Lucene search
+L

66682 matches found

Vulnrichment
Vulnrichment
added 2026/09/10 7:00 p.m.16 views

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

7.7CVSS5.8AI score0.00275EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 7:00 p.m.10 views

EUVD-2026-75701

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

7.7CVSS5.8AI score0.00275EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/10 7:00 p.m.8 views

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

7.7CVSS5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 6:00 p.m.5 views

litespeed-cpanel-cve-2026-54420-fix

Kit de Mitigación CVE-2026-54420 Kit de remediación defensiva, auditoría y verificación para CVE-2026-54420 que afecta al Plugin LiteSpeed para cPanel en entornos de alojamiento compartido que utilizan CloudLinux / CageFS. ⚠️ Aviso de Seguridad Este repositorio está destinado únicamente a...

8.5CVSS6AI score0.01439EPSS
SaveExploits3
NVD
NVD
added 2026/09/10 5:17 p.m.10 views

CVE-2026-88044

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-server proxyOpt.AuthProxy settings, and the FTP and S3 constructors in cmd/serve/ftp/ftp.go and cmd/serve/s3/server.go...

9.1CVSS0.00492EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/10 4:42 p.m.9 views

PYSEC-2026-3971 PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

7.5CVSS7.1AI score0.00619EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/10 4:40 p.m.10 views

CVE-2019-9053

Lo arreglé gracias a https://tryhackme.com/room/easyctf : disfruta Problemas críticos corregidos 1. Compatibilidad de Python 2 a Python 3 Antes: print "string" Ahora: print"string" Se cambiaron todas las sentencias print a funciones print Se actualizó el formato de cadenas para usar f-strings 2...

8.1CVSS7.5AI score0.68581EPSS
SaveExploits38
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.8 views

org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...

7.5CVSS5.7AI score0.00426EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/10 3:39 p.m.8 views

CVE-2026-88013 rclone: http backend forwards custom/auth headers to a different host on redirect

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configured through --http-headers or headers= to requests in backend/http/http.go, while its fshttp.NewClient client follows...

3.7CVSS5.8AI score
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/10 1:18 p.m.7 views

vim: Vim: Denial of Service via out-of-bounds write in terminal handling

A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service...

8.2CVSS6.5AI score0.00303EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/10 10:46 a.m.14 views

CVE-2025-69581

CVE-2025-69581 Se descubrió un problema en Chamillo LMS 1.11.2. El endpoint Social Network /personaldata expone información completa y sensible del usuario incluso después de cerrar sesión debido a la falta de un control de caché adecuado. Usando el botón de retroceso del navegador se restaura to...

5.5CVSS5.8AI score0.00241EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/09/10 9:27 a.m.6 views

vim: Vim: Denial of Service via out-of-bounds write in terminal handling

A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service...

8.2CVSS6.5AI score0.00303EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/10 7:38 a.m.8 views

vim: Vim: Denial of Service via out-of-bounds write in terminal handling

A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service...

8.2CVSS6.5AI score0.00303EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/10 7:03 a.m.7 views

CVE-2025-43537

CVE-2025-43537 Crédito de Seguridad de Apple Investigador: Al Sadman Awal Oficialmente acreditado por Apple Product Security por la divulgación responsable de CVE-2025-43537. Resumen CVE-2025-43537 es una vulnerabilidad de seguridad identificada durante una investigación de seguridad independient...

5.5CVSS6.1AI score0.00493EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/10 6:37 a.m.17 views

CVE-2026-64846

A flaw was found in Nix. A malicious derivation, when executed with the recursive-nix experimental feature enabled, can exploit a time-of-check/time-of-use TOCTOU race condition in the final symlink handling of the LocalStore restore path. This allows the Nix process or nix-daemon to create or...

2.8CVSS5.8AI score0.00088EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/09/10 4:36 a.m.8 views

CVE-2026-75880 Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service

An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0...

5.6AI score0.00413EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 4:36 a.m.44 views

CVE-2026-75880 Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service

An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0...

0.00413EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/10 1:06 a.m.7 views

CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

9.8CVSS5.8AI score0.07314EPSS
SaveExploits2References106
OSV
OSV
added 2026/09/10 12:45 a.m.7 views

CLEANSTART-2026-XP64749 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00692EPSS
SaveExploits0References27
RedHat Linux
RedHat Linux
added 2026/09/10 12:39 a.m.10 views

kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nSVM module. When a nested virtual machine L2 guest executes VMSAVE/VMLOAD instructions, and these are not intercepted by the first-level hypervisor L1, KVM incorrectly uses vmcb02 instead of vmcb01 for managing guest state...

7.9CVSS7.3AI score0.00133EPSS
SaveExploits0References5
Rows per page
Query Builder