Lucene search
+L

64158 matches found

CVE
CVE
added yesterday13 views

CVE-2026-44878

CVE-2026-44878 affects HPE Aruba Networking EdgeConnect SD-WAN Gateways running ECOS. The vulnerability in the web-based management interface allows an authenticated, highly privileged remote attacker to access the device filesystem, with potential to read sensitive files and tamper with or delet...

7.2CVSS5.4AI score
Exploits0References1
CVE
CVE
added yesterday8 views

CVE-2026-11925

Technical details (affected component/version/root cause/impact) are not publicly available in the provided documents. Monitor for updates from Tanium and CVE records for any additional technical specifics.

2.7CVSS5.2AI score
Exploits0References1
CVE
CVE
added yesterday34 views

CVE-2026-47671

Nhost CLI prior to 1.46.0 exposes an unauthenticated, cross-origin-configurable configserver via nhost dev. The hidden configserver serves Mimir GraphQL with dummy authorization and permissive CORS (Access-Control-Allow-Origin: *). An attacker-controlled web page can reach localhost and perform q...

5.4CVSS5.4AI score0.00033EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-63859

A flaw was found in the Linux kernel's airoha network driver. The airohaqdmacleanuptxqueue routine, responsible for cleaning up transmit queues, was missing critical steps. This omission could lead to improper resetting of Direct Memory Access DMA transmit descriptors and incorrect notification t...

5.3AI score0.00155EPSS
Exploits0References4
CVE
CVE
added yesterday11 views

CVE-2026-63453

The CVE-2026-63453 entry documents buffer overflow vulnerabilities in the command line interface of AOS-CX. The vulnerability stems from a buffer overflow in the CLI, enabling a remote high-privileged user to execute arbitrary code with the underlying OS privileges. Affected software: AOS-CX CLI ...

7.2CVSS6.3AI score
Exploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-46350

A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system...

8.8CVSS6.6AI score
Exploits0References1
CVE
CVE
added yesterday9 views

CVE-2026-44880

CVE-2026-44880 describes a buffer overflow in the AOS-CX command line interface. The vulnerability could allow a remote, low-privileged user to execute arbitrary code with elevated privileges on the underlying OS. The CVSS 3.1 score is 8.8 (High) with network attack vector, low attack complexity,...

8.8CVSS6.6AI score
Exploits0References1
NVD
NVD
added yesterday5 views

CVE-2026-15793

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

7.3CVSS
Exploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-15789

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

6.9CVSS
Exploits0References1
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-63917

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

8.8CVSS5.3AI score0.00164EPSS
Exploits0References4
Cvelist
Cvelist
added yesterday17 views

CVE-2026-15793 Git source checkout from a bundle file could lead to command injection

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

7.3CVSS
Exploits0References1
CVE
CVE
added yesterday10 views

CVE-2026-15793

CVE-2026-15793 affects BuildKit-based workflows using the raw low‑level API. When a Git source is checked out with git.checkoutbundle=true, and the source is malicious, this can trigger a crafted command invocation on the host. Affected component: BuildKit custom frontends/clients (low‑level API ...

7.3CVSS5.4AI score
Exploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-46309

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

6.9CVSS5.4AI score
Exploits0References1
CVE
CVE
added yesterday34 views

CVE-2026-47397

CVE-2026-47397 (PraisonAI) affects PraisonAI up to version 4.6.37, where hidden webpage metadata can cause agents to write attacker-controlled content to arbitrary file paths. The root cause is an overly permissive path check in code/tools/write_file.py where path validation is skipped when works...

7.1CVSS5.4AI score0.00051EPSS
Exploits0References3
EUVD
EUVD
added yesterday4 views

EUVD-2026-46270

Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vulnerability in the render callback of the ninja-forms/submissions-table Gutenberg block that allows authenticated attackers with Author-level privileges to expose stored form submissions to unauthenticated...

7.1CVSS5.5AI score
Exploits0References3
Debian CVE
Debian CVE
added yesterday3 views

CVE-2026-59851

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...

8.8CVSS5.4AI score
Exploits0
CVE
CVE
added yesterday8 views

CVE-2024-5300

The CVE concerns Canonical snapd’s base AppArmor profile misconfiguration. Abstraction rules in /etc/apparmor.d/abstractions/nss-systemd allow strictly confined snaps to access io.systemd.Multiplexer and io.systemd.NameServiceSwitch sockets in /run/systemd/userdb/, bypassing sandbox restrictions....

5.6CVSS5.6AI score
Exploits0References1
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2024-5300

On Ubuntu, if the systemd-userdbd package is installed, then a strictly confined snap is able to access hashed user passwords via its varlink interface...

5.6CVSS5.4AI score
Exploits0References3
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-63915

A flaw was found in the Linux kernel's Near Field Communication NFC Host Controller Interface HCI. A remote attacker, by sending a specially crafted 0-byte Host Controller Protocol HCP frame, could trigger an out-of-bounds read. This could lead to a system crash, resulting in a Denial of Service...

8.8CVSS5.6AI score0.00349EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added yesterday3 views

SUSE CVE-2026-63996

In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: require exact CDB reply length Malicious SFP module could respond with rpllen longer than what cmiscdbprocessreply expected, leading to OOB writes. Malicious HW is a bit theoretical but some modules may just be bug...

7.8CVSS5.3AI score0.00128EPSS
Exploits0References2
Rows per page
Query Builder