Lucene search
+L

1119939 matches found

NVD
NVD
added yesterday8 views

CVE-2026-72530

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

9.5CVSS
SaveExploits1References3
NVD
NVD
added yesterday8 views

CVE-2026-72529

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

9.8CVSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2026-64832

A flaw was found in FFmpeg, specifically within the NVIDIA NVDEC hardware decoder. A remote attacker could exploit this double-free vulnerability by providing a specially crafted video file. This can lead to memory corruption, potentially allowing for arbitrary code execution or causing a denial ...

8.8CVSS5.7AI score0.00335EPSS
SaveExploits0References6
NVD
NVD
added yesterday6 views

CVE-2026-49441

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of processfilesfromworker in framework/wazuh/core/cluster/master.py trusts a peer-controlled filepath key from filesmetadata.json. The...

9.1CVSS
SaveExploits0References5
NVD
NVD
added yesterday4 views

CVE-2026-44901

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge in framework/wazuh/core/results.py trusts the sortcasting field in a cluster worker's JSON response. During a distributed API merge...

8.4CVSS
SaveExploits0References5
NVD
NVD
added yesterday9 views

CVE-2026-20319

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

7.5CVSS
SaveExploits0References2
OSV
OSV
added yesterday4 views

MINI-6255-PM4G-WF8X

Bulletin has no description...

8.7CVSS4.8AI score0.00396EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday8 views

Malicious code in ai-texts-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module present...

5.6AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-70628

A flaw was found in FFmpeg. An attacker could exploit a signed integer overflow vulnerability within the DVB subtitle parser by providing a specially crafted WTV Windows Recorded TV Show file. This overflow can lead to a heap buffer overflow, enabling out-of-bounds memory writes. The consequence ...

8.5CVSS6.1AI score0.0015EPSS
SaveExploits0References7
Cvelist
Cvelist
added yesterday35 views

CVE-2026-72530

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

9.5CVSS
SaveExploits1References1
EUVD
EUVD
added yesterday12 views

EUVD-2026-62588

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

9.5CVSS8.9AI score
SaveExploits1References1
Vulnrichment
Vulnrichment
added yesterday8 views

CVE-2026-72530

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

9.5CVSS8.9AI score
SaveExploits1References1
CVE
CVE
added yesterday60 views

CVE-2026-72530

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

9.5CVSS8.9AI score
SaveIn wildExploits1References3Affected Software1
EUVD
EUVD
added yesterday12 views

EUVD-2026-62587

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

9.8CVSS8.9AI score
SaveExploits1References1
Cvelist
Cvelist
added yesterday38 views

CVE-2026-72529

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

9.8CVSS
SaveExploits1References1
CVE
CVE
added yesterday83 views

CVE-2026-72529

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

9.8CVSS8.9AI score
SaveIn wildExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-70632

A flaw was found in FFmpeg. This out-of-bounds heap write vulnerability exists within the native GoPro CineForm HD CFHD decoder. A remote attacker can exploit this by providing a specially crafted AVI Audio Video Interleave file during stream analysis. This can lead to memory corruption and may b...

8.5CVSS6AI score0.00209EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-64830

A flaw was found in FFmpeg, a widely used multimedia framework. This vulnerability, a heap buffer overflow in the VobSub subtitle demuxer, allows a remote attacker to corrupt memory. By providing a specially crafted subtitle file, an attacker can trigger unbounded writes, which could lead to...

8.8CVSS6.7AI score0.00342EPSS
SaveExploits0References6
OSV
OSV
added yesterday5 views

MINI-XQM3-3QP6-5PG9

Bulletin has no description...

8.4CVSS5AI score0.00107EPSS
SaveExploits0
OSV
OSV
added yesterday6 views

MINI-J72V-9MFM-G5MW

Bulletin has no description...

7.5CVSS4.9AI score0.00248EPSS
SaveExploits0
Rows per page
Query Builder