Lucene search
+L

12489 matches found

CVE
CVE
added 2026/08/04 5:30 p.m.42 views

CVE-2026-18790

Systerel S2OPC up to 1.7.3 contains a vulnerability in LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse (src/ClientServer/frontend/client_wrapper/internal/state_machine.c, DeleteMonitoredItemsRequest Handler). The flaw enables an out-of-bounds read and can be exploited locally. Public exploit...

4.8CVSS5AI score0.0012EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2026/08/04 3:29 p.m.13 views

NPM: Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

NPM: Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode nodeVMOptions Override vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

9.4CVSS5.4AI score0.00362EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/08/04 3:28 p.m.14 views

CVE-2026-69254 Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.ts. An authenticated attacker reaching...

9.4CVSS5.8AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/04 1:1 p.m.8 views

Malicious code in @keyv/postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16a1c036c4437e534d6eca401133f16bd83f08e0ca4b656c8bef0906eaad2a5 @keyv/postgres is the PostgreSQL storage adapter for the keyv key-value store library. The package exposes a storage adapter API and does not exhibit...

5.6AI score
SaveExploits0References2
OSV
OSV
added 2026/08/04 1:1 p.m.5 views

MAL-2026-12024 Malicious code in @keyv/test-suite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710c3cc7a3215d4a3bfa506c57bf04ffc7973d33da9dca652060a6bf1d0a4856 @keyv/test-suite is a shared test harness used by keyv storage adapter packages. No install-time lifecycle hooks, remote fetches, credential reads,...

5.6AI score
SaveExploits0References2
NVD
NVD
added 2026/08/04 7:16 a.m.18 views

CVE-2026-64562

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

8.8CVSS0.0012EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/04 7:16 a.m.9 views

UBUNTU-CVE-2026-64562

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

8.8CVSS5.4AI score0.0012EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/08/04 6:23 a.m.5 views

CVE-2026-64562

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

5.5AI score0.0012EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/08/04 6:23 a.m.15 views

EUVD-2026-52603

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

5.5AI score0.0012EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/04 6:23 a.m.31 views

CVE-2026-64562 KVM: nVMX: Hide shadow VMCS right after VMCLEAR

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

8.8CVSS5.5AI score
SaveExploits0References8
Packet Storm News
Packet Storm News
added 2026/08/04 12:0 a.m.6 views

ShielDroid: A Hybrid Approach Integrating Machine and Deep Learning for Android Malware Detection

The rapid advancement of modern technology has led to a significant increase in the use of smart devices, such as smartphones and tablets, resulting in the widespread adoption of mobile applications. Although applications are required to undergo malware screening before being published on officia...

5.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/03 3:41 p.m.8 views

Malicious code in beaver-ui-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465b05640a3068a007c565655d946564a39211eeca92f8637b7c3b4fe9c9dece The package is advertised as a React UI layout library but on require'beaver-ui-layout' loads bridge.js, which reconstructs hostnames from array-join...

5.8AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/02 12:15 p.m.10 views

CVE-2026-68578

ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...

7.7CVSS5.9AI score0.00214EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/01 6:46 p.m.54 views

CVE-2026-55734

CVE-2026-55734 affects ueberauth Guardian before 2.4.1. The bug is in Guardian.Permissions.encode_permissions!/1 (and related encode_permissions_into_claims!/2/do_encode_permissions!/2) where each key in a supplied map is turned into an atom via String.to_atom(to_string(k)) before validation. If ...

7.5CVSS5.5AI score0.00286EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/08/01 6:46 p.m.42 views

CVE-2026-55734 guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian Guardian.Permissions module allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines...

6.9CVSS0.00286EPSS
SaveExploits1References4
OSV
OSV
added 2026/08/01 3:43 a.m.8 views

MAL-2026-11492 Malicious code in test-dev-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f4885b543da795140d0ac9c44423c6ecadf74c744c1f322f9d1a5263fe4f2 No static or traced behavioral signals of supply-chain attack were observed in this package. There is no evidence of install-time or import-time code...

6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/31 9:59 p.m.9 views

Malicious code in gtm-mcp-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07518fbe4f5f7d6807b80e7155b10a7f419e931302e6ee6c64b3200d6b4a6db1 lib/report.js imports childprocess, fs, https, and os and posts collected host information to a hardcoded https://hooks.zapier.com endpoint. The modu...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/31 9:53 p.m.9 views

Malicious code in polyprompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52da21b792fba3cc472cb67f1a5b445786802d67b6cf81b45409acdab8724c17 lib/report.js resolves the installer's git/GitHub email through gh api user/emails, git config, npm config, and environment variables, then POSTs a...

5.9AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/31 2:0 p.m.9 views

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

7.9CVSS6.6AI score0.00158EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/31 2:0 p.m.21 views

kernel: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM x86 memory management unit MMU. A malicious guest operating system could create a hugepage mapping that extends beyond the boundaries of its allocated memory slot. This improper handling of memory boundaries by KVM can lead t...

8.8CVSS5.4AI score0.0013EPSS
SaveExploits0References5
Rows per page
Query Builder