Lucene search
+L

612076 matches found

OSV
OSV
added 6 days ago12 views

UBUNTU-CVE-2026-73566

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname and no segment cap when tar.t... or tar.x... receives a non-empty member-selection list. A...

7.5CVSS5.4AI score0.00379EPSS
SaveExploits0References3
NVD
NVD
added 6 days ago8 views

CVE-2026-18428

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

8.8CVSS0.00689EPSS
SaveExploits0References5
EUVD
EUVD
added 6 days ago7 views

EUVD-2026-58194

TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases. Prior to versions 0.3.31 and 1.1.0, typeorm migration:generate embeds database schema metadata into JavaScript or TypeScript template literals in...

5.7CVSS5.6AI score0.00233EPSS
SaveExploits0References5
Cvelist
Cvelist
added 6 days ago28 views

CVE-2026-73650 SVGO: removeScripts plugin leaves some executable scripts intact

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScripts plugin, named removeScriptElement in versions 1 through 3, can leave executable content in optimized SVGs because...

8.2CVSS0.00242EPSS
SaveExploits0References7
Rockylinux
Rockylinux
added 6 days ago7 views

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, release...

9.8CVSS8.5AI score0.00851EPSS
SaveExploits2
Cvelist
Cvelist
added 6 days ago29 views

CVE-2026-73649 Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix)

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for CVE-2026-44966 filtered constructor, proto, and prototype only in the set assignment handler in src/compile/set.ts, while property-read expressions in src/compile/references.ts...

9.8CVSS0.00501EPSS
SaveExploits0References4
CVE
CVE
added 6 days ago71 views

CVE-2026-73649

Velocity.js (Java) details: In versions prior to 2.1.7, an existing fix for CVE-2026-44966 protected only the #set assignment target, while property-read expressions in src/compile/references.ts were not filtered. The getReferences() flow could reach getAttributes() and allow a crafted template t...

9.8CVSS5.4AI score0.00501EPSS
SaveExploits0References4
OSV
OSV
added 6 days ago3 views

CVE-2026-73649 Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix)

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for CVE-2026-44966 filtered constructor, proto, and prototype only in the set assignment handler in src/compile/set.ts, while property-read expressions in src/compile/references.ts...

9.8CVSS5.7AI score
SaveExploits0References6
EUVD
EUVD
added 6 days ago7 views

EUVD-2026-58192

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for CVE-2026-44966 filtered constructor, proto, and prototype only in the set assignment handler in src/compile/set.ts, while property-read expressions in src/compile/references.ts...

9.8CVSS5.4AI score0.00501EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 6 days ago7 views

Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 bsc1273223. CVE-2026-16243: inconsistent handling of zero length data in arraycmp of the SIMD evaluator bsc1274275. CVE-2026-16439: using -Xtrace to trace method arguments can lead to buffer...

9.2CVSS5.8AI score0.00482EPSS
SaveExploits1References58
OSV
OSV
added 6 days ago4 views

SUSE-SU-2026:3614-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 bsc1273223. - CVE-2026-16243: inconsistent handling of zero length data in arraycmp of the SIMD evaluator bsc1274275. - CVE-2026-16439: using -Xtrace to trace method arguments can lead to...

9.8CVSS5.5AI score0.00482EPSS
SaveExploits1References30
CVE
CVE
added 6 days ago22 views

CVE-2026-73648

The provided details describe a vulnerability in rails-html-sanitizer (affecting Rails 1.0.3 through 1.7.1) where the PermitScrubber restricted SVG reference elements in SVG_ALLOW_LOCAL_HREF only if xlink:href was used, though browsers accept plain href. This could allow external references for n...

5.1CVSS5.4AI score0.00396EPSS
SaveExploits0References4
OSV
OSV
added 6 days ago4 views

SUSE-SU-2026:3611-1 Security update for dracut

This update for dracut fixes the following issue: Update to version 055+suse.404.gc96044c. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432. Other updates and bugfixes: - Fixbase: sanitize message...

7.5CVSS5.9AI score0.00259EPSS
SaveExploits0References3
Cvelist
Cvelist
added 6 days ago30 views

CVE-2026-18428 SQL Query Validation Bypass in OpenSearch Direct Query

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

8.8CVSS0.00689EPSS
SaveExploits0References5
CVE
CVE
added 6 days ago64 views

CVE-2026-18428

CVE-2026-18428 affects the OpenSearch SQL plugin’s Flint extension query handler. A SQL query validation bypass allows a remote authenticated actor with async query access to send a crafted query to the direct query endpoint and potentially execute arbitrary code on Apache Spark workers. The vuln...

8.8CVSS6.2AI score0.00689EPSS
SaveExploits0References5
EUVD
EUVD
added 6 days ago6 views

EUVD-2026-58178

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

8.8CVSS6.2AI score0.00689EPSS
SaveExploits0References5
OSV
OSV
added 6 days ago9 views

CVE-2026-18428 SQL Query Validation Bypass in OpenSearch Direct Query

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

8.7CVSS6.5AI score
SaveExploits0References7
RedhatCVE
RedhatCVE
added 6 days ago28 views

CVE-2026-25589

A flaw was found in RedisBloom. An authenticated attacker with permission to execute the RESTORE command on a Redis server with the RedisBloom module loaded can supply a crafted serialized payload that causes an invalid memory access due to an improper validation of serialized values processed...

8.8CVSS8.3AI score0.01378EPSS
SaveExploits0References5
OSV
OSV
added 6 days ago10 views

MAL-2026-13941 Malicious code in @solana-js/web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b539591552f3e960f65ceb70d946bc56f240f9bdb1400c501723aa32fd305ec Package name @solana-js/web3 impersonates the legitimate @solana/web3.js SDK, and package.json falsely attributes authorship to 'Solana Labs' with a...

6.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 6 days ago13 views

Malicious code in @solana-js/web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b539591552f3e960f65ceb70d946bc56f240f9bdb1400c501723aa32fd305ec Package name @solana-js/web3 impersonates the legitimate @solana/web3.js SDK, and package.json falsely attributes authorship to 'Solana Labs' with a...

6.2AI score
SaveExploits0References1
Rows per page
Query Builder