Lucene search
+L

32949 matches found

Cvelist
Cvelist
added 2026/09/08 4:12 p.m.20 views

CVE-2026-82059 Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

6CVSS0.00255EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 4:12 p.m.5 views

EUVD-2026-72946

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

6CVSS0.00255EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/09/08 4:12 p.m.6 views

Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

6CVSS0.00255EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/08 4:00 p.m.3 views

EUVD-2026-72935

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

6CVSS0.004EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 1:28 p.m.4 views

kube-monkey

kube-monkey es una implementación de Chaos Monkey de Netflix para clústeres de Kubernetes. Elimina aleatoriamente pods de Kubernetes k8s en el clúster, fomentando y validando el desarrollo de servicios resilientes a fallos. Únete a nosotros en kube-monkey en Kubernetes Slack. kube-monkey se ejecu...

6AI score
SaveExploits0References12
Debian CVE
Debian CVE
added 2026/09/08 12:10 p.m.8 views

CVE-2026-62437

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

0.0017EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.4 views

PT-2026-87157

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

8.7CVSS0.003EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/07 4:26 p.m.9 views

CVE-2026-86486

In JetBrains YouTrack versions before 2026.2.18634 , the generic VCS webhook handler had a fail-open condition when its secret was blank, meaning the handler would not properly validate incoming webhook requests if no secret had been configured. This results in a low integrity impact with a high ...

3.7CVSS0.00167EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/07 4:00 p.m.6 views

EUVD-2026-72488

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

5.3CVSS0.00113EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/07 3:17 p.m.3 views

CVE-2026-86317

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...

6.9CVSS0.00405EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/07 2:15 p.m.25 views

CVE-2026-86317 ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...

6.9CVSS0.00405EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/07 1:20 p.m.1 views

DEBIAN-CVE-2026-86435

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers can craft documents with duplicate footnote definitions and references to create quadratic output expansion, consuming excessiv...

8.7CVSS5.6AI score0.00279EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 2:34 a.m.7 views

badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY An evidence-first threat-observation system that keeps current source state, material-change events, and operational fetch telemetry semantically separate. Missing, stale, disabled, or unavailable data remains visibly missing. The interface never substitutes demo...

5.7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/07 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-80903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/oa: Fix sync entry leak on OA config emit failure xeoaemitoaconfig releases the sync entries and the syncs array only on its success path. When it fails...

6.5AI score0.00156EPSS
SaveExploits0References2
Redos
Redos
added 2026/09/07 12:00 a.m.7 views

ROS-20260907-73-0081

The vulnerability in dotnet10.0 is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS0.00288EPSS
SaveExploits0
Redos
Redos
added 2026/09/07 12:00 a.m.5 views

ROS-20260907-73-0080

The vulnerability in dotnet8.0 is related to an exception handling error. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

7.8CVSS0.00288EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/06 5:49 p.m.11 views

CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

8.2CVSS5.8AI score0.00435EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 5:16 p.m.4 views

CVE-2023-52709-PoC

Proof of Concept for CVE 2023-52709 "TI Bluetooth stack can fail to generate a resolvable Random Private Address RPA leading to DoS for already bonded peer devices" CVE 2023-52709 Summary When running Defensics test case SMP legacy 1001 with loop mode on DUT configured as resolvable private...

5.6AI score
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/06 1:37 p.m.8 views

CVE-2026-19487

A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications tha...

6.5CVSS0.00418EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/05 3:30 p.m.5 views

rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath Buffer Overflow Vulnerability Overview In rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&si logerr"download file fail:...

6.1AI score
SaveExploits1
Rows per page
Query Builder