Lucene search
+L

14327 matches found

CVE
CVE
added 2026/08/03 6:00 a.m.66 views

CVE-2025-15672

The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...

6.5AI score0.0047EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/03 6:00 a.m.6 views

CVE-2025-15672 Chama < 1.0.13 - Unauthenticated PHP Object Injection

The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...

6.5AI score0.0047EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2026/08/03 5:53 a.m.13 views

br.com.swconsultoria:java-cte (>=3.00.4, <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3, <=3.00.4) +1215 more potentially affected by CVE-2026-58063 via org.bouncycastle:bcprov-jdk16 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1-alpha1, =2.1-alpha1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2026-58063 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519079...

5.3CVSS5.3AI score0.00362EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/08/03 4:34 a.m.12 views

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

7.2AI score0.00615EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/03 4:34 a.m.14 views

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

7.5CVSS7.2AI score0.00355EPSS
SaveExploits0References8
vulnersOsv
vulnersOsv
added 2026/08/03 3:54 a.m.46 views

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21471 more potentially affected by CVE-2026-15055 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-15055 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18517498...

8.2CVSS5.8AI score0.0027EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/08/03 3:54 a.m.20 views

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21471 more potentially affected by CVE-2026-59639 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-59639 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18513024...

8.7CVSS5.8AI score0.00163EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/08/03 3:54 a.m.16 views

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30581 more potentially affected by CVE-2026-12185 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2026-12185 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512523...

8.6CVSS5.8AI score0.00232EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/08/03 3:53 a.m.15 views

amdonov.ospackage-init:amdonov.ospackage-init.gradle.plugin (>=0.1.0, <=0.5.0), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1653 more potentially affected by CVE-2026-59640 via org.bouncycastle:bcpg-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcpg-jdk15on MAVEN version =1.46, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =2023.06.07.114626-93b9d6f, =0.1.3-20210127.1838-76ab4fc, =0.1.4-20220614.0152-5ae0eef, =1.0.0-m11, =1.0.0-m6, =1.0.0-m11, =0.0.1-m20, =0.0.1-m20, =0.0.1-m27, =1.0.0-m11,...

8.7CVSS5.3AI score0.00217EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/08/03 3:53 a.m.16 views

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1056 more potentially affected by CVE-2026-59641 via org.bouncycastle:bcmail-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcmail-jdk15on MAVEN version =1.46, =2.3.0, =1.5.5, =1.5.5, =1.2.0, =1.1.7, =1.1.9, =1.1.10 and more Source cves: CVE-2026-59641 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512872...

8.7CVSS5.8AI score0.00146EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/08/03 2:09 a.m.17 views

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

5.5AI score0.00615EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/03 12:00 a.m.14 views

RHEL 10 : osbuild-composer (RHSA-2026:49526)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49526 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

7.5CVSS7.6AI score0.00615EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.45 views

PT-2026-67394

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new from xml reads assertion identity with document-wide XPath instead of the signed subtree. new from xml reads the NameID, attribute values, SessionIndex, audience and other identity...

5.6AI score0.00196EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/03 12:00 a.m.6 views

ALSA-2026:49526 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: crypto/x50...

7.5CVSS7.4AI score0.00615EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/02 12:00 a.m.19 views

AlmaLinux 8 : osbuild-composer (ALSA-2026:48790)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:48790 advisory. google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation CVE-2026-33186...

9.1CVSS5.6AI score0.01557EPSS
SaveExploits1References7
vulnersOsv
vulnersOsv
added 2026/08/01 12:00 p.m.16 views

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0228...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/08/01 12:00 p.m.18 views

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0229...

5.4AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/08/01 9:03 a.m.32 views

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites

Attackers modified a JavaScript file served by advertising technology company Adform , turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to...

5.5AI score
SaveExploits0
OSV
OSV
added 2026/08/01 12:01 a.m.14 views

RLSA-2026:48790 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

9.1CVSS6.7AI score0.01557EPSS
SaveExploits1References6
VulnCheck KEV
VulnCheck KEV
added 2026/08/01 12:00 a.m.13 views

VulnCheck KEV: CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

9.8CVSS5.4AI score0.00463EPSS
SaveIn wildExploits0References4
Rows per page
Query Builder