Lucene search
+L

37375 matches found

AlpineLinux
AlpineLinux
added 2026/06/25 2:29 p.m.11 views

CVE-2026-57236

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Documentencoding= with an invalid encoding e.g., a non-string, or a string containing a null byte raises an exception, but only after freeing the document's current encoding string without...

8.2CVSS5.8AI score0.00341EPSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2026/06/25 12:3 p.m.11 views

libreoffice security update

An update is available for libreoffice. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LibreOffice is an open source, community-developed office productivity...

7.8CVSS7.1AI score0.00078EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/25 8:16 a.m.18 views

CVE-2026-12323

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the DOM: Core & HTML component...

5.4CVSS5.8AI score0.00168EPSS
SaveExploits0References5
OSV
OSV
added 2026/06/25 6:53 a.m.6 views

MINI-27WG-GPFC-JQVH

Bulletin has no description...

9.6CVSS5.7AI score0.00655EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/25 5:11 a.m.20 views

CVE-2026-12316

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

9.1CVSS5.8AI score0.00245EPSS
SaveExploits0References5
OSV
OSV
added 2026/06/25 1:30 a.m.6 views

CGA-VV36-83JW-HJFF

Bulletin has no description...

5.3CVSS5.8AI score0.00163EPSS
SaveExploits0
Redos
Redos
added 2026/06/25 12:0 a.m.9 views

ROS-20260625-73-0019

The vulnerability of the DOM component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protecte...

7.5CVSS5.8AI score0.00317EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/25 12:0 a.m.31 views

PT-2026-52616

Name of the Vulnerable Software and Affected Versions Flowise affected versions not specified Description An unauthenticated path traversal issue exists in the '/api/v1/document-store/loader/process' endpoint. This flaw allows attackers to write arbitrary files to the filesystem by using...

10CVSS6.7AI score0.00864EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/06/25 12:0 a.m.28 views

PT-2026-52451

Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.19.4 Description In the Nokogiri XML and HTML library for Ruby, the root= method of Nokogiri::XML::Document only validates that the new root is a Nokogiri::XML::Node. This allows a DTD Document Type Definition node...

6.3CVSS5.7AI score0.00321EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/24 9:28 p.m.6 views

MINI-RGM7-HG3W-G72H

Bulletin has no description...

6.9CVSS5.8AI score0.00257EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/06/24 6:18 p.m.40 views

CVE-2026-49247 Jellyfin: Potential Authenticated path traversal in /ClientLog/Document

Jellyfin is an open source self hosted media server. From 10.9.0 until 10.11.10, the POST /ClientLog/Document endpoint accepts the Authorization header's Client and Version fields and uses them unsanitized as components of the on-disk filename when persisting client-uploaded log documents. As a...

8.8CVSS0.00344EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/24 6:18 p.m.7 views

CVE-2026-49247 Jellyfin: Potential Authenticated path traversal in /ClientLog/Document

Jellyfin is an open source self hosted media server. From 10.9.0 until 10.11.10, the POST /ClientLog/Document endpoint accepts the Authorization header's Client and Version fields and uses them unsanitized as components of the on-disk filename when persisting client-uploaded log documents. As a...

8.8CVSS6.1AI score
SaveExploits0References3
OSV
OSV
added 2026/06/24 6:17 p.m.11 views

PYSEC-2026-2145

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicio...

5.5CVSS6.2AI score0.00163EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/24 5:13 p.m.25 views

CVE-2026-48789

CVE-2026-48789 affects AnythingLLM on Windows prior to version 1.13.0. The document folder listing route can accept an encoded absolute Windows path that resolves outside the intended documents directory. The shared path containment helper rejects POSIX-style "../" traversal but does not reject W...

4.3CVSS5.9AI score0.00231EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/24 5:13 p.m.40 views

CVE-2026-48789 AnythingLLM: Windows path containment bypass in document folder route

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, on Windows, the document folder listing route can accept an encoded absolute Windows path that resolves outside the intended documents directory. The shared...

4.3CVSS0.00231EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/24 5:13 p.m.13 views

EUVD-2026-39008

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, on Windows, the document folder listing route can accept an encoded absolute Windows path that resolves outside the intended documents directory. The shared...

4.3CVSS5.9AI score0.00231EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/24 5:13 p.m.10 views

CVE-2026-48789 AnythingLLM: Windows path containment bypass in document folder route

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, on Windows, the document folder listing route can accept an encoded absolute Windows path that resolves outside the intended documents directory. The shared...

4.3CVSS6AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/24 5:13 p.m.8 views

CVE-2026-48789

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, on Windows, the document folder listing route can accept an encoded absolute Windows path that resolves outside the intended documents directory. The shared...

4.3CVSS5.9AI score0.00231EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/06/24 3:16 p.m.19 views

CVE-2026-50699

A Stored Cross-Site Scripting XSS vulnerability exists in Frappe Framework version 17.0.0-dev. An authenticated attacker with write access to Auto Repeat can persist HTML/JavaScript in referencedocument using a whitelisted write path and trigger script execution when users open the affected Auto...

4.6CVSS0.00313EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.15 views

Astra Linux – Vulnerability in Firefox and Thunderbird

Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits0References3
Rows per page
Query Builder