Lucene search
+L

29520 matches found

OSV
OSV
added 2026/04/13 10:20 a.m.14 views

BIT-TOMCAT-2026-34500 Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled

CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116. Users are recommended to upgrade to version...

6.5CVSS5.8AI score0.00469EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/13 10:18 a.m.8 views

firefox: thunderbird: Sandbox escape in the Responsive Design Mode component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Responsive Design Mode component...

10CVSS7.2AI score0.00487EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/04/13 10:16 a.m.11 views

firefox: thunderbird: Sandbox escape in the Responsive Design Mode component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Responsive Design Mode component...

10CVSS7.2AI score0.00487EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/04/13 10:05 a.m.11 views

firefox: thunderbird: Sandbox escape in the Responsive Design Mode component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Responsive Design Mode component...

10CVSS7.2AI score0.00487EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/04/13 10:05 a.m.6 views

firefox: thunderbird: Sandbox escape in the Responsive Design Mode component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Responsive Design Mode component...

10CVSS7.2AI score0.00487EPSS
SaveExploits1References6
GithubExploit
GithubExploit
added 2026/04/13 8:46 a.m.283 views

Exploit for Deserialization of Untrusted Data in Wazuh

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE !Sev...

9.1CVSS6.4AI score0.0879EPSS
SaveExploits4
EUVD
EUVD
added 2026/04/13 6:30 a.m.9 views

EUVD-2026-21866

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

6.8CVSS5.8AI score0.00149EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/13 6:30 a.m.12 views

EUVD-2026-21864

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

7.8CVSS5.8AI score0.00104EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/13 6:30 a.m.14 views

EUVD-2026-21804

Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability...

5.6CVSS5.8AI score0.00088EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/13 6:16 a.m.20 views

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

6.8CVSS0.00149EPSS
SaveExploits1References1
NVD
NVD
added 2026/04/13 6:16 a.m.18 views

CVE-2026-21010

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

7.8CVSS0.00104EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/13 5:10 a.m.5 views

CVE-2026-21010

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

6.6CVSS5.8AI score0.00104EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/13 5:10 a.m.42 views

CVE-2026-21010

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

6.6CVSS0.00104EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/13 5:10 a.m.5 views

CVE-2026-21010

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions...

6.6CVSS5.8AI score0.00104EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/13 5:10 a.m.51 views

CVE-2026-21010

CVE-2026-21010 describes an improper input validation issue in Samsung Retail Mode prior to SMR Apr-2026 Release 1. The vulnerability allows a local attacker to trigger privileged functions, with confidentiality, integrity, and availability impact reported as high. Public details point to affecte...

7.8CVSS5.8AI score0.00104EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/13 5:04 a.m.49 views

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

5.4CVSS0.00149EPSS
SaveExploits1References1
CVE
CVE
added 2026/04/13 5:04 a.m.42 views

CVE-2026-21011

CVE-2026-21011 describes an incorrect privilege assignment in Bluetooth when in Maintenance mode, prior to the SMR Apr-2026 Release 1. This flaw could allow a physical attacker to bypass Extend Unlock. The reporting sources (NVD and CVE feeds) confirm the description and note a Samsung security u...

6.8CVSS5.8AI score0.00149EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/13 5:04 a.m.6 views

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

5.4CVSS5.8AI score0.00149EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/13 5:04 a.m.5 views

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

5.4CVSS5.8AI score0.00149EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/13 4:16 a.m.11 views

CVE-2026-34867

Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability...

5.6CVSS0.00088EPSS
SaveExploits0References2
Rows per page
Query Builder