Lucene search
+L

76285 matches found

AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.17 views

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. Chromium security severity: Low...

8.1CVSS7.3AI score0.00194EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.11 views

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.3AI score0.00289EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.22 views

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Low...

6.5CVSS6.9AI score0.0019EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/10 6:56 a.m.14 views

Security Bulletin: IBM Operational Decision Manager for July 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2025-11143 DESCRIPTION: The Jetty URI parser has some key differences to other common parsers when...

9.1CVSS7AI score0.01305EPSS
SaveExploits2Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.11 views

Cisco Integrated Management Controller Argument Injection (CVE-2026-20288) (cisco-sa-cimc-arg-inject-upSHdMfU)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability. - A command injection vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of user-supplied input. An...

6.5CVSS6.2AI score0.00382EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/08 7:08 a.m.9 views

CVE-2026-44092

A flaw was found in ModbusServer. An unauthenticated remote attacker can inject malicious input into the application due to a lack of input validation when fetching data from MQTT. This vulnerability may lead to a loss of data integrity and system availability...

9.1CVSS5.3AI score0.0042EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/08/07 11:56 p.m.8 views

SUSE CVE-2026-19143

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

8.6CVSS5.2AI score0.00172EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/07 9:17 p.m.19 views

CVE-2026-9031

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web...

6.8CVSS0.00163EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/07 8:40 p.m.10 views

EUVD-2026-54656

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web...

6.8CVSS5.3AI score0.00163EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/07 8:40 p.m.11 views

CVE-2026-9031

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web...

6.8CVSS5.3AI score0.00163EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/07 8:40 p.m.55 views

CVE-2026-9031

Summary: CVE-2026-9031 is an input validation vulnerability in the HTTP-WRITEOEM handler of the TP-Link Archer A6 web interface. The weakness stems from insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Impact (as documented): Successful ...

6.8CVSS5.3AI score0.00163EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/07 4:07 p.m.28 views

CVE-2026-17598 Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

5.3CVSS0.00253EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/07 4:07 p.m.53 views

CVE-2026-17598

CVE-2026-17598 affects Sonatype Nexus Repository 3. The issue is improper input validation in scheduled task configuration: internal configuration keys from user-supplied task properties are not properly filtered when creating/updating a scheduled task via the admin UI. A user with permission to ...

5.3CVSS5.3AI score0.00253EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/07 2:46 a.m.17 views

OESA-2026-3311 trafficserver security update

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through...

9.2CVSS5.8AI score0.00706EPSS
SaveExploits1References39
OSV
OSV
added 2026/08/07 2:46 a.m.13 views

OESA-2026-3310 trafficserver security update

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through...

9.2CVSS5.8AI score0.00706EPSS
SaveExploits1References39
OSV
OSV
added 2026/08/07 2:46 a.m.15 views

OESA-2026-3309 trafficserver security update

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through...

9.2CVSS5.8AI score0.00706EPSS
SaveExploits1References39
OSV
OSV
added 2026/08/07 2:41 a.m.15 views

OESA-2026-3243 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A denial-of-service and resource...

5.3CVSS5.6AI score0.00192EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/07 2:41 a.m.7 views

OESA-2026-3241 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A denial-of-service and resource...

5.3CVSS6AI score0.00192EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/07 12:31 a.m.13 views

EUVD-2026-54142

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

5.6AI score0.00445EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/07 12:31 a.m.11 views

EUVD-2026-54124

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

5.4AI score0.00353EPSS
SaveExploits0References3
Rows per page
Query Builder