Lucene search
+L

3225 matches found

Snyk
Snyk
•added 2026/06/18 1:06 p.m.•19 views

Partial String Comparison

Overview Affected versions of this package are vulnerable to Partial String Comparison via the router component. An attacker can route requests to unintended backend servers by sending crafted HTTP requests with manipulated Host headers. Remediation Upgrade http-proxy-middleware to version 2.0.10...

8.6CVSS5.9AI score0.00378EPSS
SaveExploits1References2
HackRead
HackRead
•added 2026/06/17 10:52 a.m.•57 views

ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat

A detailed ESET MDR vs Sophos MDR comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach warranties to help you choose...

5.3AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2026/06/16 12:00 a.m.•24 views

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison CVE-2026-6478 postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write...

8.8CVSS5.4AI score0.01006EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2026/06/15 5:32 p.m.•22 views

Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

Description Symfony\Component\Mailer\Bridge\Mailomat\Webhook\MailomatRequestParser::validateSignature parses the X-MOM-Webhook-Signature request header as algo=signature and passes the wire-supplied $algo directly to hashhmac when verifying the request against the configured webhook secret. The...

6.3CVSS5.5AI score0.00247EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2026/06/15 5:32 p.m.•24 views

GHSA-RRJ9-5Q2J-4GVR Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

Description Symfony\Component\Mailer\Bridge\Mailomat\Webhook\MailomatRequestParser::validateSignature parses the X-MOM-Webhook-Signature request header as algo=signature and passes the wire-supplied $algo directly to hashhmac when verifying the request against the configured webhook secret. The...

6.3CVSS5.5AI score0.00247EPSS
SaveExploits0References6
OSV
OSV
•added 2026/06/14 6:17 p.m.•33 views

AZL-90093 CVE-2026-54411 affecting package pam for versions less than 1.5.3-5

Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the...

8.2CVSS5.9AI score0.005EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/12 12:00 a.m.•3 views

CVE-2026-54362: Incorrect Authorization

An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view galaxies that should not have been visible to their organisation. The custom access-control condition intended to restrict galaxies to those owned by the user’s organisation or...

5.3CVSS5.8AI score0.00351EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/12 12:00 a.m.•0 views

CVE-2017-20240: Observable Timing Discrepancy

Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. These versions use Perl's built-in eq comparison. Discrepancies in timing could be used to guess the underlying derived-key...

5.9CVSS5.8AI score0.00319EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/11 8:46 p.m.•17 views

CVE-2026-44249 Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo. Valid public IP addresses ca...

8.1CVSS5.2AI score0.01291EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/11 2:59 p.m.•32 views

CVE-2026-9758

Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted...

7.3CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/06/11 1:27 p.m.•24 views

@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

Impact Wreck strips credential headers Authorization, Cookie, Proxy-Authorization before following a cross-origin redirect, but the origin check compares hostnames only and ignores scheme and port. As a result, credentials are forwarded intact across same-host port changes and HTTPS-to-HTTP...

6.5CVSS5.5AI score0.00176EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/06/11 1:27 p.m.•21 views

GHSA-X426-X7CC-3FPC @hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

Impact Wreck strips credential headers Authorization, Cookie, Proxy-Authorization before following a cross-origin redirect, but the origin check compares hostnames only and ignores scheme and port. As a result, credentials are forwarded intact across same-host port changes and HTTPS-to-HTTP...

6.5CVSS5.5AI score0.00176EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/06/11 6:55 a.m.•123 views

Exploit for CVE-2026-7458

🧨 CVE-2026-7458 – PickPlugins User Verification OTP Bypass Un...

9.8CVSS5.5AI score0.00844EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2026/06/10 4:21 p.m.•166 views

Exploit for Incomplete Comparison with Missing Factors in Arista Eos

README.md markdown CVE-2026-7473 - Arista EOS Tunnel Decapsula...

6.9CVSS5.7AI score0.00649EPSS
SaveExploits1
NVD
NVD
•added 2026/06/10 2:16 p.m.•23 views

CVE-2026-9758

Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted...

7.3CVSS0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/10 12:32 p.m.•16 views

CVE-2026-9758 Improper Certificate Validation in S2OPC

Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted...

7.3CVSS5.8AI score0.00194EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/06/10 2:25 a.m.•24 views

SUSE CVE-2026-52907

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change these comparisons from vs = to avoid accessing one element beyond the end of the arrays. While at it, use ARRAYSIZE instead of the MAX enum values. fix cosmetic issues...

5.3CVSS5.4AI score0.00165EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•39 views

S2OPC OPC UA Toolkit 信任管理问题漏洞

S2OPC OPC UA Toolkit is an open-source development toolkit for OPC UA communication, developed by Systerel. The S2OPC OPC UA Toolkit has a trust management vulnerability, which stems from improper comparison with a list of trusted certificates. This vulnerability may cause well-formatted, untrust...

7.3CVSS5.8AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/10 12:00 a.m.•42 views

PT-2026-48428

Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted...

7.3CVSS5.8AI score0.00194EPSS
SaveExploits0References2
CISA KEV Catalog
CISA KEV Catalog
•added 2026/06/09 12:00 a.m.•27 views

Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

Arista Extensible Operating System EOS contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP...

6.9CVSS5.4AI score0.00649EPSS
SaveIn wildExploits1
Rows per page
Query Builder