Lucene search
+L

18082 matches found

RedhatCVE
RedhatCVE
added 2026/07/24 4:8 p.m.10 views

CVE-2026-54765

A flaw was found in Traefik's Kubernetes Gateway API provider. An attacker capable of creating an accepted HTTPRoute that shares the same backend Service and port could exploit this vulnerability. The system may incorrectly apply the attacker's route filter context to another route's requests,...

8.5CVSS5.8AI score0.00276EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/24 3:23 p.m.9 views

CVE-2026-64229 x86/mm: Disable broadcast TLB flush when PCID is disabled

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

5.8AI score
SaveExploits0References6
EUVD
EUVD
added 2026/07/24 3:23 p.m.10 views

EUVD-2026-48637

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

5.8AI score0.00121EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/24 1:40 p.m.6 views

MINI-M6PM-8W9H-VQ4W

Bulletin has no description...

6.5CVSS5.8AI score0.00279EPSS
SaveExploits0
OSV
OSV
added 2026/07/24 1:39 p.m.5 views

MINI-CW57-GP33-85R8

Bulletin has no description...

7.5CVSS6.2AI score0.00467EPSS
SaveExploits0
Schneier on Security
Schneier on Security
added 2026/07/24 11:3 a.m.14 views

Why AI Needs a “Genie Coefficient”

This essay was written with Barath Raghavan, and originally appeared inIEEE Spectrum. Major benchmarks measure what AI can do. None measure whether it does what you mean: the distance between what you ask an AI to do and the unspoken assumptions about how you want the AI to do it. We propose a ne...

5.8AI score
SaveExploits0
F5 Networks
F5 Networks
added 2026/07/24 7:28 a.m.10 views

K000162426: Apache ActiveMQ vulnerability CVE-2026-34197

Security Advisory Description Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access...

8.8CVSS7.6AI score0.9722EPSS
SaveExploits14
OSV
OSV
added 2026/07/24 6:4 a.m.8 views

BELL-CVE-2026-46600

Bulletin has no description...

7.5CVSS7.1AI score0.0035EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/24 4:16 a.m.14 views

CVE-2026-13464

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS0.00343EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/24 3:27 a.m.3 views

OESA-2026-3135 jbig2dec security update

jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input.CVE-2026-38076...

7.5CVSS5.4AI score0.00432EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/24 3:27 a.m.5 views

OESA-2026-3134 jbig2dec security update

jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input.CVE-2026-38076...

7.5CVSS5.4AI score0.00432EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/24 2:31 a.m.26 views

CVE-2026-13464

The CVE concerns Kirki for WordPress (

5.3CVSS5.6AI score0.00343EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/07/24 2:31 a.m.10 views

CVE-2026-13464

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS5.5AI score0.00343EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/07/24 2:31 a.m.42 views

CVE-2026-13464 Kirki <= 6.0.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'context' Parameter

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS0.00343EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/24 12:0 a.m.22 views

PT-2026-64227

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS5.5AI score0.00343EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/24 12:0 a.m.17 views

PT-2026-64344

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc3 Description An issue exists in the x86 memory management where broadcast TLB flushing remains enabled on AMD CPUs that support INVLPGB even when the system is booted with the nopcid option. This occurs because th...

5.5CVSS6AI score0.00121EPSS
SaveExploits0
OSV
OSV
added 2026/07/23 2:7 p.m.5 views

MINI-62GC-C934-2MW8

Bulletin has no description...

7.5CVSS6.9AI score0.00423EPSS
SaveExploits1
OSV
OSV
added 2026/07/23 1:16 p.m.9 views

CVE-2026-65914 DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization

DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper...

5.3CVSS5.5AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/07/23 1:16 p.m.5 views

CVE-2026-65904 DOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mode

DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...

4.7CVSS5.9AI score0.00165EPSS
SaveExploits1References2
OSV
OSV
added 2026/07/23 11:41 a.m.8 views

PYSEC-2026-3499 PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal

PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal Summary PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage. The SDK reference describes the module as providing: - artifact storage for tool...

7.5CVSS5.3AI score
SaveExploits0References5
Rows per page
Query Builder