Lucene search
+L

25834 matches found

RedhatCVE
RedhatCVE
added 2026/08/27 12:12 p.m.7 views

CVE-2026-16732

A flaw was found in fastify. When configured with a numeric trustProxy value, an attacker who can directly access the Fastify origin, bypassing the front-facing proxy, can spoof forwarded request fields. This vulnerability allows for host injection in generated URLs, bypasses HTTPS enforcement, a...

6.1CVSS5.3AI score0.00138EPSS
SaveExploits1References5
Hacker One
Hacker One
added 2026/08/27 8:28 a.m.11 views

curl: CVE-2026-82208: wolfSSL CA-cache hit overrides callback

Summary With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, curl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then...

7.5CVSS5.9AI score0.00313EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/27 8:11 a.m.7 views

CMP Indefinite Cache Growth of ExtraCerts

...

5.9CVSS5.2AI score0.00488EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/27 3:32 a.m.5 views

EUVD-2026-66822

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

7.5CVSS5.2AI score0.00202EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/27 1:17 a.m.6 views

CVE-2026-47852

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

7.5CVSS0.00202EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2026/08/27 12:00 a.m.19 views

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions...

5.3CVSS5.3AI score0.00579EPSS
SaveIn wildExploits1
VulnCheck KEV
VulnCheck KEV
added 2026/08/27 12:00 a.m.19 views

VulnCheck KEV: CVE-2026-66384

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

5.3CVSS5.9AI score0.00579EPSS
SaveIn wildExploits1References6
OSV
OSV
added 2026/08/26 11:28 p.m.4 views

CVE-2026-47852 Predictable cache directory location allows local ONNX model substitution in Spring AI

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

7.5CVSS5.8AI score
SaveExploits0References3
CVE
CVE
added 2026/08/26 11:28 p.m.46 views

CVE-2026-47852

CVE-2026-47852 affects Spring AI (versions 1.0.0–1.0.9 , 1.1.0–1.1.8 , and 2.0.0 ). A local attacker on a multi-user host can exploit a predictable (deterministic) cache directory path by pre-creating it and planting a malicious ONNX model file , leading to integrity impact as rated by the vendor...

7.5CVSS5.2AI score0.00202EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/26 11:28 p.m.33 views

CVE-2026-47852 Predictable cache directory location allows local ONNX model substitution in Spring AI

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

7.5CVSS0.00202EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/26 8:17 p.m.10 views

CVE-2026-67275

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...

6.5CVSS0.00172EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/26 7:53 p.m.7 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.6CVSS7.4AI score0.01874EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/26 7:53 p.m.7 views

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

7.5CVSS5.4AI score0.00523EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/26 7:53 p.m.7 views

bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For...

7.5CVSS5.4AI score0.00395EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/26 7:01 p.m.15 views

CVE-2026-67275

Dell PowerProtect One , versions 20.1.0.0 and below , is affected by a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this to achieve cache poisoning , resulting in a high integrity impact with no confidenti...

6.5CVSS5.3AI score0.00172EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/08/26 7:01 p.m.5 views

EUVD-2026-66669

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...

5.3CVSS5.4AI score0.00172EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 7:01 p.m.34 views

CVE-2026-67275

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...

5.3CVSS0.00172EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/26 5:39 p.m.7 views

DRUPAL-CONTRIB-2026-111

This module enables you to disable access to the /user/login form unless a secret key is provided. The module does not invalidate the relevant caches when login page access restrictions are enabled. As a result, previously cached login page responses may remain accessible until caches are cleared...

4.1CVSS5.5AI score0.00269EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/26 4:26 p.m.7 views

CVE-2026-79070

A flaw was found in Google Chrome. Incorrect reference resolution within the browser's cache allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive informatio...

4.3CVSS5.2AI score0.00255EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/26 12:53 p.m.23 views

Directory Traversal

Overview next is a react framework. Affected versions of this package are vulnerable to Directory Traversal in FileSystemCache.getFilePath in packages/next/src/server/lib/incremental-cache/file-system-cache.ts. An attacker can trigger remote code execution on a Windows-hosted server by sending a...

9.5CVSS6.6AI score0.02462EPSS
SaveExploits5References2
Rows per page
Query Builder