Lucene search
+L

15749 matches found

Cvelist
Cvelist
•added 2026/01/19 8:09 p.m.•37 views

CVE-2026-23837 MyTube has an Authorization Bypass vulnerability

MyTube is a self-hosted downloader and player for several video websites. A vulnerability present in version 1.7.65 and poetntially earlier versions allows unauthenticated users to bypass the mandatory authentication check in the roleBasedAuthMiddleware. By simply not providing an authentication...

9.8CVSS0.0065EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/19 12:00 a.m.•31 views

PT-2026-3495

Name of the Vulnerable Software and Affected Versions MyTube versions prior to 1.7.66 Description MyTube is a self-hosted downloader and player for several video websites. A flaw allows unauthenticated users to bypass the authentication check in the roleBasedAuthMiddleware. By not providing an...

9.8CVSS5.7AI score0.0065EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
•added 2026/01/18 8:41 p.m.•26 views

CVE-2026-23766

No description is available for this CVE...

5.8AI score0.00036EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/01/16 7:25 p.m.•21 views

CVE-2026-0227

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service DoS to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode...

8.7CVSS7.5AI score0.00738EPSS
SaveExploits0References1
Fedora
Fedora
•added 2026/01/16 5:53 p.m.•24 views

[SECURITY] Fedora 42 Update: foomuuri-0.31-1.fc42

Foomuuri is a firewall generator for nftables based on the concept of zones. It is suitable for all systems from personal machines to corporate firewalls, and supports advanced features such as a rich rule language, IPv4/IPv6 rule splitting, dynamic DNS lookups, a D-Bus API and FirewallD emulatio...

7CVSS5.9AI score0.00188EPSS
SaveExploits0
osv_oesa
osv_oesa
•added 2026/01/16 11:10 a.m.•23 views

OESA-2026-1103 mod_security_crs security update

The base rules are provided for modsecurity by this package. Security Fixes: The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart...

9.3CVSS5.9AI score0.17884EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•15 views

Cisco Firepower Threat Defense (FTD) Software Multiple Vulnerabilities (cisco-sa-snort3-dcerpc-vulns-J9HNF4tH)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by the following vulnerabilities: - A vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak...

5.8CVSS7.1AI score0.00666EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/01/15 8:27 p.m.•15 views

CVE-2026-21918

A Double Free vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On all SRX and MX Series platforms, when during TCP session establishment a specific sequence of...

8.7CVSS7.8AI score0.00407EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/01/15 7:18 p.m.•19 views

EUVD-2026-2704

Istio through 1.28.2 allows iptables rule injection for changing firewall behavior via the traffic.sidecar.istio.io/excludeInterfaces annotation. NOTE: the reporter's position is "this doesn't represent a security vulnerability pod creators can already exclude sidecar injection entirely."...

4.1CVSS5.8AI score0.00036EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/15 7:18 p.m.•10 views

CVE-2026-23766

...

5.8AI score0.00036EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/01/15 7:18 p.m.•35 views

CVE-2026-23766

...

0.00036EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/01/15 7:18 p.m.•12 views

CVE-2026-23766

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.7AI score0.00036EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/15 7:18 p.m.•36 views

CVE-2026-23766

Istio (through 1.28.2) is affected. A local, low-privilege user can inject iptables firewall rules via the traffic.sidecar.istio.io/excludeInterfaces annotation to alter firewall behavior, potentially impacting system integrity. Public descriptions acknowledge this may not represent a traditional...

6.9AI score0.00036EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/01/15 7:16 p.m.•26 views

CVE-2026-0227

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service DoS to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode...

7.5CVSS7.5AI score0.00738EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/15 7:16 p.m.•30 views

CVE-2026-0227

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service DoS to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode...

8.7CVSS0.00738EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/15 6:45 p.m.•21 views

EUVD-2026-2715

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service DoS to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode...

8.7CVSS7.5AI score0.00738EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/15 12:00 a.m.•71 views

Palo Alto Networks PAN-OS security vulnerabilities

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall devices. There is a security vulnerability in Palo Alto Networks PAN-OS, and this vulnerability allows unverified attackers to cause a denial-of-service attack on the firewall...

8.7CVSS7.5AI score0.00738EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/15 12:00 a.m.•29 views

Istio parameter injection vulnerability

Istio is an open-source platform that connects, manages, and protects microservices. Versions of Istio prior to 1.28.2 have a parameter injection vulnerability. This vulnerability stems from the ability to inject iptables rules through annotations, thereby changing the firewall’s behavior...

5.8AI score0.00036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/15 12:00 a.m.•41 views

PT-2026-3101

Name of the Vulnerable Software and Affected Versions Istio versions through 1.28.2 Description Istio versions through 1.28.2 permit the injection of iptables rules, potentially altering firewall behavior. This is achieved through the traffic.sidecar.istio.io/excludeInterfaces annotation. The...

4.1CVSS5.8AI score0.00036EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/01/14 7:45 a.m.•394 views

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis A com...

9.8CVSS8.2AI score0.99638EPSS
SaveExploits109
Rows per page
Query Builder