Lucene search
+L

24183 matches found

Nvidia
Nvidia
added 3 days ago8 views

Security Bulletin: NVIDIA Dynamo - August 2026

NVIDIA has released a software update for NVIDIA® Dynamo. To protect your system, clone or update this software from the NVIDIA ai-dynamo/dynamo GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses and...

9.8CVSS5.8AI score0.00471EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 3 days ago7 views

Amazon Linux 2 : bind, --advisory ALAS2-2026-3854 (ALAS-2026-3854)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3854 advisory. BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMA...

8.6CVSS5.6AI score0.00509EPSS
SaveExploits0References12
NVD
NVD
added 4 days ago8 views

CVE-2026-48061

Litestar is an Asynchronous Server Gateway Interface ASGI framework. In versions prior to 2.22.0, an attacker can bypass the allowed hosts validation by omitting the Host header and supplying an X-Forwarded-Host header set to a whitelisted domain. The AllowedHostsMiddleware trusts the...

5.9CVSS0.00282EPSS
SaveExploits0References2
OSV
OSV
added 4 days ago5 views

CVE-2026-48061 Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header

Litestar is an Asynchronous Server Gateway Interface ASGI framework. In versions prior to 2.22.0, an attacker can bypass the allowed hosts validation by omitting the Host header and supplying an X-Forwarded-Host header set to a whitelisted domain. The AllowedHostsMiddleware trusts the...

5.9CVSS5.4AI score
SaveExploits0References4
EUVD
EUVD
added 4 days ago10 views

EUVD-2026-50567

undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives...

5.9CVSS7.2AI score0.00231EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 4 days ago13 views

undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives

Impact Undici's cache interceptor mishandles optional whitespace OWS placed around the = of a qualified no-cache or private Cache-Control directive, such as no-cache ="authorization" OWS before = or no-cache= "authorization" OWS after =. The parser either drops the directive entirely or stores a...

7.5CVSS7.2AI score0.00231EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 4 days ago5 views

GHSA-JR45-8VMC-QM54 undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives

Impact Undici's cache interceptor mishandles optional whitespace OWS placed around the = of a qualified no-cache or private Cache-Control directive, such as no-cache ="authorization" OWS before = or no-cache= "authorization" OWS after =. The parser either drops the directive entirely or stores a...

5.9CVSS7.2AI score0.00231EPSS
SaveExploits0References8
Patchstack
Patchstack
added 4 days ago7 views

NPM: undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives

NPM: undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives vulnerability discovered by ? in WordPress Npm undici versions = 7.0.0, 7.29.0...

7.5CVSS7.2AI score0.00231EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
added 4 days ago8 views

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

Summary Two issues in undici's cache interceptor, both fixed by the same patch on lib/util/cache.js: 1. Shared-cache disclosure: Responses with malformed qualified Cache-Control: private directives such as private="" or private="," can be incorrectly stored in the default shared cache, then serve...

9.1CVSS7.1AI score0.00325EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD
added 4 days ago8 views

EUVD-2026-50409

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives...

7.4CVSS7.2AI score0.00325EPSS
SaveExploits0References6
OSV
OSV
added 4 days ago7 views

GHSA-4CWX-7WF7-3272 undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

Summary Two issues in undici's cache interceptor, both fixed by the same patch on lib/util/cache.js: 1. Shared-cache disclosure: Responses with malformed qualified Cache-Control: private directives such as private="" or private="," can be incorrectly stored in the default shared cache, then serve...

7.4CVSS7.1AI score0.00325EPSS
SaveExploits0References7
Patchstack
Patchstack
added 4 days ago8 views

NPM: undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

NPM: undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives vulnerability discovered by ? in WordPress Npm undici versions = 7.0.0, 7.29.0...

9.1CVSS7.2AI score0.00325EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 4 days ago6 views

MGASA-2026-0319 Updated squid packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Due to a Improper Validation of Syntactic Correctness of Inputbug, Squid is vulnerable to a Out-of-bounds Read attack against the FTP gateway. CVE-2026-47729 Due to an Improper Input Validation bug, Squid is vulnerable to a Heap-based Buffer...

6.5CVSS6.5AI score0.01503EPSS
SaveExploits1References5
Mageia
Mageia
added 4 days ago8 views

Updated squid packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Due to a Improper Validation of Syntactic Correctness of Inputbug, Squid is vulnerable to a Out-of-bounds Read attack against the FTP gateway. CVE-2026-47729 Due to an Improper Input Validation bug, Squid is vulnerable to a Heap-based Buffer...

6.5CVSS6.5AI score0.01503EPSS
SaveExploits1References4
NVD
NVD
added 4 days ago9 views

CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS0.00193EPSS
SaveExploits0References6
OSV
OSV
added 4 days ago3 views

UBUNTU-CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS5.5AI score0.00193EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 4 days ago9 views

CVE-2026-68945

A flaw was found in Angular's HttpTransferCache component. This component, used for caching HTTP requests during server-side rendering, incorrectly generates cache keys when repeated request parameters are present, causing semantically different requests to share the same cache key. This cache-ke...

8.8CVSS5.5AI score0.00193EPSS
SaveExploits0References9
SUSE Linux
SUSE Linux
added 4 days ago5 views

Security update for bind

This update for bind fixes the following issues CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

9.2CVSS5.5AI score0.00509EPSS
SaveExploits0References24
OSV
OSV
added 4 days ago3 views

SUSE-SU-2026:3477-1 Security update for bind

This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: Potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: Cache...

8.6CVSS5.5AI score0.00509EPSS
SaveExploits0References13
SUSE Linux
SUSE Linux
added 4 days ago4 views

Security update for bind

This update for bind fixes the following issues CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

9.2CVSS5.5AI score0.00509EPSS
SaveExploits0References24
Rows per page
Query Builder