Lucene search
+L

440890 matches found

OSV
OSV
•added 2026/09/17 5:16 p.m.•11 views

GHSA-W3F4-8PJ2-599W Grav: Path Traversal in ImageMedium::watermark() — arbitrary file disclosure via publicly-cached images

Reported by: Nihad Huseynli @nihaddhuseynli https://github.com/nihaddhuseynli — [email protected] ▎ Note: I attempted to report this via [email protected] first, per SECURITY.md, but the email bounced with 550 5.1.1 Address does not exist. Filing directly here instead. Path Traversal i...

8.7CVSS7.2AI score0.00548EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2026/09/17 5:16 p.m.•15 views

Grav: Path Traversal in ImageMedium::watermark() — arbitrary file disclosure via publicly-cached images

Reported by: Nihad Huseynli @nihaddhuseynli https://github.com/nihaddhuseynli — [email protected] ▎ Note: I attempted to report this via [email protected] first, per SECURITY.md, but the email bounced with 550 5.1.1 Address does not exist. Filing directly here instead. Path Traversal i...

8.7CVSS7.2AI score0.00548EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2026/09/17 5:16 p.m.•10 views

CVE-2026-90063

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...

0.00215EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/17 5:16 p.m.•8 views

AZL-102951 CVE-2026-90063 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...

5.9AI score0.00215EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/17 5:16 p.m.•11 views

DEBIAN-CVE-2026-90063

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...

6AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 5:16 p.m.•12 views

CVE-2026-90055

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization syzbot reported a shift-out-of-bounds in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987 Comm: syz.0.18...

0.0022EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/17 5:16 p.m.•7 views

AZL-102525 CVE-2026-90055 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization syzbot reported a shift-out-of-bounds in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987 Comm: syz.0.18...

5.8AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/17 5:16 p.m.•13 views

DEBIAN-CVE-2026-90055

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization syzbot reported a shift-out-of-bounds in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987 Comm: syz.0.18...

5.8AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/17 5:16 p.m.•8 views

UBUNTU-CVE-2026-90055

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization syzbot reported a shift-out-of-bounds in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987 Comm: syz.0.18...

5.8AI score0.0022EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/17 5:16 p.m.•8 views

UBUNTU-CVE-2026-90063

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...

6AI score0.00215EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/09/17 5:16 p.m.•13 views

CVE-2026-90063

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...

5.9AI score0.00215EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/09/17 5:16 p.m.•13 views

CVE-2026-90055

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization syzbot reported a shift-out-of-bounds in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987 Comm: syz.0.18...

5.8AI score0.0022EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/17 5:15 p.m.•11 views

Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata

Summary The Pebble template engine's http function in Kestra OSS accepts user-controlled URLs without any validation, allowing Server-Side Request Forgery SSRF attacks. An unauthenticated attacker can import a malicious Flow YAML and execute it to access internal services, cloud metadata endpoint...

8.6CVSS6.2AI score0.00406EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2026/09/17 5:15 p.m.•5 views

GHSA-R56G-Q4P6-M3P6 Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata

Summary The Pebble template engine's http function in Kestra OSS accepts user-controlled URLs without any validation, allowing Server-Side Request Forgery SSRF attacks. An unauthenticated attacker can import a malicious Flow YAML and execute it to access internal services, cloud metadata endpoint...

8.6CVSS6.2AI score0.00406EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/09/17 5:11 p.m.•15 views

Important: Red Hat Security Advisory: perl-XML-LibXML security update

An update for perl-XML-LibXML is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS7.1AI score0.00882EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/17 5:11 p.m.•16 views

perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names

A flaw was found in XML::LibXML for Perl. A remote attacker could exploit this vulnerability when processing specially crafted XML node names containing incomplete UTF-8 character sequences. This can lead to an out-of-bounds read in heap memory, potentially causing the application to crash and...

7.5CVSS7.2AI score0.00882EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/09/17 5:05 p.m.•15 views

Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix GHSA-8qqm-fp2q-v734)

Affected component: filters/openpolicyagent/openpolicyagent.go → ExtractHttpBodyOptionally; combined with github.com/open-policy-agent/opa-envoy-plugin envoyauth/request.go → getParsedBody / checkIfHTTPBodyTruncated. Filter: opaAuthorizeRequestWithBody. - Affected versions: = 0.27.33 current HEAD...

7.5CVSS6AI score0.00451EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/09/17 5:05 p.m.•12 views

GHSA-5GPM-RGJ3-9Q76 Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix GHSA-8qqm-fp2q-v734)

Affected component: filters/openpolicyagent/openpolicyagent.go → ExtractHttpBodyOptionally; combined with github.com/open-policy-agent/opa-envoy-plugin envoyauth/request.go → getParsedBody / checkIfHTTPBodyTruncated. Filter: opaAuthorizeRequestWithBody. - Affected versions: = 0.27.33 current HEAD...

7.5CVSS6AI score0.00451EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/17 5:04 p.m.•8 views

GHSA-J497-X9HR-X34X RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

Summary A data integrity and protocol corruption vulnerability exists in the AMQP client's property serialization logic. When encoding AMQP short string shortstr fields—such as identifiers, routing strings, and content metadata—the length of the string is explicitly cast to a fixed-size 8-bit...

9.1CVSS6.2AI score0.00524EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/09/17 5:04 p.m.•14 views

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

Summary A data integrity and protocol corruption vulnerability exists in the AMQP client's property serialization logic. When encoding AMQP short string shortstr fields—such as identifiers, routing strings, and content metadata—the length of the string is explicitly cast to a fixed-size 8-bit...

9.1CVSS6.2AI score0.00524EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder