Lucene search
+L

77036 matches found

OPENSUSE Linux
OPENSUSE Linux
added 2026/08/05 12:0 a.m.9 views

Security update for python-httplib2 (important)

openSUSE security update: security update for python-httplib2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21526-1 Rating: important References: bsc1271095 Cross-References: CVE-2026-59939 CVSS scores: CVE-2026-59939 SUSE : 7.5...

7.5CVSS6.6AI score0.0041EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2026/08/05 12:0 a.m.16 views

The vulnerabilities of the functions pkcs7_decrypt_smime(), pkcs7_decrypt_pem(), and pkcs7_decrypt_der in the Python programming language-based cryptography library allow attackers to compromise the confidentiality of protected information.

The vulnerabilities of the functions pkcs7decryptsmime, pkcs7decryptpem, and pkcs7decryptder in the Python programming language-based cryptography library are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities could allow an attacker to influence the...

5.9CVSS5.5AI score0.00175EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2026/08/04 8:54 p.m.8 views

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...

8.7CVSS5.6AI score0.00261EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/08/04 8:54 p.m.7 views

GHSA-PWXH-7358-JQ2X Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...

8.7CVSS5.6AI score0.00261EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/04 8:53 p.m.9 views

CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...

8.7CVSS5.4AI score
SaveExploits0References6
NVD
NVD
added 2026/08/04 7:16 p.m.12 views

CVE-2026-69702

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

7.1CVSS0.00305EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/04 7:16 p.m.14 views

CVE-2026-13229

Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...

7.1CVSS0.00246EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/04 6:16 p.m.14 views

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

5.3CVSS0.00264EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/04 5:45 p.m.8 views

CVE-2026-69702 SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

7.1CVSS5.5AI score0.00305EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/04 5:45 p.m.11 views

EUVD-2026-52851

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

7.1CVSS5.5AI score0.00305EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/04 5:33 p.m.37 views

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

5.3CVSS0.00264EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/04 5:33 p.m.43 views

CVE-2026-47622

Technical details for CVE-2026-47622 are not publicly available in the provided documents. The sources describe an information disclosure risk but do not disclose affected components, root cause, or mitigations. Monitor for updates.

5.3CVSS5.5AI score0.00264EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/08/04 5:33 p.m.14 views

EUVD-2026-52817

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

5.3CVSS5.5AI score0.00264EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/04 5:24 p.m.11 views

CVE-2026-13697

A flaw was found in undici. This vulnerability allows for cross-user information disclosure when malformed Cache-Control private directives cause private response bodies and headers, such as Set-Cookie data, to be stored in a shared cache and subsequently exposed to other users. Additionally, a...

9.1CVSS7AI score0.00325EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/04 4:11 p.m.9 views

faraday: Faraday: Denial of Service via crafted nested query strings

A flaw was found in Faraday, an HTTP client library. The Faraday::NestedParamsEncoder, which handles nested query parameters, does not limit the depth of nested query strings during decoding. A remote attacker can exploit this by sending a specially crafted query string, causing the application t...

7.5CVSS7.2AI score0.00487EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/08/04 4:4 p.m.8 views

faraday: Faraday: Denial of Service via crafted nested query strings

A flaw was found in Faraday, an HTTP client library. The Faraday::NestedParamsEncoder, which handles nested query parameters, does not limit the depth of nested query strings during decoding. A remote attacker can exploit this by sending a specially crafted query string, causing the application t...

7.5CVSS5.5AI score0.00487EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/08/04 4:1 p.m.10 views

faraday: Faraday: Denial of Service via crafted nested query strings

A flaw was found in Faraday, an HTTP client library. The Faraday::NestedParamsEncoder, which handles nested query parameters, does not limit the depth of nested query strings during decoding. A remote attacker can exploit this by sending a specially crafted query string, causing the application t...

7.5CVSS7.2AI score0.00487EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/08/04 4:1 p.m.6 views

faraday: Faraday: Denial of Service via crafted nested query strings

A flaw was found in Faraday, an HTTP client library. The Faraday::NestedParamsEncoder, which handles nested query parameters, does not limit the depth of nested query strings during decoding. A remote attacker can exploit this by sending a specially crafted query string, causing the application t...

7.5CVSS5.5AI score0.00487EPSS
SaveExploits1References5
OSV
OSV
added 2026/08/04 3:38 p.m.5 views

OPENSUSE-SU-2026:21526-1 Security update for python-httplib2

This update for python-httplib2 fixes the following issue - CVE-2026-59939: Fixed a vulnerability where a malicious or compromised HTTP server could return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError or OOM-kill in the client process...

7.5CVSS6.6AI score0.0041EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2026/08/04 1:59 p.m.6 views

netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2TYPESSL TLV Type-Length-Value header. This can lead to an IndexOutOfBoundsException...

7.5CVSS5.5AI score0.00617EPSS
SaveExploits0References7
Rows per page
Query Builder