Lucene search
+L

76104 matches found

CVE
CVE
added 4 days ago13 views

CVE-2026-56571

Technical details such as affected product/version, root cause, impact, and remediation are not publicly available in the provided documents. Monitor for updates from NVD, CVE records, and EU/enisa pages for new information.

3.7CVSS5.4AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago36 views

CVE-2026-56571 HCL iControl is affected by multiple security vulnerabilities.

HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network timeout, and hundreds of other common conditions can cause errors to be generated...

3.7CVSS0.00171EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago7 views

CVE-2026-56568

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and...

3.7CVSS5.5AI score0.00195EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago9 views

CVE-2026-56568

Technical details are not publicly available in the provided documents. Monitor for updates.

3.7CVSS5.5AI score0.00195EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago10 views

EUVD-2026-51542

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and...

3.7CVSS5.5AI score0.00195EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago38 views

CVE-2026-56568 HCL iControl is affected by multiple security vulnerabilities.

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and...

3.7CVSS0.00195EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-51554

The Zephyr Bluetooth GATT client CCC-write response handler gattwritecccrsp in subsys/bluetooth/host/gatt.c invoked the application's params-subscribe callback after it had already called params-notifyconn, params, NULL, 0. Per the public GATT API, a notify callback with NULL data is the document...

7.6CVSS5.6AI score0.00181EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago36 views

CVE-2026-10685 Use-after-free of GATT subscribe params in Bluetooth host CCC-write response handler

The Zephyr Bluetooth GATT client CCC-write response handler gattwritecccrsp in subsys/bluetooth/host/gatt.c invoked the application's params-subscribe callback after it had already called params-notifyconn, params, NULL, 0. Per the public GATT API, a notify callback with NULL data is the document...

7.6CVSS0.00181EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 4 days ago9 views

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

8.1CVSS5.4AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 4 days ago7 views

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS5.5AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 4 days ago7 views

Microsoft Edge (Chromium-based) Tampering Vulnerability

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...

6.8CVSS5.5AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 4 days ago7 views

Microsoft Edge (Chromium-based) Tampering Vulnerability

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering over a network...

5.4CVSS5.5AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 4 days ago7 views

CVE-2026-9611

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago41 views

CVE-2026-64607 Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS

HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message. Please note this defect does not affect HttpClient based on the async i/o...

0.00238EPSS
SaveExploits0References1
Nuclei
Nuclei
added 4 days ago23 views

Squid Proxy - HTTP Authentication Credentials Disclosure

Squid versions prior to 7.2 fail to redact HTTP authentication credentials in error page responses. The Authorization header value is embedded in plain text inside the mailto: diagnostic block when Squid generates an error page e.g. ERRDNSFAIL. id: CVE-2025-62168 info: name: Squid Proxy - HTTP...

10CVSS7.7AI score0.62871EPSS
SaveExploits1References2
Nuclei
Nuclei
added 4 days ago44 views

Ghost CMS - User Enumeration

Ghost CMS 5.9.4 contains a user enumeration vulnerability in the login functionality. The application reveals whether a user account exists through different error messages, allowing attackers to enumerate valid user accounts via specially-crafted HTTP requests. id: CVE-2022-41697 info: name: Gho...

5.3CVSS6.2AI score0.20196EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 4 days ago11 views

PT-2026-66765

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and...

3.7CVSS5.5AI score0.00195EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 4 days ago8 views

Oracle Linux 9 : kernel (ELSA-2026-45192)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-45192 advisory. - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Aidan Wallace RHEL-213468 CVE-2026-63807 - KVM: x86: Don't recheck L1...

9.8CVSS5.7AI score0.00395EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 4 days ago11 views

PT-2026-66768

HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network timeout, and hundreds of other common conditions can cause errors to be generated...

3.7CVSS5.4AI score0.00171EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago6 views

CVE-2026-63033

A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObjectParseObjectAddress to read one byte past the end of the heap-allocated message buffer...

6.9CVSS0.00264EPSS
SaveExploits0References3
Rows per page
Query Builder