Lucene search
+L

183 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-75509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to version 1.7.3,...

6.5CVSS0.00091EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 8:17 p.m.6 views

CVE-2026-75509

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to version 1.7.3, JWTClaimsRegistry applies membership matching to list-valued iss and sub claims, allowing an array-valued iss that contains the expected issuer to pass...

6.5CVSS0.00091EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 8:08 p.m.11 views

CVE-2026-75509

joserfc is a Python library implementing JOSE standards. Prior to version 1.7.3 , the JWTClaimsRegistry applies membership matching to list-valued iss and sub claims, meaning an array-valued iss claim that merely contains the expected issuer will pass an intended equality check. This enables issu...

6.5CVSS5.3AI score0.00091EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/29 1:23 p.m.13 views

CVE-2026-12616

The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that string into three log statements before any validation gate. Because the configured log format "%asctimes - %names - %levelnames - %messages" renders...

6.9CVSS6AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/06/12 12:31 p.m.10 views

Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator

The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' Audience claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be successfully replayed against a completely different Resource Server, leading to Token Confusion/Routing attacks. Users...

9.1CVSS5.2AI score0.00445EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-3834

Malware in sbrugna...

5CVSS6.4AI score0.02384EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.18 views

EUVD-2007-3815

Malware in sbrugna...

9.3CVSS6.4AI score0.04931EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2005-2712

Malware in sbrugna...

7.2CVSS6.4AI score0.00368EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-1110

Malware in sbrugna...

7.5CVSS6.4AI score0.0317EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2003-1597

Malware in sbrugna...

5.3CVSS6.4AI score0.00413EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2003-0693

Malware in sbrugna...

5CVSS6.4AI score0.02801EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2002-0234

Malware in sbrugna...

7.5CVSS6.4AI score0.03692EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2006-7111

Malware in sbrugna...

2.1CVSS6.4AI score0.00757EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2003-1596

Malware in sbrugna...

9.8CVSS6.4AI score0.01046EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2007-2682

Malware in sbrugna...

7.8CVSS6.4AI score0.01976EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2000-0688

Malware in sbrugna...

5CVSS6.4AI score0.01406EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2003-1598

Malware in sbrugna...

6.1CVSS6.3AI score0.00495EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2007-3814

Malware in sbrugna...

3.5CVSS6.4AI score0.02156EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2025-6727

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00571EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 9:09 p.m.16 views

CVE-2021-45488

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

7.5CVSS6.7AI score0.00964EPSS
SaveExploits0
Rows per page
Query Builder