Lucene search
+L

5101 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/11 12:00 a.m.•11 views

The vulnerability of the EncryptInterceptor component of the Apache Tomcat application server allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the EncryptInterceptor component in the Apache Tomcat application server is related to insufficient technical documentation. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

9.4CVSS6.4AI score0.00506EPSS
SaveExploits0References10Affected Software7
Vulnrichment
Vulnrichment
•added 2026/09/08 12:23 a.m.•13 views

CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

2.3CVSS5.9AI score0.00664EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/08 12:23 a.m.•14 views

EUVD-2026-72589

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

2.3CVSS5.9AI score0.00664EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/08 12:23 a.m.•36 views

CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

2.3CVSS0.00664EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/08 12:23 a.m.•11 views

CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

2.3CVSS5.8AI score0.00664EPSS
SaveExploits0References9
OSV
OSV
•added 2026/09/08 12:23 a.m.•10 views

EEF-CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

Summary Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

2.3CVSS5.8AI score0.00664EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•21 views

PT-2026-86964

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage rules allows a malicious package publisher to inject terminal control sequences into the output of mix usage rules.search docs. mix usage rules.search docs searches Hex documentation through...

2.3CVSS5.8AI score0.00664EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/07 8:36 a.m.•14 views

Security Bulletin: IBM Documentation Offline is vulnerable to `Denial of Service via __proto__ header name in req.headersDistinct` due to Node.js (CVE-2026-21710)

Summary IBM Documentation Offline utilizes Node.js as a third-party component, which contains a vulnerability that could potentially affect your product's stability and security. CVE-2026-21710 CVSS: 3.1 is a denial-of-service DoS vulnerability identified in the Node.js core HTTP module. An...

7.5CVSS7.4AI score0.25044EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/09/04 11:46 p.m.•15 views

scanopy v0.17.14

Scanopy Network documentation, without the drawing. Scanopy replaces manual network diagrams with a continuously maintained model of what's actually running. A single daemon scans on a schedule and produces four views from each scan: L2 physical, L3 logical, workloads, and applications. Unlike...

6.3AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/04 9:55 p.m.•13 views

cm-cve-2025-67303-node

This repository does not have a README...

7.5CVSS7.9AI score0.01392EPSS
SaveExploits5
OSV
OSV
•added 2026/09/04 5:17 p.m.•13 views

UBUNTU-CVE-2026-85008

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...

5.3CVSS5.6AI score0.00118EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•2 views

CVE-2026-75980: Improper Neutralization of Input During Web Page Generation

The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content in all versions up to, and including, 4.8.1 due to insufficient input sanitization and output escaping. Thi...

6.4CVSS5.9AI score0.00349EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/08/31 2:24 a.m.•9 views

IS

Este repositorio no tiene un README...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/08/27 4:28 a.m.•15 views

softsensor-docker-prototype

Corelight Software Sensor Docker Bundle प्रलेखन Overview इसमें क्या शामिल है Corelight Software Sensor Zeek Package Manager Corelight-update वैकल्पिक रूप से Installing Docker Debian या RHEL-आधारित सिस्टम पर Docker स्थापित करने के लिए एक स्क्रिप्ट दूसरे Corelight रिपॉजिटरी में शामिल है। स्क्रिप्ट ...

5.3AI score
SaveExploits0References1
NVD
NVD
•added 2026/08/24 1:17 p.m.•15 views

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

4.3CVSS0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/24 12:10 p.m.•12 views

CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

4.3CVSS5.8AI score0.00222EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/24 12:10 p.m.•26 views

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability in which Swagger API documentation was publicly accessible to unauthenticated users. No sensitive data (credentials, PII) was discovered, but the exposure increases the overall attack surface by revealing API structure to potential att...

4.3CVSS5.8AI score0.00222EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/24 12:10 p.m.•15 views

EUVD-2026-64837

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

4.3CVSS5.3AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/24 12:10 p.m.•37 views

CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

4.3CVSS0.00222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•3 views

CVE-2026-21759: Insertion of Sensitive Information Into Debugging Code

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

4.3CVSS5.7AI score0.00222EPSS
SaveExploits0References2
Rows per page
Query Builder