Lucene search
+L

501470 matches found

UbuntuCve
UbuntuCve
added 5 days ago7 views

CVE-2026-71218

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

5.3CVSS5.5AI score0.00383EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 5 days ago5 views

CVE-2026-73501

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...

9.1CVSS5.4AI score0.00344EPSS
SaveExploits0References4
CVE
CVE
added 5 days ago20 views

CVE-2026-67991

CVE-2026-67991 affects crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83, where RubyLLM::Utils.underscore contains a polynomial-time regular expression denial-of-service condition on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and...

7.5CVSS5.2AI score0.0036EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 5 days ago7 views

CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

5.5AI score0.00145EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 5 days ago8 views

CVE-2026-19566

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any prefix length matching 0|1-90-9 and passes it to width2bits, which builds the mask as '1' x $width + 8, one character per bit. The inc...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 5 days ago2 views

PT-2026-71665

Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name...

7.8CVSS5.4AI score0.00154EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 5 days ago2 views

PT-2026-71683

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S find byclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

5.3CVSS5.4AI score0.00434EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 5 days ago4 views

PT-2026-71716

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle incoming method in libp2p/stream muxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with read exactly before validating it against MAX WINDOW SIZE or checking...

7.5CVSS5.4AI score0.00351EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 5 days ago9 views

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

5.4CVSS5AI score0.00185EPSS
SaveExploits0References4
EUVD
EUVD
added 5 days ago6 views

EUVD-2026-58030

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

8.4CVSS5.9AI score0.00192EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago26 views

CVE-2026-67986

Summary: CVE-2026-67986 affects the Ruby gem amazing_print. A flaw in AwesomeMethodArray#grep allows Ruby code execution in the host process when a block is used and a specially named method containing interpolation syntax is interpolated into a dynamically constructed eval string. Exploitation r...

8.4CVSS5.9AI score0.00192EPSS
SaveExploits0References3
Cvelist
Cvelist
added 5 days ago24 views

CVE-2026-67991

crmne/rubyllm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and a denial of service...

0.0036EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 5 days ago8 views

CVE-2026-68430

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUGON There's no need to crash the kernel for this case. cherry picked from commit 4d7c25208ca612b754f3bf39e9f16e725b828891...

5.5AI score0.00168EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 5 days ago5 views

CVE-2026-73229

Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's restframework/renderers.py AdminRenderer.render uses overridemethod to simulate GET and directly invokes view.get without view.checkpermissions while rendering an invalid write...

4.3CVSS5.4AI score0.00273EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 5 days ago7 views

CVE-2026-73213

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

5.8CVSS5.3AI score0.00303EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 5 days ago6 views

CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.6AI score0.0014EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 5 days ago10 views

CVE-2026-73071

Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, jsondecodeitem in src/json.c can retain a stale pointer after jsondecodestring invokes channelfill to refill and free the current buffer, causing the error path to read freed memory instead of reader-jsbuf +...

3.3CVSS5.3AI score0.00109EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 5 days ago7 views

CVE-2026-68436

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time most of it the two inlined dcscratchspace copies and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its actual siz...

5.4AI score0.00145EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 5 days ago5 views

CVE-2026-73072

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...

8.5CVSS5.3AI score0.00125EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 5 days ago7 views

CVE-2026-73492

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: or vbscript: URIs whose scheme is split by semicolon-less numeric character references...

2.3CVSS5.4AI score0.00245EPSS
SaveExploits0References5
Rows per page
Query Builder