Lucene search
+L

77087 matches found

NVD
NVD
added 2026/08/04 12:17 a.m.13 views

CVE-2026-66313

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...

6.8CVSS0.00234EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/04 12:0 a.m.18 views

Amazon Linux 2023 : openvpn, openvpn-devel (ALAS2023-2026-2038)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2038 advisory. OpenVPN memory-leak in tls-crypt-v2 client key handling that could lead to out-of-memory situations and subsequent server crashes CVE-2026-12932 When dynamic tls-crypt is active, it is possibl...

8.1CVSS7.7AI score0.00417EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/04 12:0 a.m.11 views

MiracleLinux 9 : kernel-5.14.0-687.19.1.el9_8 (AXSA:2026-1437:58)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1437:58 advisory. kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation CVE-2026-31488 kernel: ipv6: icmp: clear skb2-cb in...

9.8CVSS6.2AI score0.00465EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2026/08/03 11:34 p.m.9 views

SUSE CVE-2026-53667

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

6.9CVSS5.3AI score0.0035EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/03 10:57 p.m.13 views

CVE-2026-66322

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

7.1CVSS5.5AI score0.00226EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/03 10:53 p.m.9 views

CVE-2026-66316

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS5.5AI score0.00212EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/03 10:53 p.m.9 views

CVE-2026-66313

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...

6.8CVSS5.4AI score0.00234EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/03 10:51 p.m.12 views

CVE-2026-66318

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

8.1CVSS5.4AI score0.0036EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2026/08/03 9:17 p.m.8 views

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Summary pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which disclosed the exact length recovered from the RSA operation. The same distinction was also observable by timing. An...

8.2CVSS5.5AI score0.00175EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/08/03 9:16 p.m.11 views

CVE-2026-69244

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigg...

7.1CVSS0.003EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/03 9:16 p.m.4 views

DEBIAN-CVE-2026-69244

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigg...

7.1CVSS5.8AI score0.003EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/03 8:50 p.m.95 views

CVE-2026-69244

AIOHTTP vulnerability CVE-2026-69244 affects the aiohttp library prior to 3.14.3. The issue is an out-of-bounds heap read in the C-based response parser during error message construction, specifically in aiohttp/_http_parser.pyx where an llhttp error-position pointer is used to build a snippet fo...

7.1CVSS5.8AI score0.003EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/03 8:50 p.m.6 views

CVE-2026-69244 AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigg...

7.1CVSS5.8AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/03 8:50 p.m.45 views

CVE-2026-69244 AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigg...

7.1CVSS0.003EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/03 8:17 p.m.8 views

CVE-2026-66296

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in lib/oaskit/errorhandler/default.ex...

6.1CVSS0.0031EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/08/03 7:19 p.m.14 views

EUVD-2026-50409

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives...

7.4CVSS7.2AI score0.00325EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/03 7:18 p.m.9 views

CVE-2026-15928

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

8.2CVSS5.6AI score0.00268EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/03 7:4 p.m.7 views

CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in lib/oaskit/errorhandler/default.ex...

5.1CVSS5.3AI score0.0031EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/08/03 7:4 p.m.44 views

CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in lib/oaskit/errorhandler/default.ex...

5.1CVSS0.0031EPSS
SaveExploits1References4
CVE
CVE
added 2026/08/03 7:4 p.m.43 views

CVE-2026-66296

The CVE-2026-66296 issue concerns oaskit: a reflected XSS vulnerability in the default HTML error handler. The root cause is that Oaskit.ErrorHandler.Default.format_reason/4 and Oaskit.ErrorHandler.Default.reason_to_html/1 render request-validation failures as HTML when the Accept header includes...

6.1CVSS5.3AI score0.0031EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder