Lucene search
+L

77046 matches found

NVD
NVD
added 2026/08/05 7:16 a.m.13 views

CVE-2026-67590

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS0.00493EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 7:16 a.m.13 views

CVE-2026-67552

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

7.5CVSS0.00483EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/05 6:58 a.m.9 views

CVE-2026-70378

imagecli's carve pipeline operation Carve::apply in src/imageops.rs only asserts ratio = 1.0, never validating that the ratio is positive. A negative ratio e.g. -5 causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passed to...

7.5CVSS5.6AI score0.00278EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/05 6:44 a.m.45 views

CVE-2026-61486

Technical details about CVE-2026-61486 are not publicly available in the provided documents. The sources consistently note that Apache Lucy is retired and no fix is planned; monitor for updates.

9.8CVSS5.4AI score0.00566EPSS
SaveExploits0References2Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2026/08/05 12:0 a.m.9 views

Security update for python-httplib2 (important)

openSUSE security update: security update for python-httplib2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21526-1 Rating: important References: bsc1271095 Cross-References: CVE-2026-59939 CVSS scores: CVE-2026-59939 SUSE : 7.5...

7.5CVSS6.6AI score0.0041EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-64580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device...

7.8CVSS5.4AI score0.0012EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:0 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-64576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When...

7.1CVSS5.5AI score0.00116EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/08/05 12:0 a.m.16 views

The vulnerabilities of the functions pkcs7_decrypt_smime(), pkcs7_decrypt_pem(), and pkcs7_decrypt_der in the Python programming language-based cryptography library allow attackers to compromise the confidentiality of protected information.

The vulnerabilities of the functions pkcs7decryptsmime, pkcs7decryptpem, and pkcs7decryptder in the Python programming language-based cryptography library are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities could allow an attacker to influence the...

5.9CVSS5.5AI score0.00175EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/08/05 12:0 a.m.54 views

CVE-2026-52466

Summary: CVE-2026-52466 affects Open Library Foundation VuFind v11.0.3 and v4.1. The issue arises in VuFind\Controller\AbstractBase::validateAccessPermission, where controller-level access checks fail to prevent execution of the target function after access is denied. As a result, the requested f...

9.8CVSS5.5AI score0.00268EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/08/04 8:54 p.m.8 views

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...

8.7CVSS5.6AI score0.00261EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/08/04 8:54 p.m.7 views

GHSA-PWXH-7358-JQ2X Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...

8.7CVSS5.6AI score0.00261EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/04 8:53 p.m.9 views

CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...

8.7CVSS5.4AI score
SaveExploits0References6
NVD
NVD
added 2026/08/04 7:16 p.m.12 views

CVE-2026-69702

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

7.1CVSS0.00305EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/04 7:16 p.m.14 views

CVE-2026-13229

Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...

7.1CVSS0.00246EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/04 6:16 p.m.14 views

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

5.3CVSS0.00264EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/04 5:45 p.m.11 views

EUVD-2026-52851

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

7.1CVSS5.5AI score0.00305EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/04 5:45 p.m.8 views

CVE-2026-69702 SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

7.1CVSS5.5AI score0.00305EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/04 5:33 p.m.37 views

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

5.3CVSS0.00264EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/04 5:33 p.m.43 views

CVE-2026-47622

Technical details for CVE-2026-47622 are not publicly available in the provided documents. The sources describe an information disclosure risk but do not disclose affected components, root cause, or mitigations. Monitor for updates.

5.3CVSS5.5AI score0.00264EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/08/04 5:33 p.m.14 views

EUVD-2026-52817

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

5.3CVSS5.5AI score0.00264EPSS
SaveExploits0References3
Rows per page
Query Builder