Lucene search
+L

3180 matches found

CVE
CVE
•added 2026/09/17 11:28 a.m.•13 views

CVE-2026-81479

Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Partial String Comparison vulnerability. A low-privileged attacker with local access can exploit this flaw to cause a Denial of Service . The CVSS 3.1 score is 5.8 (MEDIUM) , reflecting a local attack vector with high compl...

5.8CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•1 views

CVE-2026-81479: Partial String Comparison

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

5.8CVSS5.9AI score0.00228EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 9:17 p.m.•12 views

CVE-2026-92812

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

7.6CVSS0.00419EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/16 9:17 p.m.•20 views

CVE-2026-20333

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

8.8CVSS0.00315EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 8:32 p.m.•15 views

EUVD-2026-81070

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

7.6CVSS5.8AI score0.00419EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/16 8:32 p.m.•31 views

CVE-2026-92812 decap-server Path Traversal via Sibling Directory Prefix Matching

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

7.6CVSS0.00419EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/16 8:14 p.m.•9 views

CVE-2026-20333 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

8.8CVSS6.1AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 8:14 p.m.•32 views

CVE-2026-20333 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

8.8CVSS0.00315EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 8:14 p.m.•40 views

CVE-2026-20333

CVE-2026-20333 affects Cisco Secure Adaptive Security Appliance (ASA) Software , Secure Firewall Threat Defense (FTD) Software , and Secure Firewall Management Center (FMC) Software . The vulnerability stems from incorrect comparison conditions (classified under CWE-697 ), identified during Cisco...

8.8CVSS6.1AI score0.00315EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 8:14 p.m.•17 views

EUVD-2026-81135

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

8.8CVSS6.1AI score0.00315EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/16 3:28 p.m.•7 views

kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()

A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...

7.8CVSS7.1AI score0.00176EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/16 9:00 a.m.•14 views

CVE-2026-82311 Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false

Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions, despite documented behaviour that it does. The cleanup compares the string identifier Flask-Login stores in the session against the user's integer database identifier, so the...

9.8CVSS5.8AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•3 views

CVE-2026-92812: Improper Limitation of a Pathname to a Restricted Directory

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

7.6CVSS5.8AI score0.00419EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 7:17 p.m.•14 views

CVE-2026-69208

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce because its stale-nonce comparison is inverted. On an application that protects at least one route with DigestAuth, an...

7.5CVSS0.00766EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/15 7:09 p.m.•10 views

EUVD-2026-79186

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect changes authority, but authority comparison excludes the URI scheme. A same-authority redirect from HTTPS to HTTP...

5.9CVSS5.7AI score0.00279EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/09/15 6:50 p.m.•34 views

CVE-2026-69208 Http4s: DigestAuth nonce map grows unbounded

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce because its stale-nonce comparison is inverted. On an application that protects at least one route with DigestAuth, an...

7.5CVSS0.00766EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/15 6:50 p.m.•8 views

CVE-2026-69208 Http4s: DigestAuth nonce map grows unbounded

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce because its stale-nonce comparison is inverted. On an application that protects at least one route with DigestAuth, an...

7.5CVSS5.8AI score
SaveExploits0References6
NVD
NVD
•added 2026/09/15 3:17 p.m.•15 views

CVE-2026-91836

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/staticscanner.go of the component Static Scanner. This manipulation causes incomplete comparison with missing factors. It is possible to launch the attack on the local host. The...

2.8CVSS0.00325EPSS
SaveExploits0References9
EUVD
EUVD
•added 2026/09/15 2:45 p.m.•13 views

EUVD-2026-78767

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/staticscanner.go of the component Static Scanner. This manipulation causes incomplete comparison with missing factors. It is possible to launch the attack on the local host. The...

2.8CVSS4.7AI score0.00325EPSS
SaveExploits0References9
CVE
CVE
•added 2026/09/15 2:45 p.m.•14 views

CVE-2026-91836

OpenClaw ClawScan versions up to 0.1.6 contain a flaw in the Static Scanner component (file internal/runner/static_scanner.go, unknown function). The vulnerability stems from an incomplete comparison with missing factors , allowing a local attacker with low privileges and user interaction to achi...

2.8CVSS4.7AI score0.00325EPSS
SaveExploits0References9
Rows per page
Query Builder