Lucene search
+L

4246 matches found

OSV
OSV
added 2026/08/18 4:17 p.m.6 views

DEBIAN-CVE-2026-15806

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.5AI score0.00407EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:50 p.m.30 views

CVE-2026-15806

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.4AI score0.00407EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/18 3:50 p.m.11 views

EUVD-2026-61013

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.4AI score0.00407EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/08/18 3:50 p.m.10 views

CVE-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.4AI score0.00407EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/08/18 3:50 p.m.8 views

CVE-2026-15806

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.5AI score0.00407EPSS
SaveExploits0
CVE
CVE
added 2026/08/18 3:50 p.m.100 views

CVE-2026-15806

In Python's urllib.request, HTTPPasswordMgr ignored URL scheme when matching stored credentials, allowing HTTPS credentials to be sent over HTTP if an attacker redirected or downgraded the client, exposing them in cleartext. The fix scopes credential matching by scheme while preserving bare-autho...

6CVSS5.4AI score0.00407EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/08/18 3:31 p.m.6 views

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

8.8CVSS7.5AI score0.0034EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/18 2:16 p.m.9 views

AZL-96870 CVE-2026-17084 affecting package python3 3.12.14-1

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 the "idna" codec and the intable...

6CVSS5.9AI score0.00507EPSS
SaveExploits0References1
Anthropic
Anthropic
added 2026/08/18 2:12 p.m.8 views

ANT-2026-96NHD13X · supabase/auth · auth-bypass

auth-bypass low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-96NHD13X: Factor-type string mismatch prevents session AAL downgrade In supabase/auth, DowngradeSessionsToAAL...

5.9AI score
SaveExploits0
Anthropic
Anthropic
added 2026/08/18 2:12 p.m.7 views

ANT-2026-BVDWY3J9 · supabase/auth · open-redirect

open-redirect medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-BVDWY3J9: Redirect allow-list ignores URL scheme and port In supabase/auth, IsRedirectURLValid...

6AI score
SaveExploits0
Anthropic
Anthropic
added 2026/08/18 2:11 p.m.8 views

ANT-2026-Y9HESEM8 · supabase/supabase · auth-bypass

auth-bypass medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-Y9HESEM8: AI data-sharing opt-in bypassed by mismatched org and project In...

6AI score
SaveExploits0References1
OSV
OSV
added 2026/08/18 1:57 p.m.10 views

PSF-2026-37

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 the "idna" codec and the intable...

6CVSS5.4AI score0.00507EPSS
SaveExploits0References9
Anthropic
Anthropic
added 2026/08/18 12:36 a.m.15 views

ANT-2026-CM0TCREP · torvalds/linux · Use-After-Free

use-after-free high CVE-2026-43074 Severity Claude high · Security research firm - · Maintainer high REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-CM0TCREP: UAF in epgetupwardsdepthproc giving unprivileged LPE During epollctlA, EPOLLCTLADD, B, the nesting-depth check...

7.8CVSS7AI score0.00482EPSS
SaveExploits3References1
SUSE CVE
SUSE CVE
added 2026/08/18 12:19 a.m.8 views

SUSE CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

4.4CVSS5.6AI score0.00239EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.16 views

PT-2026-77168

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description The HTTPPasswordMgr class in the urllib.request module, including its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, fails to consider the URL scheme when matchin...

6CVSS5.4AI score0.00407EPSS
SaveExploits0References28
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-74412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: fix wrong pcigetdrvdata type in AER handlers rtw88 stores an ieee80211hw pointer via pcisetdrvdata at probe time, but ioerrordetected and ioresume...

8.8CVSS7.3AI score0.0024EPSS
SaveExploits0References3
Anthropic
Anthropic
added 2026/08/17 9:15 p.m.12 views

ANT-2026-0BETG8WD · poppler · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-0BETG8WD: Heap-buffer-overflow in...

6.1AI score
SaveExploits0
OSV
OSV
added 2026/08/17 6:03 p.m.49 views

RLSA-2026:55439 Important: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication CVE-2026-1965 curl: curl:...

8.1CVSS6.2AI score0.00454EPSS
SaveExploits3References6
Rockylinux
Rockylinux
added 2026/08/17 6:03 p.m.57 views

curl security update

An update is available for curl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...

8.1CVSS6.2AI score0.00454EPSS
SaveExploits3
RedHat Linux
RedHat Linux
added 2026/08/17 6:40 a.m.14 views

Important: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.1CVSS6.1AI score0.00454EPSS
SaveExploits3References5
Rows per page
Query Builder