Lucene search
+L

274593 matches found

OSV
OSV
โ€ขadded 2026/09/16 7:18 p.m.โ€ข8 views

DEBIAN-CVE-2026-91104

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS5.9AI score0.00999EPSS
SaveExploits0References1
OSV
OSV
โ€ขadded 2026/09/16 7:18 p.m.โ€ข10 views

DEBIAN-CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS5.9AI score0.00723EPSS
SaveExploits1References1
OSV
OSV
โ€ขadded 2026/09/16 7:18 p.m.โ€ข6 views

DEBIAN-CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS5.9AI score0.00964EPSS
SaveExploits1References1
OSV
OSV
โ€ขadded 2026/09/16 7:18 p.m.โ€ข7 views

DEBIAN-CVE-2026-91100

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS5.9AI score0.00723EPSS
SaveExploits0References1
OSV
OSV
โ€ขadded 2026/09/16 7:18 p.m.โ€ข6 views

DEBIAN-CVE-2026-91099

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS5.9AI score0.0098EPSS
SaveExploits0References1
OSV
OSV
โ€ขadded 2026/09/16 7:18 p.m.โ€ข8 views

DEBIAN-CVE-2026-91101

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS5.9AI score0.00964EPSS
SaveExploits0References1
NVD
NVD
โ€ขadded 2026/09/16 7:17 p.m.โ€ข13 views

CVE-2026-75516

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start applies Math.minmaxInboundMessageBodySize, frameMax after Connection.Tune negotiation even though AMQP defines frameMax value zero as...

8.7CVSS0.00529EPSS
SaveExploits0References6
OSV
OSV
โ€ขadded 2026/09/16 7:17 p.m.โ€ข9 views

DEBIAN-CVE-2026-46352

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protoc...

7.5CVSS5.8AI score0.00464EPSS
SaveExploits0References1
OSV
OSV
โ€ขadded 2026/09/16 7:15 p.m.โ€ข5 views

CVE-2026-92474 GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

4.8CVSS5.1AI score
SaveExploits0References11
OSV
OSV
โ€ขadded 2026/09/16 7:09 p.m.โ€ข7 views

CVE-2026-63225 Redocly CLI: Path traversal when using `split` command

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the split command constructs output paths under --outDir from untrusted OpenAPI or AsyncAPI component names and x-codeSamples lang values without verifying that the resolved target...

4.4CVSS5.8AI score
SaveExploits0References9
OSV
OSV
โ€ขadded 2026/09/16 6:45 p.m.โ€ข5 views

CVE-2026-92472 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

4.8CVSS5AI score
SaveExploits0References11
Debian CVE
Debian CVE
โ€ขadded 2026/09/16 6:30 p.m.โ€ข5 views

CVE-2026-75516

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start applies Math.minmaxInboundMessageBodySize, frameMax after Connection.Tune negotiation even though AMQP defines frameMax value zero as...

8.7CVSS7.2AI score0.00529EPSS
SaveExploits0
OSV
OSV
โ€ขadded 2026/09/16 6:15 p.m.โ€ข6 views

CLSA-2026-1789582512 TuxCare security update for org.springframework.data (3 CVEs)

TuxCare rebuilt 5 org.springframework.data packages to address 3 CVEs. Fixed in 4.3.12-tuxcare.1...

7.1CVSS5.8AI score0.00273EPSS
SaveExploits0
OSV
OSV
โ€ขadded 2026/09/16 6:10 p.m.โ€ข13 views

CLSA-2026-1789582244 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.3.12-tuxcare.1...

5.9CVSS5.8AI score0.00262EPSS
SaveExploits0
OSV
OSV
โ€ขadded 2026/09/16 6:09 p.m.โ€ข5 views

RLSA-2026:67584 Moderate: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: A configuration-dependent issue in rsyslog's optional imptc...

7.5CVSS5.9AI score0.00455EPSS
SaveExploits0References3
OSV
OSV
โ€ขadded 2026/09/16 6:04 p.m.โ€ข16 views

RLSA-2026:54184 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads CVE-2026-42127 For more details about the security issues, including the...

7.5CVSS7.2AI score0.00432EPSS
SaveExploits0References3
Kitploit
Kitploit
โ€ขadded 2026/09/16 5:40 p.m.โ€ข6 views

CVE-2025-32463

๐Ÿ“Œ CVE-2025-32463 โ€” Sudo --chroot Local Privilege Escalation ExploitDB ID: 52352 ๐Ÿง  Overview This repository documents a critical local privilege escalation LPE vulnerability affecting Sudo versions 1.9.14 โ€“ 1.9.17. The vulnerability arises from an incorrect implementation of the sudo -R --chroot...

9.3CVSS7.5AI score0.61039EPSS
SaveExploits71
OSV
OSV
โ€ขadded 2026/09/16 5:36 p.m.โ€ข9 views

ROOT-APP-MAVEN-CVE-2026-41729 CVE-2026-41729 in org.springframework.data:spring-data-rest-core - Patched by Root

Root has patched CVE-2026-41729 in the org.springframework.data:spring-data-rest-core package for Root:Maven. Multiple fixed versions available...

8.1CVSS5.9AI score0.00393EPSS
SaveExploits0
OSV
OSV
โ€ขadded 2026/09/16 5:36 p.m.โ€ข8 views

ROOT-APP-MAVEN-CVE-2026-41728 CVE-2026-41728 in org.springframework.data:spring-data-rest-core - Patched by Root

Root has patched CVE-2026-41728 in the org.springframework.data:spring-data-rest-core package for Root:Maven. Multiple fixed versions available...

7.5CVSS5.9AI score0.00306EPSS
SaveExploits0
OSV
OSV
โ€ขadded 2026/09/16 5:31 p.m.โ€ข8 views

CVE-2026-92719 Quickwit through 0.9.0 SSRF via SQS queue_url Parameter

Quickwit through 0.9.0 fails to validate the host and scheme of the queueurl parameter in SQS file sources, allowing attackers to make the node issue requests to arbitrary internal addresses. Attackers can supply a malicious queueurl to the create-source API to scan internal networks and...

8.7CVSS5.9AI score
SaveExploits0References7
Rows per page
Query Builder