Lucene search
+L

1641627 matches found

NVD
NVD
added 2026/09/18 6:17 p.m.9 views

CVE-2026-85058

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client-controlled Last Will message through publish2Subscribers without invoking the authorizator.canWrite check used by normal PUBLISH paths. When anonymous access is enabled and topic ACLs restrict...

7.5CVSS0.0027EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/18 6:17 p.m.9 views

CVE-2026-81182

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated attacker who holds a public read-write note share link can disclose an uploaded file or image from the same project by updating the shared note to reference the target asset filename. The...

4.2CVSS0.00172EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/18 6:17 p.m.7 views

CVE-2026-81180

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

8.8CVSS0.00355EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/18 6:17 p.m.7 views

CVE-2026-81179

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWEDHOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request...

8.1CVSS0.00263EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/18 6:17 p.m.7 views

CVE-2026-81178

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.55, an unauthenticated holder of a public note share link receives project-wide collaborative editing metadata because the public share consumer joins the same collaboration group as authenticated project members and...

3.5CVSS0.00215EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/18 6:17 p.m.8 views

CVE-2026-81181

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authentication flow for protected shared notes does not rotate the session identifier after successful authentication, allowing session fixation. An attacker who can obtain an unauthenticated SysReptor...

3.7CVSS0.00221EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/18 6:17 p.m.6 views

CVE-2026-77386

Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthenticated attacker could initiate the OIDC login flow with an attacker-controlled redirectUrl. The login handling in auth/oidc.go stored that URL with the opaque login state, and...

6.5CVSS0.00391EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/18 6:17 p.m.11 views

DEBIAN-CVE-2026-69184

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

7.5CVSS4.9AI score0.00675EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/18 6:17 p.m.8 views

CVE-2026-69186

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

5.3CVSS0.00524EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/18 6:17 p.m.11 views

DEBIAN-CVE-2026-69186

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

5.3CVSS4.9AI score0.00524EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/18 6:17 p.m.8 views

CVE-2026-71537

Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade relies on Service::upgradable to check for a pending service upgrade and later executes $credit-increment'amount', abs$price without DB::transactio...

6.5CVSS0.00232EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/18 6:17 p.m.3 views

AZL-103307 CVE-2026-69184 affecting package c-ares 1.30.0-2

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

7.5CVSS0.00675EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/18 6:17 p.m.5 views

AZL-103304 CVE-2026-69186 affecting package c-ares 1.30.0-2

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

5.3CVSS0.00524EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/18 6:17 p.m.8 views

CVE-2026-69184

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

7.5CVSS0.00675EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/18 6:17 p.m.7 views

CVE-2026-63445

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

7.1CVSS0.00561EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/18 6:17 p.m.9 views

CVE-2026-63458

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoints, including...

7.1CVSS0.00303EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/18 6:17 p.m.8 views

CVE-2026-64847

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool workers with standard error connected to a pipe that the parent never drains, even though the documented behavior redirects all three...

6.8CVSS0.00121EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/18 6:17 p.m.10 views

DEBIAN-CVE-2026-61552

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

7.2CVSS4.9AI score0.00623EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/18 6:17 p.m.6 views

CVE-2026-61552

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

7.2CVSS0.00623EPSS
SaveExploits0References10
NVD
NVD
added 2026/09/18 6:17 p.m.8 views

CVE-2026-63199

Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the datasource creation and unsaved datasource proxy paths authorize the caller on a Datasource or GlobalDatasource scope but do not require read permission for the separately...

8.3CVSS0.00267EPSS
SaveExploits0References3
Rows per page
Query Builder