Lucene search
+L

1036957 matches found

EUVD
EUVD
added yesterday14 views

EUVD-2026-42650

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal...

7.7CVSS7.1AI score0.00362EPSS
SaveExploits1References5
EUVD
EUVD
added yesterday13 views

EUVD-2026-42629

Open WebUI: Cross-user model-list exposure via static cache key in getallmodels aiocache key= vs keybuilder= misuse...

5CVSS5.8AI score0.00296EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added yesterday3 views

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

6.6AI score0.00246EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday4 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

9.8CVSS6.8AI score0.0038EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday4 views

EUVD-2026-48632

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

5.7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added yesterday7 views

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

When a blob can not be opened a memory leak will occur when encoding a JNG file...

5.8AI score
SaveExploits0References3Affected Software17
Vulnrichment
Vulnrichment
added yesterday4 views

CVE-2026-15243 Improper Validation of Certificate in CAS Client

Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the client is calling matches the configured allowlist or regex. An attacker with a MITM position DNS poisoning, rogue Wi-Fi, malicious proxy, etc. can provide any CA-signed certificate for a hostname that...

7.4CVSS5.9AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added yesterday5 views

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.8CVSS7AI score0.00354EPSS
SaveExploits0References4
CVE
CVE
added yesterday10 views

CVE-2026-56391

The CVE-2026-56391 issue affects GNU coreutils, specifically the uniq utility, where out-of-bounds reads can occur when processing multibyte input with -w/--check-chars. The root cause is in find_field(), which fails to advance the input pointer correctly, inflating the computed length and causin...

4.6CVSS5.9AI score0.00135EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added yesterday8 views

Chromium: CVE-2026-16417 Uninitialized Use in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

3.1CVSS5.2AI score0.00176EPSS
SaveExploits0
Nuclei
Nuclei
added yesterday57 views

NexusDB <4.50.23 - Local File Inclusion

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal and local file inclusion. id: CVE-2020-24571 info: name: NexusDB 4.50.23 - Local File Inclusion author: pikpikcu severity: high description: NexusQA NexusDB before 4.50.23 allows the reading of files via ../...

7.5CVSS7.2AI score0.17959EPSS
SaveExploits1References5
Nuclei
Nuclei
added yesterday125 views

NeDi 1.9C - Cross-Site Scripting

NeDi 1.9C is vulnerable to cross-site scripting because of an incorrect implementation of sanitize in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a...

6.1CVSS6.2AI score0.03442EPSS
SaveExploits0References4
Nuclei
Nuclei
added yesterday10 views

MajorDoMo - Unauthenticated RCE

MajorDoMo contains a remote code execution caused by an include order bug and lack of exit after redirect in admin panel's PHP console, letting unauthenticated attackers execute arbitrary PHP code via crafted GET requests. id: CVE-2026-27174 info: name: MajorDoMo - Unauthenticated RCE author:...

9.8CVSS6.9AI score0.06996EPSS
SaveExploits4References4
CVE
CVE
added yesterday8 views

CVE-2026-12689

ProfileGrid WordPress plugin before 5.9.9.7 lacks authorization/ownership checks for certain private-message thread actions, allowing Subscriber+ authenticated users to soft-delete, tamper with metadata, or mark as read other users’ threads. Affected: ProfileGrid plugin; root cause: missing acces...

5.4CVSS5.4AI score0.00132EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago6 views

CVE-2026-16807

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00248EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago5 views

EUVD-2026-48399

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago29 views

CVE-2026-6924 Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path

A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated...

8.7CVSS0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago36 views

CVE-2026-47669

CVE-2026-47669 (DbGate Zip Slip) : The unzipDirectory function in DbGate’s API path traversal allows writing files outside the target directory via ZIP entries with “..” (Zip Slip), enabling arbitrary file writes and potential RCE, especially in default Docker deployments running as root. Impact ...

9.3CVSS5.3AI score0.00344EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-65703

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdscparsetdsf function fails to unreference the...

8.5CVSS5.9AI score0.00207EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2 days ago4 views

Important: Red Hat Security Advisory: Multicluster Global Hub 1.6.4 security update

Multicluster Global Hub v1.6.4 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.6CVSS6.7AI score0.00813EPSS
SaveExploits0References17
Rows per page
Query Builder