Lucene search
+L

46962 matches found

Github Security Blog
Github Security Blog
added 2026/08/27 6:32 p.m.8 views

Duplicate Advisory: Quadratic-time DoS in PorterStemmer via long runs of 'y'

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ww6m-cw3f-q94g. This link is maintained to preserve external references. Original Description nltk PorterStemmer in versions = 3.10.2 fixed in 3.10.3 contains an inefficient-algorithmic-complexity denial of...

8.7CVSS5.8AI score0.00363EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/08/27 6:11 p.m.11 views

MINI-PGQQ-RFWM-3855

Bulletin has no description...

9.8CVSS7.1AI score0.01226EPSS
SaveExploits2
OSV
OSV
added 2026/08/27 6:03 p.m.9 views

MINI-RPRX-GWRQ-8544

Bulletin has no description...

9.6CVSS5.8AI score0.00401EPSS
SaveExploits0
OSV
OSV
added 2026/08/27 6:03 p.m.6 views

MINI-X2WM-8G8Q-25C9

Bulletin has no description...

7.5CVSS8.1AI score0.00522EPSS
SaveExploits1
OSV
OSV
added 2026/08/27 3:29 p.m.8 views

MINI-HPHX-8JWM-35M3

Bulletin has no description...

4.3CVSS6.4AI score0.73327EPSS
SaveExploits4
OSV
OSV
added 2026/08/27 2:34 p.m.11 views

ECHO-A835-6F03-EF3A

Bulletin has no description...

7.3CVSS4.9AI score0.00139EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/27 11:08 a.m.10 views

MINI-P4CQ-WP6F-459X

Bulletin has no description...

5.3CVSS5AI score0.00336EPSS
SaveExploits0
OSV
OSV
added 2026/08/27 11:08 a.m.8 views

MINI-P7GR-9HP3-JV89

Bulletin has no description...

5.9CVSS4.8AI score0.00131EPSS
SaveExploits0
OSV
OSV
added 2026/08/27 10:16 a.m.7 views

RHSA-2026:60353 Red Hat Security Advisory: python-urwid security update

Bulletin has no description...

8.1CVSS4.8AI score0.0043EPSS
SaveExploits0References13
OSV
OSV
added 2026/08/27 6:10 a.m.10 views

BELL-CVE-2026-52492 CVE-2026-52492 does not affect BellSoft software

Bulletin has no description...

7.8CVSS5.8AI score0.0013EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/27 6:00 a.m.8 views

WordPress Defender Security plugin < 6.2.0 - Admin+ Network-Wide RCE vulnerability

Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Defender Security versions 6.2.0...

6.6CVSS5.2AI score0.00289EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/08/27 3:19 a.m.8 views

MINI-R7H4-9F9G-CPWR

Bulletin has no description...

5.3CVSS5AI score0.00336EPSS
SaveExploits0
OSV
OSV
added 2026/08/27 12:00 a.m.7 views

ECHO-3B00-F8EA-BEA7

Bulletin has no description...

5.9CVSS4.8AI score0.00393EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.86 views

GitLab 18.3 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-4398)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-4398 Note that Nessus has not tested for this issue but has instead relied only on the application'...

5.4CVSS5.9AI score0.00242EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-77117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glibc - None Red Hat Enterprise Linux - glibc: Non-progress DoS in SHIFTJISX0213 - Ubuntu Linux - SHIFTJISX0213 converter hang in shiftjisx0213.c...

5.9CVSS5.7AI score0.00412EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/27 12:00 a.m.6 views

UBUNTU-CVE-2026-19499

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

7.7CVSS5.3AI score0.00376EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/26 9:34 p.m.6 views

Security Bulletin: QRadar contains hard-coded credentials

Summary QRadar contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Vulnerability Details CVEID:CVE-2026-5522 DESCRIPTION: QRadar contains hard-cod...

6.7CVSS5.4AI score0.0009EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2026/08/26 9:29 p.m.8 views

ECHO-A444-0F4D-8828

Bulletin has no description...

4.3CVSS4.8AI score0.00267EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/26 9:28 p.m.9 views

ECHO-3578-294C-0A76

Bulletin has no description...

8.8CVSS4.8AI score0.00442EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/26 9:28 p.m.9 views

ECHO-0DD1-CA9D-47D8

Bulletin has no description...

4.3CVSS4.8AI score0.00455EPSS
SaveExploits0References2
Rows per page
Query Builder