Lucene search
+L

4233 matches found

Anthropic
Anthropic
added 2026/08/18 2:11 p.m.8 views

ANT-2026-Y9HESEM8 · supabase/supabase · auth-bypass

auth-bypass medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-Y9HESEM8: AI data-sharing opt-in bypassed by mismatched org and project In...

6AI score
SaveExploits0References1
OSV
OSV
added 2026/08/18 1:57 p.m.10 views

PSF-2026-37

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 the "idna" codec and the intable...

6CVSS5.4AI score0.00507EPSS
SaveExploits0References7
Anthropic
Anthropic
added 2026/08/18 12:36 a.m.15 views

ANT-2026-CM0TCREP · torvalds/linux · Use-After-Free

use-after-free high CVE-2026-43074 Severity Claude high · Security research firm - · Maintainer high REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-CM0TCREP: UAF in epgetupwardsdepthproc giving unprivileged LPE During epollctlA, EPOLLCTLADD, B, the nesting-depth check...

7.8CVSS7AI score0.00482EPSS
SaveExploits3References1
SUSE CVE
SUSE CVE
added 2026/08/18 12:19 a.m.8 views

SUSE CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

4.4CVSS5.6AI score0.00239EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.16 views

PT-2026-77168

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description The HTTPPasswordMgr class in the urllib.request module, including its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, fails to consider the URL scheme when matchin...

6CVSS5.4AI score0.00407EPSS
SaveExploits0References28
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-74412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: fix wrong pcigetdrvdata type in AER handlers rtw88 stores an ieee80211hw pointer via pcisetdrvdata at probe time, but ioerrordetected and ioresume...

8.8CVSS7.3AI score0.0024EPSS
SaveExploits0References3
Anthropic
Anthropic
added 2026/08/17 9:15 p.m.12 views

ANT-2026-0BETG8WD · poppler · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-0BETG8WD: Heap-buffer-overflow in...

6.1AI score
SaveExploits0
OSV
OSV
added 2026/08/17 6:03 p.m.48 views

RLSA-2026:55439 Important: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication CVE-2026-1965 curl: curl:...

8.1CVSS6.2AI score0.00454EPSS
SaveExploits3References6
Rockylinux
Rockylinux
added 2026/08/17 6:03 p.m.57 views

curl security update

An update is available for curl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...

8.1CVSS6.2AI score0.00454EPSS
SaveExploits3
RedHat Linux
RedHat Linux
added 2026/08/17 6:40 a.m.13 views

Important: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.1CVSS6.1AI score0.00454EPSS
SaveExploits3References5
RedHat Linux
RedHat Linux
added 2026/08/17 5:15 a.m.11 views

Important: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.1CVSS5.6AI score0.00739EPSS
SaveExploits5References8
OSV
OSV
added 2026/08/15 1:18 p.m.12 views

AZL-96093 CVE-2026-74566 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

5.8AI score0.00165EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/15 12:28 p.m.22 views

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

5.4AI score0.00165EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/08/15 10:16 a.m.33 views

CVE-2026-18438

The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.7.1 via the fetchremotefile function. This is due to a filename validation/destination mismatch ...

8.8CVSS0.00903EPSS
SaveExploits0References18
NVD
NVD
added 2026/08/15 6:22 a.m.20 views

CVE-2026-74412

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix wrong pcigetdrvdata type in AER handlers rtw88 stores an ieee80211hw pointer via pcisetdrvdata at probe time, but ioerrordetected and ioresume retrieve it as a netdevice pointer. This causes...

8.8CVSS0.0024EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/15 6:22 a.m.10 views

UBUNTU-CVE-2026-72470

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-onepagebuf when adopting on-disk page size logreplay allocates log-onepagebuf using the page size that was chosen from the host PAGESIZE: log-onepagebuf = kmalloclog-pagesize, GFPNOFS; Later, when a restart...

7.8CVSS5.6AI score0.00138EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/15 6:22 a.m.7 views

UBUNTU-CVE-2026-72416

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcompat: ebtables emulation must reject non-bridge targets xtables targets return netfilter verdicts: NFACCEPT, NFDROP, and so on. ebtables targets return incompatible verdicts: EBTACCEPT, EBTDROP, ... We cannot allo...

7.3CVSS5.4AI score0.00173EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/15 6:22 a.m.7 views

UBUNTU-CVE-2026-72465

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The outnorqst exit in rpcrdmareplyhandler branches away before the credit clamp, so a reply that matches no pending request reaches outpost carrying the raw credit value...

7.5CVSS5.5AI score0.00647EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/15 6:22 a.m.9 views

UBUNTU-CVE-2026-74412

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix wrong pcigetdrvdata type in AER handlers rtw88 stores an ieee80211hw pointer via pcisetdrvdata at probe time, but ioerrordetected and ioresume retrieve it as a netdevice pointer. This causes...

8.8CVSS5.3AI score0.0024EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/15 6:22 a.m.10 views

CVE-2026-72314

In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulatorlocktwo should test for EDEADLK not EDEADLOCK Compare against -EDEADLK, which is what wwmutexlock actually returns and what every other deadlock check in this file already uses. Function regulatorlocktwo...

7.8CVSS5.6AI score0.00176EPSS
SaveExploits0References10
Rows per page
Query Builder