Lucene search
+L

105478 matches found

Positive Technologies
Positive Technologies
added 2026/07/15 12:0 a.m.19 views

PT-2026-60185

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When an HTTP/2 profile is configured on a virtual server, specific undisclosed requests can lead to increased memory resource utilization. This data plane issue allows a remote,...

8.7CVSS5.2AI score0.0046EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/15 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-15713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream...

5.9CVSS5.8AI score0.00349EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/07/15 12:0 a.m.7 views

The vulnerability of the mod_proxy_ftp module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modproxyftp module in the Apache HTTP Server is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.5CVSS7.4AI score0.00583EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/15 12:0 a.m.4 views

The vulnerability of the mod_lda module in the Apache HTTP Server allows a hacker to execute arbitrary code or cause a denial-of-service attack.

The vulnerability of the modlda module in the Apache HTTP Server is related to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial-of-service attack...

10CVSS7.7AI score0.00688EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/15 12:0 a.m.7 views

The vulnerability of the mod_xml2enc module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modxml2enc module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS6.2AI score0.00986EPSS
SaveExploits0References7Affected Software4
Positive Technologies
Positive Technologies
added 2026/07/15 12:0 a.m.21 views

PT-2026-60218

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions prior to 3.3 Cisco Identity Services Engine versions 3.3 through 3.3 before Patch 12 Cisco Identity Services Engine versions 3.4 through 3.4 before Patch 7 Cisco Identity Services Engine versions 3.5...

5.5CVSS6.2AI score0.0034EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/15 12:0 a.m.6 views

ALSA-2026:39868 Important: nodejs:24 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

9.8CVSS6.5AI score0.03711EPSS
SaveExploits1References32
CISA KEV Catalog
CISA KEV Catalog
added 2026/07/15 12:0 a.m.8 views

Oracle E-Business Suite Improper Privilege Management Vulnerability

Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments...

9.8CVSS6.1AI score0.13309EPSS
SaveIn wildExploits2
NVD
NVD
added 2026/07/14 11:17 p.m.15 views

CVE-2026-5270

An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite NCS, Manage Control Plan MCP, and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate...

9.8CVSS0.00452EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/14 10:24 p.m.49 views

CVE-2026-5270 Authentication Bypass in Navigator and Blue Planet Products

An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite NCS, Manage Control Plan MCP, and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate...

0.00452EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/14 9:17 p.m.5 views

DEBIAN-CVE-2026-49855

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunks but did not enforce an overall limit on accumulated decompressed chunks, allowing a malicious server accessed by SimpleAsyncHTTPClient or an...

7.5CVSS6.1AI score0.00572EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/07/14 9:17 p.m.19 views

CVE-2026-49855

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunks but did not enforce an overall limit on accumulated decompressed chunks, allowing a malicious server accessed by SimpleAsyncHTTPClient or an...

7.5CVSS6.1AI score0.00572EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/07/14 8:26 p.m.15 views

NPM: n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode

NPM: n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode vulnerability discovered by ? in WordPress Npm n8n-mcp versions = 2.57.3...

5.4CVSS6.1AI score0.00164EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/07/14 8:17 p.m.8 views

CVE-2026-48068

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming HTTP/2 stream initiation can cause a server process created using @grpc/grpc-js to crash. This issue is fixed in...

7.5CVSS0.00617EPSS
SaveExploits0References13
NVD
NVD
added 2026/07/14 8:16 p.m.9 views

CVE-2026-15713

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated...

5.9CVSS0.00349EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/14 8:16 p.m.5 views

DEBIAN-CVE-2026-15713

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated...

5.9CVSS5.5AI score0.00349EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/14 8:16 p.m.6 views

DEBIAN-CVE-2026-15714

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soupmultipartinputstreamreadheaders function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When...

6.5CVSS5.5AI score0.0039EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/14 8:6 p.m.7 views

MAL-2026-10618 Malicious code in cosmos-gradio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf1266e0846a392e9aaa6805756d26dc427a04415e8a422d53ffce7a1a0c2e2 cosmos-gradio 9999.0.0 is a dependency-confusion squat published as an sdist-only release with an intentionally inflated version to win highest-versi...

6.3AI score
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/07/14 7:45 p.m.9 views

CVE-2026-15713

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated...

5.9CVSS5.4AI score0.00349EPSS
SaveExploits0
CVE
CVE
added 2026/07/14 7:45 p.m.24 views

CVE-2026-15713

This CVE affects Libsoup’s HTTP/2 implementation. The issue is a memory leak where memory context blocks are not properly released under specific stream termination conditions (e.g., window exhaustion or explicit stream resets). A remote, unauthenticated attacker acting as a malicious network pee...

5.9CVSS6.1AI score0.00349EPSS
SaveExploits0References3
Rows per page
Query Builder