Lucene search
+L

23040 matches found

RedHat Linux
RedHat Linux
added 2026/07/09 3:29 p.m.11 views

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

7.5CVSS6.9AI score0.00952EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/07/09 3:29 p.m.14 views

netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended...

8.1CVSS5.9AI score0.00573EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/09 12:54 p.m.7 views

OESA-2026-2962 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

8.8CVSS6.2AI score0.00508EPSS
SaveExploits1References2
OSV
OSV
added 2026/07/09 12:54 p.m.9 views

OESA-2026-2961 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

6.3AI score
SaveExploits0References2
OSV
OSV
added 2026/07/09 12:54 p.m.5 views

OESA-2026-2960 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

6.3AI score
SaveExploits0References2
OSV
OSV
added 2026/07/09 12:54 p.m.5 views

OESA-2026-2959 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

6.3AI score
SaveExploits0References2
NVD
NVD
added 2026/07/09 12:16 p.m.17 views

CVE-2026-15182

A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwgbmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the...

5.3CVSS0.00133EPSS
SaveExploits0References10
OSV
OSV
added 2026/07/09 12:0 p.m.6 views

CVE-2026-15184 GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference

A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwgnextentity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the argument nextobj results in null pointer dereference. The attack must be initiated from a local...

4.8CVSS5.6AI score
SaveExploits0References11
Cvelist
Cvelist
added 2026/07/09 12:0 p.m.38 views

CVE-2026-15184 GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference

A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwgnextentity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the argument nextobj results in null pointer dereference. The attack must be initiated from a local...

4.8CVSS0.00118EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/09 11:30 a.m.8 views

CVE-2026-15182 GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow

A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwgbmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the...

4.8CVSS5.7AI score
SaveExploits0References12
EUVD
EUVD
added 2026/07/09 11:30 a.m.17 views

EUVD-2026-42580

A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwgbmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the...

5.3CVSS5.9AI score0.00133EPSS
SaveExploits0References10
CVE
CVE
added 2026/07/09 7:55 a.m.19 views

CVE-2026-11359

The CVE-2026-11359 entry relates to the Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration plugin for WordPress. Affected versions up to 3.4 are vulnerable due to missing capability checks and nonce validation in the pg_install_profilegrid() AJAX handler (wp_ajax_...

4.3CVSS5.9AI score0.00246EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/09 7:55 a.m.11 views

EUVD-2026-42541

The Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration plugin for WordPress is vulnerable to unauthorized plugin installation and activation in versions up to, and including, 3.4. This is due to a missing capability check and missing nonce validation on the...

4.3CVSS5.9AI score0.00246EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/09 7:55 a.m.39 views

CVE-2026-11359 Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation

The Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration plugin for WordPress is vulnerable to unauthorized plugin installation and activation in versions up to, and including, 3.4. This is due to a missing capability check and missing nonce validation on the...

4.3CVSS0.00246EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/09 12:31 a.m.14 views

EUVD-2026-42468

A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the file src/core/s7server.cpp of the component ReadVar Request Handler. This manipulation causes deserialization. The attack requires access to the local network. The exploit has...

6.3CVSS5.5AI score0.00265EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/09 12:0 a.m.8 views

CVE-2026-58264

heap-based buffer overrun in command handler...

6AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/09 12:0 a.m.14 views

PT-2026-56991

Name of the Vulnerable Software and Affected Versions pdeljanov Symphonia versions prior to 0.6.1 Description A flaw in the Metadata Handler component allows a local attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that contains a...

4.8CVSS6.1AI score0.0012EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/07/09 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-14650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in connorskees grass up to 0.13.4. The affected element is the function grasscompiler::rawtoparseerror of the component UTF-8 Character...

4.8CVSS4.3AI score0.00116EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/08 11:16 p.m.15 views

CVE-2026-15105

A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the file src/core/s7server.cpp of the component ReadVar Request Handler. This manipulation causes out-of-bounds write. The attack requires access to the local network. The exploit...

6.3CVSS0.00265EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/08 11:16 p.m.6 views

UBUNTU-CVE-2026-15105

A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the file src/core/s7server.cpp of the component ReadVar Request Handler. This manipulation causes deserialization. The attack requires access to the local network. The exploit has...

6.3CVSS6.3AI score0.00265EPSS
SaveExploits0References9
Rows per page
Query Builder