Lucene search
+L

2214 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux – Vulnerability in poppler-22, poppler

In Poppler 22.07.0, the PDFDoc::savePageAs function in PDFDoc.c allows attackers to cause a denial-of-service attack the application crashes with SIGABRT by manipulating a PDF file in which the xref data structure is improperly handled during the getCatalog process. Note that this vulnerability i...

6.5CVSS6.7AI score0.01085EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A issue was discovered in l2capsockrelease in net/bluetooth/l2capsock.c in the Linux kernel before version 6.4.10. There is a use-after-free issue, as the children of an sk are handled incorrectly...

7.8CVSS6.7AI score0.0055EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/20 12:00 a.m.11 views

CVE-2026-44926

InfoScale CmdServer before 7.4.2 mishandles access control...

5.8AI score0.00375EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:00 a.m.10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-psutil (UTSA-2026-017488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017488 advisory. psutil aka python-psutil through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into ...

7.5CVSS5.8AI score0.03522EPSS
SaveExploits0References4
CloudLinux
CloudLinux
added 2026/05/08 11:41 a.m.23 views

openssh: Fix of CVE-2026-35414

CVE-2026-35414: fix authorizedkeys principals option mishandling with comma-containing CA principals...

8.1CVSS6AI score0.00176EPSS
SaveExploits0
OSV
OSV
added 2026/05/05 2:00 p.m.9 views

UBUNTU-CVE-2026-6907

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. django.middleware.cache.UpdateCacheMiddleware erroneously caches requests where the Vary header contained an asterisk ''. This can lead to private data being stored and served. Earlier, unsupported Django series such as 5.0.x,...

5.3CVSS5.7AI score0.00358EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/05 12:00 p.m.10 views

RUSTSEC-2026-0125 Signature Verification on AVX2 Platforms Mishandles Edge Case

The AVX2 implementation of ML-DSA verification incorrectly implemented the usehint function, mishandling an edge case that should lead to signature rejection. Impact An attacker could make the ML-DSA verifier accept a crafted invalid signature under a maliciously generated verification key, if th...

8.2CVSS5.8AI score
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/05 1:45 a.m.20 views

SUSE CVE-2026-43862

In mutt before 2.3.2, the imapauthgss security level is mishandled...

4.8CVSS5.8AI score0.00162EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/05/04 7:16 a.m.14 views

CVE-2026-43862

In mutt before 2.3.2, the imapauthgss security level is mishandled...

3.7CVSS5.8AI score0.00162EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/04 7:16 a.m.18 views

CVE-2026-43862

In mutt before 2.3.2, the imapauthgss security level is mishandled...

3.7CVSS0.00162EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/04 6:00 a.m.8 views

CVE-2026-43862

In mutt before 2.3.2, the imapauthgss security level is mishandled...

3.7CVSS5.8AI score0.00162EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/24 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-31534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: let senddone handle a completion without IBSENDSIGNALED With smbdirectsendbatch...

5.5AI score
SaveExploits0References2
Amd
Amd
added 2026/04/14 12:00 a.m.21 views

Mishandling Resource Contention in AMD Processors

Revisions Revision Date| Description ---|--- 2026-04-14| Initial publication...

5.8AI score
SaveExploits0
CNNVD
CNNVD
added 2026/04/06 12:00 a.m.14 views

Summarization Functions 操作系统命令注入漏洞

Summarization Functions is an intelligent text summarization server developed by Braffolk’s individual developer. Versions of Summarization Functions prior to 0.1.5 had a vulnerability related to operating system command injection. This vulnerability stemmed from improper handling of the command...

5.3CVSS6.1AI score0.00939EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/06 12:00 a.m.12 views

Code-Projects Online Application System for Admission 安全漏洞

Code-Projects Online Application System for Admission is an online application system developed by Code-Projects. Version 1.0 of the code-projects Online Application System for Admission contains a security vulnerability. This vulnerability stems from incorrect operations with the...

6.9CVSS6AI score0.00308EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.23 views

PT-2026-30045

An issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input in a path to be read by the server, a Super User attacker is able to read files on the system and/or coerce an authentication from the service, aka Directory Traversal...

5.9AI score0.00883EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/28 12:00 a.m.14 views

OpenUI 信任管理问题漏洞

OpenUI is an open-source UI program developed byWeights & Biases. Versions of OpenUI 1.0 and earlier had a trust management vulnerability, which was caused by incorrect handling of the parameter LITELLMMASTERKEY, resulting in hardcoded credentials...

4.8CVSS5.8AI score0.00144EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/03/26 3:08 p.m.9 views

CVE-2026-33549

SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment of administrator privileges during the editing of an author data structure because of STATUT mishandling...

6.7CVSS5.8AI score0.00239EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.19 views

EUVD-2026-15880

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in imithemes Gaea gaea allows Reflected XSS.This issue affects Gaea: from n/a through 3.8...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/22 3:30 a.m.8 views

EUVD-2026-14268

SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment of administrator privileges during the editing of an author data structure because of STATUT mishandling...

6.7CVSS5.8AI score0.00239EPSS
SaveExploits0References4
Rows per page
Query Builder