Lucene search
+L

18088 matches found

OSV
OSV
added 2026/07/24 10:33 p.m.7 views

GHSA-29W2-FQ35-V728 AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

Summary The AWS API MCP Server is an open source Model Context Protocol MCP server that enables AI assistants to interact with AWS services and resources through AWS CLI commands. It provides programmatic access to manage your AWS infrastructure while maintaining proper security controls. It...

7.3CVSS6AI score0.0013EPSS
SaveExploits0References7
Snyk
Snyk
added 2026/07/24 9:25 p.m.14 views

Improper Neutralization of Special Elements in Data Query Logic

Overview @budibase/string-templates is a Handlebars wrapper for Budibase templating. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic in the enrichContext process. An attacker can gain unauthorized access to sensitive data, modify...

8.7CVSS5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/07/24 4:16 p.m.6 views

DEBIAN-CVE-2026-64229

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

5.5CVSS5.7AI score0.00121EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/24 4:8 p.m.10 views

CVE-2026-54765

A flaw was found in Traefik's Kubernetes Gateway API provider. An attacker capable of creating an accepted HTTPRoute that shares the same backend Service and port could exploit this vulnerability. The system may incorrectly apply the attacker's route filter context to another route's requests,...

8.5CVSS5.8AI score0.00276EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/24 3:23 p.m.10 views

EUVD-2026-48637

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

5.8AI score0.00121EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/24 3:23 p.m.9 views

CVE-2026-64229 x86/mm: Disable broadcast TLB flush when PCID is disabled

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

5.8AI score
SaveExploits0References6
OSV
OSV
added 2026/07/24 1:40 p.m.6 views

MINI-M6PM-8W9H-VQ4W

Bulletin has no description...

6.5CVSS5.8AI score0.00279EPSS
SaveExploits0
OSV
OSV
added 2026/07/24 1:39 p.m.5 views

MINI-CW57-GP33-85R8

Bulletin has no description...

7.5CVSS6.2AI score0.00467EPSS
SaveExploits0
Schneier on Security
Schneier on Security
added 2026/07/24 11:3 a.m.14 views

Why AI Needs a “Genie Coefficient”

This essay was written with Barath Raghavan, and originally appeared inIEEE Spectrum. Major benchmarks measure what AI can do. None measure whether it does what you mean: the distance between what you ask an AI to do and the unspoken assumptions about how you want the AI to do it. We propose a ne...

5.8AI score
SaveExploits0
F5 Networks
F5 Networks
added 2026/07/24 7:28 a.m.10 views

K000162426: Apache ActiveMQ vulnerability CVE-2026-34197

Security Advisory Description Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access...

8.8CVSS7.6AI score0.9722EPSS
SaveExploits14
OSV
OSV
added 2026/07/24 6:4 a.m.8 views

BELL-CVE-2026-46600

Bulletin has no description...

7.5CVSS7.1AI score0.0035EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/24 4:16 a.m.14 views

CVE-2026-13464

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS0.00343EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/24 3:27 a.m.3 views

OESA-2026-3135 jbig2dec security update

jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input.CVE-2026-38076...

7.5CVSS5.4AI score0.00432EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/24 3:27 a.m.5 views

OESA-2026-3134 jbig2dec security update

jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input.CVE-2026-38076...

7.5CVSS5.4AI score0.00432EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/24 2:31 a.m.26 views

CVE-2026-13464

The CVE concerns Kirki for WordPress (

5.3CVSS5.6AI score0.00343EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/07/24 2:31 a.m.10 views

CVE-2026-13464

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS5.5AI score0.00343EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/07/24 2:31 a.m.42 views

CVE-2026-13464 Kirki <= 6.0.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'context' Parameter

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS0.00343EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/24 12:0 a.m.23 views

PT-2026-64227

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS5.5AI score0.00343EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/24 12:0 a.m.17 views

PT-2026-64344

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc3 Description An issue exists in the x86 memory management where broadcast TLB flushing remains enabled on AMD CPUs that support INVLPGB even when the system is booted with the nopcid option. This occurs because th...

5.5CVSS6AI score0.00121EPSS
SaveExploits0
OSV
OSV
added 2026/07/23 2:7 p.m.6 views

MINI-62GC-C934-2MW8

Bulletin has no description...

7.5CVSS6.9AI score0.00423EPSS
SaveExploits1
Rows per page
Query Builder