5.2AI score0.00405EPSS
SaveExploits0References5
Ubuntu
Ubuntu
added 2026/07/23 2:41 p.m.15 views

USN-8600-1: libXpm vulnerability

Naoki Wakamatsu discovered that libXpm did not properly validate file boundaries when processing XPM image files. An attacker could possibly use this issue to cause libXpm to crash, resulting in a denial of service...

5.5CVSS4.8AI score0.00129EPSS
SaveExploits0
OSV
OSV
added 2026/07/23 11:41 a.m.11 views

PYSEC-2026-3542 vLLM has Remote DoS via Invalid Recovered Token Reinjection

Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered token equal to vocabsize, convert that value to -1 when choosing the next live token for a request, and then feed that -1 back into the next drafter input ids. On Qwen3 GPTQ this reach...

7.5CVSS5.5AI score0.00616EPSS
SaveExploits1References7
OSV
OSV
added 2026/07/23 11:41 a.m.14 views

PYSEC-2026-3512 PraisonAI Code agent tools fail open without a workspace boundary

PraisonAI Code agent tools fail open without a workspace boundary Summary PraisonAI Code's agent-compatible CODETOOLS wrappers keep a global workspace root initialized to None. If an application uses CODETOOLS, codereadfile, codesearchreplace, or codeapplydiff before calling setworkspace, the...

7.3CVSS5.6AI score
SaveExploits0References5
OSV
OSV
added 2026/07/23 11:41 a.m.13 views

PYSEC-2026-3527 PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

Summary The MentionsParser in src/praisonai-agents/praisonaiagents/tools/mentions.py processes @file: mentions in agent prompts by reading arbitrary files from the filesystem. When a file path is not found relative to the workspace, the parser falls back to using the path as an absolute path...

7.5CVSS5.7AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/23 9:14 a.m.43 views

CVE-2026-65755 Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension

Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially...

0.00245EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/23 12:40 a.m.12 views

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

3.7CVSS7.1AI score0.00306EPSS
SaveExploits0References4
CNVD
CNVD
added 2026/07/23 12:00 a.m.19 views

Google Chrome buffer overflow vulnerability (CNVD-2026-30673)

Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from a boundary error in the V8 module. Attackers can exploit this vulnerability to execute arbitrary code within the sandbox through specially crafted HTML pages...

8.8CVSS6.2AI score0.00573EPSS
SaveExploits1
Snyk
Snyk
added 2026/07/22 11:00 p.m.24 views

Insertion of Sensitive Information Into Sent Data

Overview next is a react framework. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in action-handler.ts and action-utils.ts. An attacker can enumerate internal Server Action IDs by sending crafted Next-Action requests or probing client-served...

6.3CVSS5.9AI score0.00516EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/22 11:00 p.m.9 views

GHSA-955P-X3MX-JCVP Next.js: Unauthenticated disclosure of internal Server Function endpoints

Impact In Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts for...

6.3CVSS5.3AI score0.00516EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/07/22 11:00 p.m.18 views

Next.js: Unauthenticated disclosure of internal Server Function endpoints

Impact In Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts for...

6.3CVSS5.3AI score0.00516EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2026/07/22 3:16 p.m.13 views

CVE-2026-13321

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1...

8.6CVSS5.2AI score0.00223EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/22 12:11 a.m.20 views

SUSE CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

8.8CVSS5.8AI score0.00405EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/22 12:11 a.m.19 views

SUSE CVE-2026-16357

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

9.8CVSS5.8AI score0.00405EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.22 views

SUSE CVE-2026-16359

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

9.1CVSS5.8AI score0.00263EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.20 views

SUSE CVE-2026-16364

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

9.1CVSS5.8AI score0.00306EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.33 views

SUSE CVE-2026-16368

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

9.8CVSS5.8AI score0.00388EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.17 views

SUSE CVE-2026-16389

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

9.8CVSS5.9AI score0.00565EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/22 12:00 a.m.14 views

PT-2026-63558

Name of the Vulnerable Software and Affected Versions Next.js versions 12.0.0 through 15.5.20 Next.js versions 16.0.0 through 16.2.10 Description Applications using App Router, Server Actions use server, or use cache endpoints may disclose these endpoints, bypassing authentication on the pages...

6.3CVSS5.8AI score0.00516EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2026/07/22 12:00 a.m.7 views

Mozilla Thunderbird < 140.13

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-72 advisory. - Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed...

9.8CVSS6.5AI score0.00521EPSS
SaveExploits1References34
Rows per page
Query Builder