Lucene search
+L

182383 matches found

RedHat Linux
RedHat Linux
added 2026/07/06 5:32 a.m.12 views

ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...

8.1CVSS5.8AI score0.00471EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/07/06 4:52 a.m.13 views

ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...

8.1CVSS6.9AI score0.00471EPSS
SaveExploits1References5
NVD
NVD
added 2026/07/06 3:16 a.m.22 views

CVE-2026-14791

A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of the file app/Http/Requests/InvoicesRequest.php of the component Invoice Note Handler. Executing a manipulation of the argument notes can lead to cross site scripting. The attac...

5.1CVSS0.00203EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/06 3:11 a.m.8 views

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

6.1CVSS5.8AI score0.00223EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/06 2:16 a.m.10 views

UBUNTU-CVE-2026-14803

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path decodevalue dispatching to decodearray and decodeobject recurses with no depth limit, so a small deeply nested JSON document can consume excessive memory...

6.5CVSS6AI score0.00331EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.23 views

PT-2026-55896

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.10.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.x Description An issue exists in the Apache Camel Neo4J component where the producer builds the Cypher WHERE clau...

8.2CVSS6AI score0.00329EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.39 views

PT-2026-55985

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when invoking device input/output control operations for mapping and unmapping persistent memory buffers. This issue is caused by improp...

7.8CVSS6AI score0.00064EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/07/06 12:0 a.m.37 views

The vulnerability of the HTTP response processing flow application interface of the Python library Urllib3 allows a attacker to cause a service failure.

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS5.9AI score0.0068EPSS
SaveExploits0References5Affected Software15
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.28 views

PT-2026-55909

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the Atmosphere WebSocket component allows an unauthenticated remote...

7.5CVSS6.1AI score0.00783EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.35 views

PT-2026-55894

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the Apache Camel Lucene Component allows for authorization bypass throu...

7.5CVSS6.2AI score0.00399EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.33 views

PT-2026-55993

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description Memory corruption occurs when updating prepared commands using invalid port indices derived from user space input that exceed the supported read client limits. Recommendations At...

5.3CVSS6.1AI score0.00056EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.40 views

PT-2026-55990

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs during the validation of input batch size and buffer plane count when these values exceed the maximum allowed limits. Recommendations At...

5.3CVSS6.1AI score0.0006EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.33 views

PT-2026-55900

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation and improper access control in the Camel Mongodb Gridfs component allow an...

9.8CVSS6AI score0.00452EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.51 views

PT-2026-55953

Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support and Privileged Remote Access affected versions not specified Description A high-severity issue exists in a web application component due to insufficient validation of user-supplied input. This flaw allows an...

9.9CVSS5.7AI score0.00494EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.19 views

PT-2026-55902

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the Apache Camel JIRA component allows for authorization bypass. The...

5.3CVSS6.1AI score0.00349EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.30 views

PT-2026-55987

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon CCW affected versions not specified Description Memory corruption occurs when processing multiple IOCTL Input/Output Control calls that utilize the same buffer file descriptor input. IOCTL is a system call used by...

7.3CVSS6.2AI score0.00065EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.32 views

PT-2026-55995

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Memory corruption occurs when processing asynchronous input parameters. This is caused by a Time-of-Check to Time-of-Use TOCTOU race condition, where values are...

7.8CVSS6.1AI score0.00052EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.37 views

PT-2026-55888

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.3.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the camel-elasticsearch-rest-client component allows for authorization...

5.3CVSS6.1AI score0.00577EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.19 views

PT-2026-55919

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue...

5.9AI score0.00524EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.17 views

PT-2026-55904

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An injection issue exists in the Apache Camel IRC component due to improper input validation and...

6.5CVSS6.2AI score0.00561EPSS
SaveExploits1References7
Rows per page
Query Builder