Lucene search
+L

32964 matches found

CVE
CVE
added 2026/09/08 4:12 p.m.9 views

CVE-2026-82064

MongoDB Server contains a denial-of-service vulnerability in its read concern processing logic . An unauthenticated network user can trigger an assertion failure on a specific type of replica set member , causing the server process to terminate. The root cause is that the assertion's assumptions ...

8.7CVSS0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 4:12 p.m.20 views

CVE-2026-82059 Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

6CVSS0.00255EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 4:12 p.m.5 views

EUVD-2026-72946

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

6CVSS0.00255EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 4:12 p.m.7 views

CVE-2026-82059

CVE-2026-82059 affects MongoDB Server , where an internal aggregation expression was incorrectly exposed to any authenticated user instead of being restricted to internal cluster operations. An attacker with read-only privileges can craft a malformed index specification within this expression to ...

6CVSS0.00255EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/09/08 4:12 p.m.6 views

Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

6CVSS0.00255EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/09/08 4:12 p.m.4 views

CVE-2026-82052 $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server mongod. Under certain specific conditions the regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution...

7.1CVSS0.00359EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 4:00 p.m.3 views

EUVD-2026-72935

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

6CVSS0.004EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 1:28 p.m.4 views

kube-monkey

kube-monkey es una implementación de Chaos Monkey de Netflix para clústeres de Kubernetes. Elimina aleatoriamente pods de Kubernetes k8s en el clúster, fomentando y validando el desarrollo de servicios resilientes a fallos. Únete a nosotros en kube-monkey en Kubernetes Slack. kube-monkey se ejecu...

6AI score
SaveExploits0References12
Debian CVE
Debian CVE
added 2026/09/08 12:10 p.m.8 views

CVE-2026-62437

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

6.5CVSS0.0017EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.4 views

PT-2026-87157

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

8.7CVSS0.003EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/07 4:26 p.m.9 views

CVE-2026-86486

In JetBrains YouTrack versions before 2026.2.18634 , the generic VCS webhook handler had a fail-open condition when its secret was blank, meaning the handler would not properly validate incoming webhook requests if no secret had been configured. This results in a low integrity impact with a high ...

3.7CVSS0.00167EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/07 4:00 p.m.6 views

EUVD-2026-72488

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

5.3CVSS0.00113EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/07 3:17 p.m.3 views

CVE-2026-86317

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...

6.9CVSS0.00405EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/07 2:15 p.m.25 views

CVE-2026-86317 ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...

6.9CVSS0.00405EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/07 1:20 p.m.1 views

DEBIAN-CVE-2026-86435

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers can craft documents with duplicate footnote definitions and references to create quadratic output expansion, consuming excessiv...

8.7CVSS5.6AI score0.00279EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 2:34 a.m.7 views

badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY An evidence-first threat-observation system that keeps current source state, material-change events, and operational fetch telemetry semantically separate. Missing, stale, disabled, or unavailable data remains visibly missing. The interface never substitutes demo...

5.7AI score
SaveExploits0References2
Redos
Redos
added 2026/09/07 12:00 a.m.7 views

ROS-20260907-73-0081

The vulnerability in dotnet10.0 is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS0.00288EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/07 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-80903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/oa: Fix sync entry leak on OA config emit failure xeoaemitoaconfig releases the sync entries and the syncs array only on its success path. When it fails...

6.5AI score0.00156EPSS
SaveExploits0References2
Redos
Redos
added 2026/09/07 12:00 a.m.5 views

ROS-20260907-73-0018

The vulnerability in the buildkit is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.5CVSS0.00243EPSS
SaveExploits0
Redos
Redos
added 2026/09/07 12:00 a.m.6 views

ROS-20260907-73-0080

The vulnerability in dotnet8.0 is related to an exception handling error. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

7.8CVSS0.00288EPSS
SaveExploits0
Rows per page
Query Builder