Lucene search
+L

81412 matches found

Redos
Redos
•added 2026/09/23 12:00 a.m.•6 views

ROS-20260923-73-0070

The vulnerability in the drivers/gpu/drm/gma500/oaktrailhdmi.c kernel module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.9AI score0.00259EPSS
SaveExploits0
Redos
Redos
•added 2026/09/23 12:00 a.m.•9 views

ROS-20260923-73-0043

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.4AI score0.00193EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•4 views

CVE-2026-4921: Generation of Error Message Containing Sensitive Information

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

2.7CVSS5.8AI score0.00189EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/23 12:00 a.m.•6 views

ROS-20260923-73-0037

The vulnerability of the platformgetresource function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.9AI score0.00187EPSS
SaveExploits0
Redos
Redos
•added 2026/09/23 12:00 a.m.•6 views

ROS-20260923-73-0036

The vulnerability of the etmsetupaux function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.2AI score0.00207EPSS
SaveExploits0
Redos
Redos
•added 2026/09/23 12:00 a.m.•6 views

ROS-20260923-73-0033

The vulnerability of the netdevallocskbipalign function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.5CVSS7AI score0.00587EPSS
SaveExploits0
Redos
Redos
•added 2026/09/23 12:00 a.m.•5 views

ROS-20260923-73-0085

The vulnerability of the p9readwork function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.6AI score0.0015EPSS
SaveExploits0
Redos
Redos
•added 2026/09/23 12:00 a.m.•6 views

ROS-20260923-73-0065

The vulnerability of the nfsfiledirectread function in the fs/nfs/direct.c module, which is part of the NFS client support in Linux kernel, is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause service failures...

8.2CVSS6.7AI score0.00387EPSS
SaveExploits0
Redos
Redos
•added 2026/09/23 12:00 a.m.•8 views

ROS-20260923-73-0098

The vulnerability of the udfupdatetag function in the Linux operating system is related to memory management errors after memory is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.7AI score0.00161EPSS
SaveExploits0
Redos
Redos
•added 2026/09/23 12:00 a.m.•7 views

ROS-20260923-73-0029

The vulnerability of the drivers/net/ethernet/intel/ixgbevf component in Linux operating systems is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

7.8CVSS6.7AI score0.00142EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•10 views

Debian dla-4791 : memcached - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4791 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4791-1 [email protected]...

9.8CVSS6.2AI score0.01264EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/09/22 10:26 p.m.•7 views

CVE-2026-86049

A flaw was found in Jupyter Server. The server's logging mechanism for HTTP 500 errors fails to properly redact sensitive information. When a request results in an HTTP 500 error and includes a Referer header containing a security token, this token is written to server logs in plaintext. An...

7.1CVSS5.8AI score0.00416EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2026/09/22 8:37 p.m.•10 views

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+ error handlers in every router. When combined with the default unauthenticated configuration see companion report on CWE-306, any network-reachable client can trigger exceptions whos...

5.3CVSS5.7AI score0.00386EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/22 8:35 p.m.•9 views

MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

Summary The OAuth 2.0 setup wizard's local callback HTTP server reflects the error query parameter directly into an HTML response without any sanitization or encoding. An attacker can craft a malicious callback URL containing JavaScript in the error parameter that executes in the victim's browser...

5.4CVSS5.9AI score0.00243EPSS
SaveExploits0References5Affected Software1
Kitploit
Kitploit
•added 2026/09/22 8:18 p.m.•20 views

CVE-2025-32429-Checker

Comprobador de Vulnerabilidades CVE-2025-32429 Un escáner de vulnerabilidades basado en Python para detectar la vulnerabilidad de inyección SQL CVE-2025-32429 en plataformas XWiki. Características Escaneo de un solo objetivo : Comprueba objetivos individuales con la opción -t Escaneo masivo :...

9.8CVSS8.5AI score0.86982EPSS
SaveExploits6
OSV
OSV
•added 2026/09/22 6:33 p.m.•5 views

CVE-2026-77272 MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler.sendresponse in oauthsetup.py and interpolated into an HTML page without escaping. A crafted authorization callback can...

5.4CVSS5.8AI score
SaveExploits0References6
CVE
CVE
•added 2026/09/22 6:33 p.m.•10 views

CVE-2026-77272

The mcp-atlassian MCP server for Confluence and Jira is vulnerable to Reflected XSS in versions prior to 0.22.0 . The root cause is the lack of input validation in oauth_setup.py, where the oauth error query parameter is passed to CallbackHandler._send_response and interpolated into an HTML page ...

5.4CVSS5.8AI score0.00243EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/22 6:33 p.m.•33 views

CVE-2026-77272 MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler.sendresponse in oauthsetup.py and interpolated into an HTML page without escaping. A crafted authorization callback can...

5.4CVSS0.00243EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/22 6:25 p.m.•10 views

CVE-2018-4407

CVE-2018-4407 CVE-2018-4407 es una vulnerabilidad de desbordamiento de búfer en el código de error ICMP del kernel XNU. Provoca que los dispositivos IOS se bloqueen tanto laptops como móviles al recibir un ¡sí, 1! solo paquete malo. El bug fue divulgado originalmente por Kevin Backhouse en su...

8.8CVSS7.9AI score0.21223EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/22 6:18 p.m.•10 views

CVE-2021-20323

CVE-2021-20323 Descripción Keycloak anterior a 18.0.0 y posterior a 10.0.0 contiene un XSS reflejado en el endpoint de registros de clientes. El error se desencadena al proporcionar, mediante POST, una estructura JSON con una clave como nombre de parámetro que no es compatible con el endpoint. La...

6.1CVSS7.2AI score0.37246EPSS
SaveExploits3
Rows per page
Query Builder