Lucene search
+L

35413 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2026/07/30 1:9 p.m.5 views

Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps

Summary Multiple vulnerabilities were addressed in IBM Concert Operate version 5.1.5 Vulnerability Details CVEID:CVE-2025-15366 DESCRIPTION: The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing...

8.7CVSS7AI score0.0116EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2026/07/30 12:0 p.m.19 views

EUVD-2026-51094

A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token the default, the cluster-global Red Hat Cloud pull-secret bearer token is attached to...

7.6CVSS5.9AI score0.00239EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2026/07/30 10:32 a.m.22 views

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In...

6.1AI score
SaveExploits0
OSV
OSV
added 2026/07/30 7:10 a.m.7 views

CLEANSTART-2026-IU37943 Security fixes in cloud-config-server 4.3.2-r3

Package cloud-config-server version 4.3.2-r3 fixes 38 vulnerabilities: CVE-2026-33870, CVE-2026-33871, CVE-2026-42583, CVE-2026-42584, CVE-2026-42587...

9.8CVSS6.7AI score0.01125EPSS
SaveExploits10References1
OSV
OSV
added 2026/07/30 7:10 a.m.6 views

CLEANSTART-2026-ON20634 Security fixes in velero-plugin-for-gcp-fips 1.13.2-r1

Package velero-plugin-for-gcp-fips version 1.13.2-r1 fixes 1 vulnerabilities: CVE-2026-33186...

9.1CVSS7.5AI score0.01557EPSS
SaveExploits1References1
OSV
OSV
added 2026/07/30 7:10 a.m.6 views

CLEANSTART-2026-YS49357 Security fixes in cloud-config-server 4.3.2-r2

Package cloud-config-server version 4.3.2-r2 fixes 15 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...

9.9CVSS6.5AI score0.01563EPSS
SaveExploits2References1
OSV
OSV
added 2026/07/30 7:10 a.m.8 views

CLEANSTART-2026-RM20844 Security fixes in cloud-config-server 4.3.4-r0

Package cloud-config-server version 4.3.4-r0 fixes 15 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...

9.9CVSS5.4AI score0.01563EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.10 views

PT-2026-66603

Name of the Vulnerable Software and Affected Versions WACRM versions prior to 0.7.1 Description An authenticated user with automation privileges can submit an arbitrary webhook URL that the server fetches without utilizing the isDeliverableUrl SSRF guard. This allows Server-Side Request Forgery...

6.4CVSS5.6AI score0.00156EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.16 views

PT-2026-66544

Name of the Vulnerable Software and Affected Versions Leantime version 3.6.2 Description An authenticated attacker can perform server-side request forgery SSRF and local file inclusion LFI by providing unsanitized filenames to the file get contents function within the Blueprints::import method...

8.5CVSS5.6AI score0.00284EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.11 views

PT-2026-66499

Name of the Vulnerable Software and Affected Versions OpenCost versions prior to 1.121.0 Description Authentication is not properly enforced for the 'GET /helmValues' endpoint, which exposes the base64-decoded HELM VALUES environment variable containing cloud provider credentials. Furthermore, th...

8.7CVSS5.4AI score0.00286EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/29 9:17 p.m.10 views

CVE-2026-54249

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that submits message history to a Pydantic AI UI adapter such as the Vercel AI adapter can reference arbitrary files in the application's...

6.8CVSS0.00197EPSS
SaveExploits0References1
CBLMariner
CBLMariner
added 2026/07/29 8:30 p.m.8 views

CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6

CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6. A patched version of the package is available...

7.5CVSS5.8AI score0.00446EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/07/29 8:30 p.m.7 views

CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7

CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7. A patched version of the package is available...

7.5CVSS5.8AI score0.00446EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/29 8:28 p.m.58 views

CVE-2026-54249 VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that submits message history to a Pydantic AI UI adapter such as the Vercel AI adapter can reference arbitrary files in the application's...

6.8CVSS0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/29 8:28 p.m.8 views

CVE-2026-54249 VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that submits message history to a Pydantic AI UI adapter such as the Vercel AI adapter can reference arbitrary files in the application's...

6.8CVSS5.9AI score0.00197EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/29 8:28 p.m.5 views

CVE-2026-54249 VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that submits message history to a Pydantic AI UI adapter such as the Vercel AI adapter can reference arbitrary files in the application's...

6.8CVSS5.9AI score
SaveExploits0References3
OSV
OSV
added 2026/07/29 8:16 p.m.5 views

CVE-2026-46678 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into forcedownload='allow-local' disabling the default block on private/internal IPs, the cloud-metadata blocklist could be bypassed by encoding the...

6.8CVSS5.8AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/29 8:16 p.m.12 views

CVE-2026-46678

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into forcedownload='allow-local' disabling the default block on private/internal IPs, the cloud-metadata blocklist could be bypassed by encoding the...

6.8CVSS5.8AI score0.00419EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
added 2026/07/29 8:16 p.m.9 views

CVE-2026-46678 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into forcedownload='allow-local' disabling the default block on private/internal IPs, the cloud-metadata blocklist could be bypassed by encoding the...

6.8CVSS5.8AI score0.00419EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/29 8:16 p.m.60 views

CVE-2026-46678 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into forcedownload='allow-local' disabling the default block on private/internal IPs, the cloud-metadata blocklist could be bypassed by encoding the...

6.8CVSS0.00419EPSS
SaveExploits0References2
Rows per page
Query Builder