Lucene search
+L

322179 matches found

EUVD
EUVD
added 6 days ago11 views

EUVD-2026-50956

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS5.9AI score0.0037EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago42 views

CVE-2026-48448

Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability (CWE-89) due to improper neutralization of special elements in SQL commands. The issue could allow an attacker to read files on the file system without user interaction, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:C...

8.6CVSS5.9AI score0.0037EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 6 days ago9 views

CVE-2026-48448 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS5.9AI score0.0037EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 6 days ago12 views

CVE-2026-18186 A stored format string vulnerability was found in the FTP Backup on the ADM

A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...

7.1CVSS5.8AI score0.00226EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago13 views

EUVD-2026-50957

A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...

7.1CVSS5.8AI score0.00226EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago19 views

CVE-2026-18186

CVE-2026-18186 affects the ADM platform’s FTP Backup component. The issue is a stored format-string vulnerability where user-controlled backup configuration data may be written into a task log and later processed via an unsafe format-string operation. Exploitation can lead to memory information d...

8.1CVSS5.8AI score0.00226EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 6 days ago47 views

CVE-2026-18186 A stored format string vulnerability was found in the FTP Backup on the ADM

A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...

7.1CVSS0.00226EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 6 days ago7 views

netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the SpdyHttpDecoder handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated SYNSTREAM frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This...

8.7CVSS5.8AI score0.00612EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 6 days ago9 views

io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service DoS...

7.5CVSS7AI score0.00423EPSS
SaveExploits1References9
RedHat Linux
RedHat Linux
added 6 days ago7 views

org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

A flaw was found in Apache HttpComponents Core. This uncontrolled resource consumption vulnerability in the HTTP/1.1 message parser allows a remote attacker to cause a denial of service through memory exhaustion. This can be triggered by sending messages with an excessive number of headers or...

7.5CVSS5.8AI score0.00565EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 6 days ago6 views

org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system's configured header list size...

7.5CVSS5.8AI score0.00587EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 6 days ago9 views

io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service

A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine JVM heap memory...

7.5CVSS5.9AI score0.00549EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 6 days ago7 views

io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message

A flaw was found in Netty's codec-haproxy module. A remote attacker could exploit a vulnerability in the HAProxyMessageDecoder by sending a specially crafted PROXY protocol v2 message. This leads to unbounded buffer accumulation, causing a denial of service DoS due to memory exhaustion...

8.7CVSS5.9AI score0.00612EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 6 days ago7 views

io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to...

6.9CVSS5.9AI score0.00292EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 6 days ago9 views

io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing t...

7.5CVSS7AI score0.00365EPSS
SaveExploits1References9
OSV
OSV
added 6 days ago5 views

DEBIAN-CVE-2026-18011

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Low...

2.4CVSS5.9AI score0.00091EPSS
SaveExploits0References1
NVD
NVD
added 6 days ago8 views

CVE-2026-18005

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

6.5CVSS0.00197EPSS
SaveExploits0References2
OSV
OSV
added 6 days ago6 views

DEBIAN-CVE-2026-18005

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.9AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
added 6 days ago8 views

CVE-2026-18011

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Low...

2.4CVSS0.00091EPSS
SaveExploits0References2
OSV
OSV
added 6 days ago6 views

DEBIAN-CVE-2026-17995

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Low...

8.1CVSS5.9AI score0.00236EPSS
SaveExploits0References1
Rows per page
Query Builder