Lucene search
+L

627689 matches found

Cvelist
Cvelist
added 2026/09/01 3:18 p.m.33 views

CVE-2026-84232 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content

A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type e.g., text/html for .html files, image/svg+xml for .svg files and without a Content-Disposition: attachment header when using local filesystem...

5.4CVSS0.00176EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/01 3:18 p.m.11 views

CVE-2026-84232 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content

A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type e.g., text/html for .html files, image/svg+xml for .svg files and without a Content-Disposition: attachment header when using local filesystem...

5.4CVSS5.8AI score0.00176EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/01 3:18 p.m.8 views

EUVD-2026-69289

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

8.8CVSS6.3AI score0.00371EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/01 3:18 p.m.12 views

CVE-2026-84202 ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

8.7CVSS6.3AI score
SaveExploits0References8
CVE
CVE
added 2026/09/01 3:18 p.m.22 views

CVE-2026-84202

ModelScope (through v1.40.0 ) uses PyYAML's unsafe yaml.Loader to parse model configuration files, enabling arbitrary code execution via Python object construction tags. An attacker can craft a malicious model repository with a poisoned configuration file that executes code when a user loads the ...

8.8CVSS6.3AI score0.00371EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/01 3:17 p.m.9 views

CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS0.0013EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/01 3:17 p.m.7 views

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

8.8CVSS0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 3:15 p.m.36 views

CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS0.00328EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/01 3:15 p.m.4 views

CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS6.1AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/09/01 3:15 p.m.8 views

CVE-2026-84268

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS6.1AI score0.00328EPSS
SaveExploits0
CVE
CVE
added 2026/09/01 3:15 p.m.18 views

CVE-2026-84268

CVE-2026-84268 is a heap-based buffer overflow in the gvfs SFTP backend (gvfsd-sftp process). When mounting a share and reading a file, the read_reply() function fails to validate the server-provided length against the allocated buffer size, allowing a malicious SFTP server to write past intended...

8.8CVSS6.1AI score0.00328EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/01 3:15 p.m.9 views

CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS6.1AI score0.00328EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/01 3:15 p.m.8 views

EUVD-2026-69287

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS6.1AI score0.00328EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/01 3:15 p.m.7 views

CVE-2026-84268

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS6.1AI score0.00328EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 2:53 p.m.36 views

CVE-2026-84233 Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

7CVSS0.0013EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 2:53 p.m.26 views

CVE-2026-84233

rpm is vulnerable to command execution via macro expansion in rpmuncompress -x. A local attacker can supply a specially crafted .gem filename containing RPM macro syntax ; when a user or automated workflow invokes rpmuncompress -x on that file, the macro expansion occurs during command constructi...

7CVSS6AI score0.0013EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 2:38 p.m.17 views

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could exploit this to execute arbitrary code with root privileges , resulting in high impact to confidentiality, integrity, and availability with a cha...

8.8CVSS6.2AI score0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 2:38 p.m.36 views

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

8.8CVSS0.00128EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 2:38 p.m.8 views

EUVD-2026-69230

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

8.8CVSS6.2AI score0.00128EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 2:18 p.m.5 views

CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE Gitea diffpatch 엔드포인트 원격 코드 실행 PoC. 저장소 쓰기 권한이 있는 계정공개 등록 인스턴스에서는 가입만 하면 됨이면 서버에서 Gitea 서비스 계정 으로 임의의 shell 명령을 실행할 수 있습니다. 취약점 개요 POST /api/v1/repos/owner/repo/diffpatch는 공유된 bare 임시 클론 저장소 에서 공격자가 제어하는 패치를 적용합니다: root@kitploit: git apply --index --recount...

9.8CVSS8.4AI score0.86777EPSS
SaveExploits13References2
Rows per page
Query Builder