Lucene search
+L

75712 matches found

Positive Technologies
Positive Technologies
added 2026/07/08 12:0 a.m.7 views

PT-2026-56492

Name of the Vulnerable Software and Affected Versions node-tar versions prior to 7.5.18 Description The library coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers. This behavior causes downstream path handling, such as normalizeWindowsPathentry.path.split'/', to...

7.5CVSS5.2AI score0.0041EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
added 2026/07/08 12:0 a.m.11 views

PT-2026-56359

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue occurs when the application opens a PDF file containing an abnormal Unity 3D object. During the parsing process, the application incorrectly resolves a portion of the...

7.8CVSS6.1AI score0.0017EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/08 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-14740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes...

9.1CVSS6.2AI score0.00387EPSS
SaveExploits0References4
Amazon
Amazon
added 2026/07/08 12:0 a.m.4 views

Medium: nerdctl

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

7.5CVSS6.9AI score0.00591EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/08 12:0 a.m.6 views

Important: docker

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

7.5CVSS7.5AI score0.00591EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/08 12:0 a.m.6 views

Medium: containerd

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

7.5CVSS6.9AI score0.00591EPSS
SaveExploits0
Amazon
Amazon
added 2026/07/08 12:0 a.m.7 views

Important: docker

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

7.5CVSS7.5AI score0.00591EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/07/07 9:48 p.m.4 views

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

7.5CVSS6AI score0.00394EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/07 9:17 p.m.5 views

UBUNTU-CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

7.1CVSS6.2AI score0.00221EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/07 7:47 p.m.5 views

EUVD-2026-42083

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

6CVSS6.2AI score0.00221EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/07 7:47 p.m.43 views

CVE-2026-58471 GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

6CVSS0.00221EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/07 2:34 p.m.12 views

PYSEC-2026-1503 Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint

Description Label Studio's S3 storage integration feature contains a Server-Side Request Forgery SSRF vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a custom S3 endpoint URL via the s3endpoint parameter. This endpoint U...

8.6CVSS6.1AI score0.00644EPSS
SaveExploits1References6
OSV
OSV
added 2026/07/07 2:34 p.m.4 views

PYSEC-2026-1154 Apache Superset: Error verbosity exposes metadata in analytics databases

Generation of Error Message Containing analytics metadata Information in Apache Superset. This issue affects Apache Superset: before 4.1.0. Users are recommended to upgrade to version 4.1.0, which fixes the issue...

5.3CVSS5.9AI score0.00787EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/07 2:34 p.m.6 views

PYSEC-2026-1096 aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method

Summary A memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. Impact If the user is making use of any middlewares with aiohttp.web then it is...

7.5CVSS7AI score0.00563EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 2:34 p.m.4 views

PYSEC-2026-1232 Generation of Error Message Containing Sensitive Information in janeczku/calibre-web

A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of the shelf is exposed in an error message when a user attempts to remove a book from a shelf they d...

4.3CVSS5.9AI score0.00358EPSS
SaveExploits1References6
OSV
OSV
added 2026/07/07 2:34 p.m.5 views

PYSEC-2026-1738 open-webui allows enumeration of file names and traversal of directories by observing the error messages

An information disclosure vulnerability exists in open-webui version 0.3.8. The vulnerability is related to the embedding model update feature under admin settings. When a user updates the model path, the system checks if the file exists and provides different error messages based on the existenc...

5.1CVSS5.9AI score0.00345EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 2:34 p.m.4 views

PYSEC-2026-1248 CKAN may leak Solr credentials via error message in package_search action

If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message Patches This has been patched in CKAN 2.10.5 and 2.11.0...

6.9CVSS5.8AI score0.00377EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 2:34 p.m.4 views

PYSEC-2026-1753 ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

Summary The issue here is that we pass the secret content as one of the args via CLI. This issue may affect any of our charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processing subprocess.CalledProcessError. There are two points that may log this command, in...

6.9CVSS5.9AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 2:34 p.m.4 views

PYSEC-2026-1580 LNbits improperly handles potential network and payment failures when using Eclair backend

Summary Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. Details Using blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...

8.1CVSS7.1AI score0.00602EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/07 1:16 p.m.14 views

CVE-2026-10659

The Dhara flash translation layer disk driver drivers/disk/ftldhara.c implemented the dharanand callbacks so that, on a flash error, the error code was written unconditionally through the caller-supplied dharaerrort err pointer e.g. err = DHARAEECC in dharanandread, and similar in...

4.7CVSS0.00134EPSS
SaveExploits1References2
Rows per page
Query Builder