Lucene search
+L

21878 matches found

RedhatCVE
RedhatCVE
•added 2026/08/10 8:44 p.m.•10 views

CVE-2026-18941

A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "noauth," meaning no security manager is installed. This default allows unauthenticated and unauthorized access to feature-server, registry-server, and offline-server endpoints...

7.7CVSS6.3AI score0.00589EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/10 8:44 p.m.•42 views

CVE-2026-13717

CVE-2026-13717 describes a misconfiguration in the Red Hat OpenShift AI (RHOAI) MaaS Gateway used in a model-serving context. The flaw permits a standard user with low privileges to intercept, read, log, and alter MaaS model traffic, including sensitive data such as access keys, input prompts, an...

8.8CVSS5.2AI score0.00355EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/10 7:24 p.m.•26 views

CVE-2025-13293 Backdoor / default root credentials

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...

9.3CVSS0.00371EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/08/10 4:56 p.m.•8 views

Eclipse Foundation OpenJ9: Eclipse OpenJ9: Incorrect method delegation can lead to integrity issues

A flaw was found in Eclipse OpenJ9. When executing specially crafted class files, the Java Virtual Machine JVM incorrectly delegates method calls from a recompiled abstract superclass method to an interface default method. This can lead to unexpected program behavior and potential data integrity...

9.6CVSS5.2AI score0.00291EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/08/10 4:49 p.m.•8 views

Eclipse Foundation OpenJ9: Eclipse OpenJ9: Incorrect method delegation can lead to integrity issues

A flaw was found in Eclipse OpenJ9. When executing specially crafted class files, the Java Virtual Machine JVM incorrectly delegates method calls from a recompiled abstract superclass method to an interface default method. This can lead to unexpected program behavior and potential data integrity...

9.6CVSS5.2AI score0.00291EPSS
SaveExploits0References7
NVD
NVD
•added 2026/08/10 1:20 p.m.•5 views

CVE-2026-68357

In the Linux kernel, the following vulnerability has been resolved: watchdog: pretimeout: Fix UAF in watchdogunregistergovernor When a watchdog governor is unregistered, it updates existing watchdog devices that were using this governor by falling back to defaultgov. If the governor being...

0.00176EPSS
SaveExploits0References8
NVD
NVD
•added 2026/08/10 1:20 p.m.•12 views

CVE-2026-68267

In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default...

0.00168EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:03 p.m.•8 views

EUVD-2026-55458

In the Linux kernel, the following vulnerability has been resolved: watchdog: pretimeout: Fix UAF in watchdogunregistergovernor When a watchdog governor is unregistered, it updates existing watchdog devices that were using this governor by falling back to defaultgov. If the governor being...

5.3AI score0.00176EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/10 12:03 p.m.•31 views

CVE-2026-68357 watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()

In the Linux kernel, the following vulnerability has been resolved: watchdog: pretimeout: Fix UAF in watchdogunregistergovernor When a watchdog governor is unregistered, it updates existing watchdog devices that were using this governor by falling back to defaultgov. If the governor being...

0.00176EPSS
SaveExploits0References8
NVD
NVD
•added 2026/08/10 11:17 a.m.•8 views

CVE-2026-72592

An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application ships with an empty upload extension filter = array and no authentication enabled by default authpass is empty string,...

9.8CVSS0.00535EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/10 11:17 a.m.•13 views

CVE-2026-72574

A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme. When baseurl is unset the default, Pico::getBaseUrl in lib/Pico.php builds the base URL from unvalidated...

6.1CVSS0.00241EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/10 10:41 a.m.•34 views

CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...

9.8CVSS0.00527EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/10 10:41 a.m.•7 views

CVE-2026-72592 dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload

An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application ships with an empty upload extension filter = array and no authentication enabled by default authpass is empty string,...

9.8CVSS6AI score
SaveExploits0References4
CVE
CVE
•added 2026/08/10 10:40 a.m.•39 views

CVE-2026-72574

The CVE-2026-72574 entry describes a host header injection in Pico CMS (Pico, up to version 2.1.4) where Pico::getBaseUrl() builds the base URL from unvalidated request headers (Host, X-Forwarded-Host, X-Forwarded-Proto, X-Forwarded-Port) when base_url is unset. This allows an unauthenticated rem...

6.1CVSS5.4AI score0.00241EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
•added 2026/08/10 10:40 a.m.•7 views

CVE-2026-72574

A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme. When baseurl is unset the default, Pico::getBaseUrl in lib/Pico.php builds the base URL from unvalidated...

6.1CVSS5.4AI score0.00241EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/10 9:17 a.m.•10 views

CVE-2026-21074

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege...

7.2CVSS0.00103EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
•added 2026/08/10 7:42 a.m.•8 views

CVE-2026-21074

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege...

7.2CVSS5.6AI score0.00103EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/10 7:42 a.m.•52 views

CVE-2026-21074

Affected software: Samsung Bixby prior to 4.0.86.0. The issue stems from incorrect default permissions, enabling local attackers to execute arbitrary commands with Bixby privilege. Impact is local privilege escalation; attack requires local access with low privileges and no user interaction. The ...

7.2CVSS5.6AI score0.00103EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:42 a.m.•9 views

EUVD-2026-55099

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege...

7.2CVSS5.6AI score0.00103EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/08/10 7:11 a.m.•5 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: PCI: Endpoint – Avoid creating sub-groups asynchronously Asynchronous creation of sub-groups by a delayed operation could lead to a NULL pointer dereference when the driver directory is removed before the operation completes. The...

5.5CVSS5.2AI score0.00118EPSS
SaveExploits0References2
Rows per page
Query Builder