Lucene search
+L

493290 matches found

OSV
OSV
added 2 days ago5 views

UBUNTU-CVE-2026-18487

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...

5.4CVSS5.3AI score0.00318EPSS
SaveExploits0References6
OSV
OSV
added 2 days ago6 views

UBUNTU-CVE-2026-64677

Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read loca...

5.9CVSS5.3AI score0.00755EPSS
SaveExploits0References4
OSV
OSV
added 2 days ago7 views

UBUNTU-CVE-2026-64654

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that...

5.3CVSS5.5AI score0.00736EPSS
SaveExploits0References5
OSV
OSV
added 2 days ago6 views

UBUNTU-CVE-2026-64653

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...

5.1CVSS5.3AI score0.00504EPSS
SaveExploits0References5
OSV
OSV
added 2 days ago5 views

UBUNTU-CVE-2026-71488

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translat...

7.5CVSS5.4AI score0.00346EPSS
SaveExploits0References7
OSV
OSV
added 2 days ago6 views

UBUNTU-CVE-2026-71438

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid's configuration setters mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig merge caller-supplied configuration into Mermaid's interna...

2.4CVSS5.4AI score0.00167EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2 days ago9 views

RockyLinux 8 : kernel-rt (RLSA-2026:50979)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:50979 advisory. kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Bug Fixes and Enhancements: Kernel crash in...

7.3CVSS5.4AI score0.00258EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago4 views

RockyLinux 8 : kernel (RLSA-2026:50978)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:50978 advisory. kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Bug Fixes and Enhancements: Kernel crash in...

7.3CVSS5.6AI score0.00258EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2 days ago17 views

📄 DCMTK 3.7.0 Path Traversal

dcmsend in DCMTK DICOM ToolKit version 3.7.0 is vulnerable to path traversal when it is instructed to read input files from a specially crafted DICOMDIR. This can lead to unauthorized disclosure of readable DICOM objects, including protected health information. Advisory ID: SYSS-2026-047 Product:...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2 days ago19 views

📄 DCMTK 3.7.0 RLE Encoder Heap Out-of-Bounds Read

A proof of concept for a heap out-of-bounds read vulnerability in DCMTK version 3.7.0. The vulnerability is caused by an integer overflow in the RLE encoder's expected-size sanity check. By supplying crafted image dimensions that cause the 32-bit size calculation to wrap around, an attacker can...

5.4AI score
SaveExploits0
EUVD
EUVD
added 2 days ago7 views

EUVD-2025-210649

In sol commit 373d848 2024-12-12, the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server may silently drop the connection or send a CONNACK...

7.5CVSS5.4AI score0.00318EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago4 views

CVE-2025-63235

In sol commit 373d848 2024-12-12, the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server may silently drop the connection or send a CONNACK...

7.5CVSS5.4AI score0.00318EPSS
SaveExploits0References3
OSV
OSV
added 2 days ago5 views

UBUNTU-CVE-2026-70630

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder libavcodec/screenpresso.c that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that...

6.8CVSS5.4AI score0.00132EPSS
SaveExploits0References6
OSV
OSV
added 2 days ago6 views

UBUNTU-CVE-2026-70629

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder libavcodec/rscc.c that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes...

6.8CVSS5.5AI score0.00132EPSS
SaveExploits0References6
OSV
OSV
added 2 days ago6 views

UBUNTU-CVE-2026-64652

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

3.3CVSS5.4AI score0.00117EPSS
SaveExploits0References5
OSV
OSV
added 2 days ago7 views

UBUNTU-CVE-2026-71436

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY Charts are vulnerable to an infinite loop denial of service in the setXAxisRangeData function when configuring an X-Axis with invalid...

5.3CVSS5.4AI score0.00326EPSS
SaveExploits0References8
OSV
OSV
added 2 days ago6 views

UBUNTU-CVE-2026-71437

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.5.0 until 11.16.1, Mermaid Architecture Diagrams are vulnerable to prototype pollution when a diagram defines a group with an id of proto. Because the group id is used directly ...

6.5CVSS5.4AI score0.0029EPSS
SaveExploits0References6
OSV
OSV
added 2 days ago9 views

UBUNTU-CVE-2026-71498

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final bytes form a truncated incomplete multi-byte UTF-8 sequence could cause the native binding to read past the end of the allocated buffer while attempting to decode the final,...

5.1CVSS5.5AI score0.00156EPSS
SaveExploits0References5
Zero Science Lab
Zero Science Lab
added 2 days ago11 views

LightFTP Server 2.4 Race Condition

Summary Small x86-32/x64 FTP Server. Description LightFTP through version 2.4 current master, commit d28c5e0 contains multiple data races in ftpserv.c caused by unsynchronized access to the shared FTPCONTEXT between a connection's control thread and its data-transfer worker thread. In...

8.2CVSS5.4AI score0.00227EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2 days ago14 views

📄 DCMTK 3.7.0 XML Binary File Heap Buffer Overflow

In DCMTK DICOM ToolKit version 3.7.0, the xml2dcm application and the DcmXMLReader library are vulnerable to a heap buffer overflow when importing external binary files larger than 4 GiB via the binary="file" XML attribute. The file size is measured as sizet but narrowed to Uint32 for the heap...

5.7AI score
SaveExploits0
Rows per page
Query Builder