Lucene search
+L

31725 matches found

RedhatCVE
RedhatCVE
added 6 days ago5 views

CVE-2026-64410

A flaw was found in the Linux kernel's netfilter component, specifically concerning the handling of IPIP IP-in-IP tunnel hardware offload. The system attempts to utilize hardware offload for IPIP tunnels, a feature not yet supported by existing drivers. A remote attacker could potentially exploit...

9.8CVSS5.8AI score0.0038EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago6 views

CVE-2026-64436

A flaw was found in the Linux kernel. An uninitialized variable in the IPComp IP Compression state handling could allow a local attacker to trigger an out-of-bounds read during state migration. This vulnerability could lead to the disclosure of sensitive kernel memory or cause a denial of service...

7.1CVSS5.8AI score0.00119EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago9 views

CVE-2026-59883

A flaw was found in Guzzle, an extensible PHP HTTP client. The CookieJar component improperly handled cookies for IP-address or bare-numeric domains, failing to restrict them to the exact host. This vulnerability could allow a remote attacker to disclose cookies across different hosts, inject...

6.1CVSS5.9AI score0.00118EPSS
SaveExploits0References7
EUVD
EUVD
added 6 days ago8 views

EUVD-2026-50229

The Apache Traffic Server headerrewrite plugin can crash or corrupt memory during cookie operations and CIDR condition matching. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version...

8.3CVSS5.8AI score0.00457EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 6 days ago6 views

CVE-2026-58159 Apache Traffic Server: Listener and ACL handling allow access-control bypass

Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

8.2CVSS5.8AI score0.00399EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 6 days ago7 views

CVE-2026-58159

Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

8.2CVSS5.8AI score0.00399EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 6 days ago5 views

CVE-2026-58159

Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

8.2CVSS5.8AI score0.00399EPSS
SaveExploits0
Cvelist
Cvelist
added 6 days ago32 views

CVE-2026-18191 Vacron|IP Camera - Hidden Functionality

VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administrator credentials of the device...

9.8CVSS0.00383EPSS
SaveExploits0References2
CVE
CVE
added 6 days ago6 views

CVE-2026-18191

CVE-2026-18191 affects the Vacron VIN-DS783E-E6. The vulnerability is described as a Hidden Functionality that allows unauthenticated remote attackers to trigger a hidden function to obtain the device administrator credentials. The CVE is rated CRITICAL: CVSS v4.0 base 9.3 (Network, low attack co...

9.8CVSS5.9AI score0.00383EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 6 days ago8 views

Linux Distros Unpatched Vulnerability : CVE-2026-58159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 throu...

8.2CVSS5.8AI score0.00399EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/28 5:8 p.m.5 views

SUSE CVE-2026-64538

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6nhmtuchange. fib6nhmtuchange re-fetches idev via in6devgetarg-dev and dereferences idev-cnf.mtu6 without a NULL check. addrconfifdown clears dev-ip6ptr with RCUINITPOINTER after rt6disableip has...

5.7AI score0.00176EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/28 4:18 p.m.8 views

CVE-2026-43910

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...

8.2CVSS0.00235EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/28 3:7 p.m.4 views

CVE-2026-64538

A flaw was found in the Linux kernel's IPv6 networking component. A null pointer dereference vulnerability exists in the fib6nhmtuchange function. This can occur when the idev in6device pointer is cleared during network interface shutdown, but the fib6nhmtuchange function attempts to dereference ...

5.3CVSS5.9AI score0.00176EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/28 2:59 p.m.12 views

@novu/application-generic: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition

Hi Novu team, Reporting an SSRF blocklist gap in the shared validateUrlSsrf guard. A complete self-contained reproduction is inlined below — copy the four files into a directory and run docker compose up, plus a single-file probe that runs against Node directly. Locally validated against HEAD...

6AI score
SaveExploits0References2Affected Software1
SUSE Linux
SUSE Linux
added 2026/07/28 2:33 p.m.6 views

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. CVE-2026-53366: ipv4: account for fraggap on the paged...

9.3CVSS7.2AI score0.00908EPSS
SaveExploits5References8
OSV
OSV
added 2026/07/28 1:39 p.m.5 views

MAL-2026-11144 Malicious code in react-puller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ac07c0f6c79714a7b1f6bfd1272f9f7942cf0473875ca5276a1034c084f06d The package's postinstall hook runs node index.js, which spawns a detached worker that downloads two Windows executables CDPUserPlatform.exe and...

5.9AI score
SaveExploits0References1
OSV
OSV
added 2026/07/28 1:29 p.m.4 views

MAL-2026-11126 Malicious code in app-sim-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8470a75b327a72623ec4379302a2fc6ecdbaa302acf4fa1e39f1c688103562be package.json declares a postinstall hook that runs node test.js on npm install; test.js invokes fromstr2 and fromstr1 in index.js. fromstr2 fetches...

6AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/28 1:11 p.m.6 views

CVE-2026-54272

A flaw was found in the ip-address library. This library, used for parsing and manipulating IPv4 and IPv6 addresses in JavaScript, is vulnerable to Server-Side Request Forgery SSRF due to incorrect classification of IPv4-mapped/NAT64 IPv6 addresses. An attacker could exploit this misclassificatio...

7.2CVSS5.8AI score0.00254EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/28 8:33 a.m.2 views

SUSE-SU-2026:3350-1 Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to...

9.8CVSS6.5AI score0.00908EPSS
SaveExploits5References5
RedhatCVE
RedhatCVE
added 2026/07/28 6:57 a.m.6 views

CVE-2026-58404

A flaw was found in Hugo, a static site generator. The default security policy intended to deny requests to loopback, internal, and cloud-metadata IPv4 addresses could be bypassed. This occurred because the deny rule only matched dotted-decimal notation, allowing alternate IPv4 encodings integer,...

6.8CVSS5.7AI score0.00208EPSS
SaveExploits0References7
Rows per page
Query Builder