Lucene search
+L

55838 matches found

OSV
OSV
added 2026/06/23 11:16 p.m.14 views

MINI-2P8C-V54C-JGC5

Bulletin has no description...

6.1CVSS5.7AI score0.00223EPSS
SaveExploits0
OSV
OSV
added 2026/06/23 11:16 p.m.12 views

MINI-QGFM-Q6X5-359R

Bulletin has no description...

5.3CVSS6.6AI score0.00501EPSS
SaveExploits1
Chainguard
Chainguard
added 2026/06/23 8:21 p.m.28 views

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: rancher, k8s-device-plugin, gpu-operator-fips, node-feature-discovery-fips, podman, sriov-network-device-plugin, sriov-network-device-plugin-fips, cadvisor, cadvisor-fips, gpu-operator, prometheus-podman-exporter-fips, podman-fips, nvidia-container-toolkit-fips,...

3.3CVSS8AI score0.00186EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/06/23 8:21 p.m.30 views

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: rancher, k8s-device-plugin, gpu-operator-fips, node-feature-discovery-fips, podman, sriov-network-device-plugin, sriov-network-device-plugin-fips, cadvisor, cadvisor-fips, gpu-operator, prometheus-podman-exporter-fips, podman-fips, nvidia-container-toolkit-fips,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/23 8:20 p.m.24 views

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cadvisor, podman, nvidia-container-toolkit, buildah, k8s-device-plugin, node-feature-discovery...

5.7AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/23 8:20 p.m.29 views

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cadvisor, podman, nvidia-container-toolkit, buildah, k8s-device-plugin, node-feature-discovery...

3.3CVSS8AI score0.00186EPSS
SaveExploits0
NVD
NVD
added 2026/06/23 6:18 p.m.28 views

CVE-2026-50221

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

5.4CVSS0.00144EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2026/06/23 5:03 p.m.45 views

CVE-2026-50221

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

5.4CVSS6AI score0.00144EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2026/06/23 5:03 p.m.10 views

CVE-2026-50221

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

5.3CVSS6AI score0.00144EPSS
SaveExploits1References3
OSV
OSV
added 2026/06/23 12:24 p.m.12 views

MINI-X29F-9757-H92G

Bulletin has no description...

8.2CVSS5.7AI score0.00174EPSS
SaveExploits0
OSV
OSV
added 2026/06/23 11:56 a.m.10 views

MINI-PCPF-C538-W7PV

Bulletin has no description...

9.4CVSS5.7AI score0.00176EPSS
SaveExploits0
OSV
OSV
added 2026/06/23 7:04 a.m.9 views

SUSE-SU-2026:2518-1 Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache bsc1261640. - CVE-2026-31504: net: fix fanout UAF in packetrelease via NETDEVUP race...

9.8CVSS6.4AI score0.00949EPSS
SaveExploits7References9
ICS
ICS
added 2026/06/23 6:00 a.m.39 views

Hubbell Aclara Metrum Cellular Web Interface

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow attackers to manipulate critical device settings and repeatedly disrupt operations, potentially causing a loss of communications to the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

8.7CVSS5.9AI score0.00711EPSS
SaveExploits0References11
OSV
OSV
added 2026/06/22 10:45 p.m.10 views

GHSA-74P7-6H78-GW8P skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery

Impact Following the path-safety patches in GHSA-wx3m-whqv-xv47 v0.1.2, a comprehensive multi-angle audit surfaced five further vulnerabilities, now patched in v0.1.3: 1. sourcesha argument injection in git ls-tree CRITICAL. InstalledSkill.sourcesha deserialized from .skills.toml committed,...

6AI score
SaveExploits0References5
OSV
OSV
added 2026/06/22 10:42 p.m.11 views

MINI-644W-F88R-42RH

Bulletin has no description...

6.5CVSS5.8AI score0.00326EPSS
SaveExploits0
NVD
NVD
added 2026/06/22 10:16 p.m.25 views

CVE-2026-56324

Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channelself endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled deviceid parameter. Attackers can send multiple requests per second by changing deviceid values to flood the channeldevice...

8.8CVSS0.00465EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/22 9:04 p.m.11 views

CVE-2026-56324

Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channelself endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled deviceid parameter. Attackers can send multiple requests per second by changing deviceid values to flood the channeldevice...

8.8CVSS5.9AI score0.00465EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/22 9:04 p.m.35 views

CVE-2026-56324

Capgo contains a rate limit bypass in the channel_self endpoint prior to version 12.128.2. The vulnerability lets an attacker rotate the user-controlled device_id parameter to bypass rate limiting, enabling multiple requests per second and flooding the channel_devices table, potentially causing d...

8.8CVSS5.9AI score0.00465EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/22 9:04 p.m.28 views

EUVD-2026-38374

Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channelself endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled deviceid parameter. Attackers can send multiple requests per second by changing deviceid values to flood the channeldevice...

8.8CVSS5.9AI score0.00465EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/22 9:04 p.m.42 views

CVE-2026-56324 Capgo - Rate Limit Bypass via User-Controlled device_id Parameter

Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channelself endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled deviceid parameter. Attackers can send multiple requests per second by changing deviceid values to flood the channeldevice...

8.8CVSS0.00465EPSS
SaveExploits0References2
Rows per page
Query Builder