Lucene search
+L

6857 matches found

OSV
OSV
added 2026/08/30 4:45 p.m.8 views

ECHO-2AAB-293D-53AF

Bulletin has no description...

6.5CVSS5.8AI score0.00951EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/30 2:14 p.m.7 views

MINI-H9QX-MCHF-C75R

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/30 1:20 a.m.6 views

UBUNTU-CVE-2026-82562

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

6.3CVSS6AI score0.00317EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/29 11:58 p.m.46 views

CVE-2026-82562 qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

6.3CVSS0.00317EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/29 11:58 p.m.37 views

CVE-2026-82562 qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

6.3CVSS6AI score
SaveExploits0References7
CVE
CVE
added 2026/08/29 11:58 p.m.90 views

CVE-2026-82562

CVE-2026-82562 affects the qs Node.js querystring parser (v6.14.2 through v6.15.3). When qs.parse is called with both comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key (a[]=1,2,3,4) is wrapped as a single nested element before the arrayLimit check runs, ...

6.3CVSS6AI score0.00317EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/29 9:30 p.m.11 views

MINI-2JCC-HCXQ-PF4J

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 4:33 p.m.10 views

MINI-JJVQ-7M2J-2W26

Bulletin has no description...

8.3CVSS5.8AI score0.00401EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 4:33 p.m.12 views

MINI-4C59-6MWM-8QRJ

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 3:55 p.m.9 views

MINI-69FF-QRQC-9P2W

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 3:07 p.m.12 views

MINI-7WMJ-QWFH-V5V4

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 2:58 p.m.10 views

MINI-RGJX-RH5W-JXJX

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 2:56 p.m.10 views

MINI-FGF6-X66V-GCCV

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 2:49 p.m.10 views

MINI-84XF-JRM9-W89J

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 2:48 p.m.12 views

MINI-2CG6-RJHG-VX7R

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 2:48 p.m.10 views

MINI-G5GF-CGQG-59PC

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 2:47 p.m.10 views

MINI-RCJJ-3RQR-P3QX

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/29 2:47 p.m.11 views

MINI-RQ59-WWG4-6VCQ

Bulletin has no description...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2026/08/28 8:22 p.m.9 views

GHSA-F2XF-7X3G-4272 PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction

Summary Stored cross-site scripting XSS in PrivateBin's attachment download link. An anonymous attacker can create a paste with a text/html attachment that, with certain user interaction, bypasses protections similar to CVE-2022-24833. When a victim opens the "Download attachment" link in a new...

4.3CVSS5.9AI score0.00224EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/28 7:25 p.m.38 views

CVE-2026-77184 MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...

5.6CVSS0.00218EPSS
SaveExploits0References1
Rows per page
Query Builder