Lucene search
+L

3177 matches found

EUVD
EUVD
•added 2026/09/16 8:32 p.m.•14 views

EUVD-2026-81070

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

7.6CVSS5.8AI score0.00419EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/16 8:32 p.m.•30 views

CVE-2026-92812 decap-server Path Traversal via Sibling Directory Prefix Matching

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

7.6CVSS0.00419EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/16 8:14 p.m.•32 views

CVE-2026-20333 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

8.8CVSS0.00315EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 8:14 p.m.•9 views

CVE-2026-20333 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

8.8CVSS6.1AI score0.00315EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 8:14 p.m.•39 views

CVE-2026-20333

CVE-2026-20333 affects Cisco Secure Adaptive Security Appliance (ASA) Software , Secure Firewall Threat Defense (FTD) Software , and Secure Firewall Management Center (FMC) Software . The vulnerability stems from incorrect comparison conditions (classified under CWE-697 ), identified during Cisco...

8.8CVSS6.1AI score0.00315EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 8:14 p.m.•17 views

EUVD-2026-81135

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

8.8CVSS6.1AI score0.00315EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/16 3:28 p.m.•7 views

kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()

A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...

7.8CVSS7.1AI score0.00176EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/16 9:00 a.m.•14 views

CVE-2026-82311 Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false

Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions, despite documented behaviour that it does. The cleanup compares the string identifier Flask-Login stores in the session against the user's integer database identifier, so the...

9.8CVSS5.8AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•3 views

CVE-2026-92812: Improper Limitation of a Pathname to a Restricted Directory

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

7.6CVSS5.8AI score0.00419EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 7:17 p.m.•14 views

CVE-2026-69208

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce because its stale-nonce comparison is inverted. On an application that protects at least one route with DigestAuth, an...

7.5CVSS0.00766EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/15 7:09 p.m.•10 views

EUVD-2026-79186

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect changes authority, but authority comparison excludes the URI scheme. A same-authority redirect from HTTPS to HTTP...

5.9CVSS5.7AI score0.00279EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/09/15 6:50 p.m.•34 views

CVE-2026-69208 Http4s: DigestAuth nonce map grows unbounded

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce because its stale-nonce comparison is inverted. On an application that protects at least one route with DigestAuth, an...

7.5CVSS0.00766EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/15 6:50 p.m.•8 views

CVE-2026-69208 Http4s: DigestAuth nonce map grows unbounded

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce because its stale-nonce comparison is inverted. On an application that protects at least one route with DigestAuth, an...

7.5CVSS5.8AI score
SaveExploits0References6
NVD
NVD
•added 2026/09/15 3:17 p.m.•15 views

CVE-2026-91836

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/staticscanner.go of the component Static Scanner. This manipulation causes incomplete comparison with missing factors. It is possible to launch the attack on the local host. The...

2.8CVSS0.00325EPSS
SaveExploits0References9
EUVD
EUVD
•added 2026/09/15 2:45 p.m.•13 views

EUVD-2026-78767

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/staticscanner.go of the component Static Scanner. This manipulation causes incomplete comparison with missing factors. It is possible to launch the attack on the local host. The...

2.8CVSS4.7AI score0.00325EPSS
SaveExploits0References9
CVE
CVE
•added 2026/09/15 2:45 p.m.•14 views

CVE-2026-91836

OpenClaw ClawScan versions up to 0.1.6 contain a flaw in the Static Scanner component (file internal/runner/static_scanner.go, unknown function). The vulnerability stems from an incomplete comparison with missing factors , allowing a local attacker with low privileges and user interaction to achi...

2.8CVSS4.7AI score0.00325EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/09/15 2:45 p.m.•9 views

CVE-2026-91836 OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/staticscanner.go of the component Static Scanner. This manipulation causes incomplete comparison with missing factors. It is possible to launch the attack on the local host. The...

2.8CVSS4.7AI score0.00325EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/09/15 2:45 p.m.•31 views

CVE-2026-91836 OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/staticscanner.go of the component Static Scanner. This manipulation causes incomplete comparison with missing factors. It is possible to launch the attack on the local host. The...

2.8CVSS0.00325EPSS
SaveExploits0References9
OSV
OSV
•added 2026/09/15 2:45 p.m.•8 views

CVE-2026-91836 OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors

A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/staticscanner.go of the component Static Scanner. This manipulation causes incomplete comparison with missing factors. It is possible to launch the attack on the local host. The...

2.4CVSS5AI score
SaveExploits0References11
OSV
OSV
•added 2026/09/15 11:35 a.m.•17 views

CVE-2026-91997 evolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypass

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...

6.9CVSS5.7AI score
SaveExploits0References6
Rows per page
Query Builder