Lucene search
+L

611170 matches found

EUVD
EUVD
added 5 days ago6 views

EUVD-2026-57800

Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like tocsv, tojson, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesyste...

8.6CVSS5.5AI score0.00289EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago5 views

EUVD-2026-57799

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

9.4CVSS5.7AI score0.00374EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago27 views

CVE-2026-73483

Summary of the vulnerability (CVE-2026-73483): Flowise (flows: flowise, flowise-components) versions

9.4CVSS5.7AI score0.00374EPSS
SaveExploits0References2
Elastic
Elastic
added 5 days ago16 views

Kibana 8.19.20, and 9.4.5 Security Update (ESA-2026-96)

Missing Authorization in Kibana Leading to Unauthorized Execution of Host Response Actions Missing Authorization CWE-862 in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs CAPEC-...

8.1CVSS5.6AI score0.00252EPSS
SaveExploits0
Elastic
Elastic
added 5 days ago18 views

Kibana 8.19.20, and 9.4.5 Security Update (ESA-2026-95)

Missing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response Actions Missing Authorization CWE-862 in Kibana can lead to unauthorized execution of Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A...

6.5CVSS5.8AI score0.00264EPSS
SaveExploits0
Elastic
Elastic
added 5 days ago4 views

Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-123)

Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model,...

8.8CVSS6.3AI score0.00328EPSS
SaveExploits0
Circl
Circl
added 5 days ago16 views

CVE-2026-15216

creationtimestamp| type| source ---|---|--- 2026-08-13 10:21:59+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-20 2026-08-13 14:05:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m 2026-08-13 20:15:12+00:00| seen|...

8.7CVSS4.9AI score0.0026EPSS
SaveExploits0References3
Circl
Circl
added 5 days ago12 views

CVE-2026-19228

creationtimestamp| type| source ---|---|--- 2026-08-13 10:21:57+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-20 2026-08-13 14:05:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m...

8.5CVSS4.9AI score0.0023EPSS
SaveExploits0References2
OSV
OSV
added 5 days ago7 views

RHSA-2026:54485 Red Hat Security Advisory: freerdp security update

Bulletin has no description...

7.5CVSS4.9AI score0.0038EPSS
SaveExploits0References29
RedHat Linux
RedHat Linux
added 5 days ago3 views

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

7.7CVSS8.2AI score0.00238EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 5 days ago4 views

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.8CVSS8.1AI score0.0038EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 5 days ago14 views

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

8.5CVSS5.7AI score0.0018EPSS
SaveExploits0References6
Circl
Circl
added 5 days ago10 views

CVE-2026-66774

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:19+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

3.7CVSS4.9AI score0.00221EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 5 days ago5 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00205EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 5 days ago7 views

CVE-2026-19163

A flaw was found in the Media component of Google Chrome. This use-after-free vulnerability could allow a remote attacker, who has already compromised the renderer process, to potentially escape the browser's sandbox. This could be achieved by enticing a user to visit a specially crafted HTML pag...

8.3CVSS5.4AI score0.00337EPSS
SaveExploits0References5
Wolfi
Wolfi
added 5 days ago6 views

GHSA-M6QW-4CW2-HM4M vulnerabilities

Vulnerabilities for packages: airflow...

5.2AI score
SaveExploits0
Wolfi
Wolfi
added 5 days ago8 views

CVE-2026-50269 vulnerabilities

Vulnerabilities for packages: airflow...

7.5CVSS5.2AI score0.00301EPSS
SaveExploits0
OSV
OSV
added 5 days ago3 views

MINI-97V8-JVMC-J6P3

Bulletin has no description...

5.3CVSS5.3AI score0.00237EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 5 days ago4 views

CVE-2026-19149

A flaw was found in the Aura component of Google Chrome. A remote attacker could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass security restrictions sandbox escape and execute unauthorized code on the affected system, posing a...

9.6CVSS5.6AI score0.005EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 5 days ago3 views

CVE-2026-19165

A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, by convincing a user to install a malicious extension, to execute arbitrary code within the browser's sandbox. This could lead to further compromise of the user's system...

7.5CVSS5.9AI score0.00273EPSS
SaveExploits0References2
Rows per page
Query Builder