Lucene search
+L

8890 matches found

AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.11 views

Astra Linux – Vulnerability in grub2

A vulnerability has been identified in the GRUB2 bootloader’s network module, posing an immediate Denial of Service DoS risk. This flaw is a use-after-free issue, as the netsetvlan command is not properly unregistered when the network module is unloaded from memory. An attacker who can execute th...

4.9CVSS5.8AI score0.00147EPSS
SaveExploits0References3
PyPA
PyPA
added 2026/06/24 1:16 p.m.15 views

PYSEC-2026-229

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

6.9CVSS5.8AI score0.00756EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/06/24 1:16 p.m.15 views

PYSEC-2026-229

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

6.5CVSS5.8AI score0.02639EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/24 1:16 p.m.21 views

CVE-2026-56262

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

6.9CVSS0.00756EPSS
SaveExploits0References3
PyPA
PyPA
added 2026/06/24 1:16 p.m.13 views

PYSEC-0000-CVE-2026-56262

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

6.9CVSS5.8AI score0.00756EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/24 11:53 a.m.12 views

CVE-2026-56262 Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

6.9CVSS5.9AI score0.00756EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/24 11:53 a.m.15 views

EUVD-2026-38745

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

6.9CVSS5.9AI score0.00756EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/06/24 11:53 a.m.10 views

CVE-2026-56262

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

6.9CVSS5.9AI score0.00756EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/06/24 12:00 a.m.13 views

The vulnerabilities of JADM components, the JVM diagnostics software for monitoring Oracle Application Performance Management, part of the Oracle Enterprise Manager software platform, allow attackers to gain unauthorized access to information or cause service failures.

The vulnerability of JADM components, a software for JVM diagnostics and monitoring within Oracle Application Performance Management, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information or cause service...

9.4CVSS5.8AI score0.00447EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/24 12:00 a.m.16 views

Vulnerability of the Router component: The general proxy server MySQL Router of the Oracle MySQL Database Management System allows a hacker to cause a service failure.

Vulnerability of the Router component: The general proxy server of the Oracle MySQL Server database management system is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service interruptions using the TLS network protocol...

7.8CVSS5.8AI score0.00463EPSS
SaveExploits0References2Affected Software1
Redos
Redos
added 2026/06/24 12:00 a.m.11 views

ROS-20260624-73-0013

The vulnerability in Python-Django is related to errors in processing parameter lengths of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.3CVSS7.2AI score0.00423EPSS
SaveExploits0
Redos
Redos
added 2026/06/24 12:00 a.m.10 views

ROS-20260624-73-0028

The vulnerability in Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS6.8AI score0.00461EPSS
SaveExploits1
Redos
Redos
added 2026/06/24 12:00 a.m.10 views

ROS-20260624-73-0005

The vulnerability of the swfdefbitsjpeg function in the MP4Box packaging engine of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures...

6.5CVSS7AI score0.00252EPSS
SaveExploits0
Redos
Redos
added 2026/06/24 12:00 a.m.15 views

ROS-20260624-73-0042

The vulnerability in python-aiohttp is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.9CVSS5.9AI score0.0044EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/06/24 12:00 a.m.10 views

The vulnerability of the Security Framework component of the Oracle WebCenter Portal, which allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to access control errors. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or cause service failures...

9.9CVSS5.8AI score0.00402EPSS
SaveExploits0References2Affected Software1
Redos
Redos
added 2026/06/24 12:00 a.m.10 views

ROS-20260624-73-0050

The vulnerability in python-aiohttp is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS5.9AI score0.0044EPSS
SaveExploits0
Redos
Redos
added 2026/06/24 12:00 a.m.10 views

ROS-20260624-73-0041

The vulnerability in python-aiohttp is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.9CVSS5.9AI score0.00384EPSS
SaveExploits0
Redos
Redos
added 2026/06/24 12:00 a.m.17 views

ROS-20260624-73-0046

The vulnerability in python-aiohttp is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

8.7CVSS5.9AI score0.0044EPSS
SaveExploits0
Redos
Redos
added 2026/06/24 12:00 a.m.12 views

ROS-20260624-73-0032

The vulnerability in Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS6.7AI score0.00512EPSS
SaveExploits0
NVD
NVD
added 2026/06/23 5:16 p.m.20 views

CVE-2025-61027

An issue in the tsetpush component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS0.00497EPSS
SaveExploits0References1
Rows per page
Query Builder