Lucene search
+L

6874 matches found

RedhatCVE
RedhatCVE
added 2026/08/14 3:20 p.m.12 views

CVE-2026-73619

A flaw was found in GitPython. This vulnerability allows an attacker to read arbitrary files from the filesystem. By exploiting an incomplete denylist in the unsafegitarchiveoptions guard, an attacker can supply specific options, such as --add-file or --add-virtual-file, to the Repo.archive...

7.1CVSS5.5AI score0.00291EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/08/14 3:20 p.m.10 views

CVE-2026-73623

A flaw was found in GitPython. An incomplete denylist in the unsafegitcloneoptions function fails to restrict the --template option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations...

8.8CVSS5.8AI score0.00961EPSS
SaveExploits1References5
Circl
Circl
added 2026/08/14 3:16 p.m.13 views

CVE-2026-59535

creationtimestamp| type| source ---|---|--- 2026-08-14 15:16:33+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt2hb5yphs24...

7.3CVSS4.8AI score0.00213EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/14 2:33 p.m.7 views

MINI-VWRX-43HG-M852

Bulletin has no description...

8.4CVSS4.8AI score0.00107EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 2:33 p.m.7 views

MINI-XVP8-FJMM-X845

Bulletin has no description...

6.1CVSS4.8AI score0.0031EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 2:31 p.m.5 views

MINI-QGF9-747Q-83QP

Bulletin has no description...

7.5CVSS4.8AI score0.00568EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 2:31 p.m.6 views

MINI-68J5-4X8Q-74CP

Bulletin has no description...

5.9CVSS4.8AI score0.00518EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 2:31 p.m.4 views

MINI-62HJ-Q8P9-3GQ6

Bulletin has no description...

7.5CVSS4.8AI score0.00568EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 2:10 p.m.7 views

MINI-7C24-H36R-GVRV

Bulletin has no description...

6.1CVSS4.8AI score0.0031EPSS
SaveExploits0
NVD
NVD
added 2026/08/14 12:16 p.m.13 views

CVE-2026-72834

filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum ?checksum= branch of resourceGetHandler reads the entire file to compute a digest and returns it without performing a Perm.Download check unlike the sibling raw, preview, and subtitle paths. As a...

5.3CVSS0.00228EPSS
SaveExploits0References3
Circl
Circl
added 2026/08/14 12:01 p.m.12 views

CVE-2026-56858

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24dovar52y 2026-08-22 12:01:13+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa3a3w4z2r...

6.1CVSS4.9AI score0.0031EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/08/14 12:00 a.m.15 views

The vulnerability in the smack/smackfs.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smack/smackfs.c component in the Linux operating system is related to incomplete recognition of internal conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.4AI score0.0016EPSS
SaveExploits0References17Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/08/14 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-73623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.54 contains an incomplete denylist in unsafegitcloneoptions that omits --template, allowing attackers to achieve arbitrary command executio...

8.8CVSS7.5AI score0.00961EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2026/08/14 12:00 a.m.10 views

The vulnerability of the wireless/realtek/rtw88/rtw8822b.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wireless/realtek/rtw88/rtw8822b.c component of the Linux operating system is related to incomplete recognition of its internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS4.7AI score0.00123EPSS
SaveExploits0References16Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/08/14 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-73619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can...

7.1CVSS6.7AI score0.00291EPSS
SaveExploits1References3
Circl
Circl
added 2026/08/13 10:40 p.m.19 views

CVE-2026-72839

creationtimestamp| type| source ---|---|--- 2026-08-13 22:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msypldq3wl2e 2026-08-15 08:00:05+00:00| seen| Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw 2026-08-15 13:40:04+00:00| seen|...

9.8CVSS4.8AI score0.00514EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/13 5:53 p.m.10 views

CVE-2026-19730

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

4.2CVSS5.3AI score0.00107EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/08/13 5:53 p.m.15 views

CVE-2026-19730

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

4.2CVSS5.3AI score0.00107EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/13 5:17 p.m.8 views

CVE-2026-58427

Private org member list leaked via /members API endpoint — incomplete fix for PR 38145...

7.5CVSS0.00342EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/13 5:17 p.m.11 views

CVE-2026-55987

OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens incomplete fix of 38009...

8.1CVSS0.00295EPSS
SaveExploits0References3
Rows per page
Query Builder