Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

39482 matches found

NVD
NVD•added 2026/09/29 4:17 p.m.•17 views

CVE-2026-102600

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as proto or constructor can resolve...

7.5CVSS0.00382EPSS
SaveExploits0References3
osv_cve
osv_cve•added 2026/09/29 3:23 p.m.•19 views

CVE-2026-102600 Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as proto or constructor can resolve...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/09/29 3:23 p.m.•51 views

CVE-2026-102600 Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as proto or constructor can resolve...

7.5CVSS0.00382EPSS
SaveExploits0References3
Mend
Mend•added 2026/09/29 3:23 p.m.•13 views

CVE-2026-102600

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as proto or constructor can resolve...

8.7CVSS5.8AI score0.00382EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment•added 2026/09/29 3:23 p.m.•17 views

CVE-2026-102600 Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacker-controlled session IDs in clustered deployments. Special property names such as proto or constructor can resolve...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits0References3
CVE
CVE•added 2026/09/29 3:23 p.m.•22 views

CVE-2026-102600

The @socket.io/cluster-engine component in Socket.IO is vulnerable to a Prototype Pollution flaw prior to version 0.1.1 . The root cause is the use of inherited object properties during the lookup of attacker-controlled session IDs in clustered deployments. By using special property names like __...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits0References3
osv_debian
osv_debian•added 2026/09/29 1:17 p.m.•12 views

DEBIAN-CVE-2026-100825

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

8.8CVSS6.1AI score0.00233EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/29 1:17 p.m.•16 views

CVE-2026-100825

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

8.8CVSS0.00233EPSS
SaveExploits0References5
NVD
NVD•added 2026/09/29 1:17 p.m.•14 views

CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

8.8CVSS0.00231EPSS
SaveExploits0References3
NVD
NVD•added 2026/09/29 1:17 p.m.•15 views

CVE-2026-100814

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

8.8CVSS0.00244EPSS
SaveExploits0References5
osv_debian
osv_debian•added 2026/09/29 1:17 p.m.•9 views

DEBIAN-CVE-2026-100814

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

8.8CVSS6.1AI score0.00244EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/29 1:17 p.m.•11 views

CVE-2026-100793

JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

6.5CVSS0.00269EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu•added 2026/09/29 1:17 p.m.•8 views

UBUNTU-CVE-2026-100793

JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

6.5CVSS6AI score0.00269EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu•added 2026/09/29 1:17 p.m.•16 views

UBUNTU-CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

8.8CVSS5.9AI score0.00231EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve•added 2026/09/29 1:17 p.m.•15 views

CVE-2026-100793

JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

6.5CVSS6AI score0.00269EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2026/09/29 1:17 p.m.•14 views

CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

8.8CVSS5.9AI score0.00231EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu•added 2026/09/29 1:17 p.m.•15 views

UBUNTU-CVE-2026-100814

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

8.8CVSS6.1AI score0.00244EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve•added 2026/09/29 1:17 p.m.•16 views

CVE-2026-100814

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

8.8CVSS6.1AI score0.00244EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu•added 2026/09/29 1:17 p.m.•10 views

UBUNTU-CVE-2026-100825

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

8.8CVSS6.1AI score0.00233EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve•added 2026/09/29 1:17 p.m.•20 views

CVE-2026-100825

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

8.8CVSS6.1AI score0.00233EPSS
SaveExploits0References6
Rows per page
Query Builder