Lucene search
+L

56546 matches found

OSV
OSV
added 2026/07/07 3:34 p.m.14 views

MAL-2026-6933 Malicious code in hook-augmenting-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbb17d535ecc8b30b2ab54a487691ec2e427f9dbc3c0e20acad414bb25f3203 Analysis of this package version produced no static or behavioral findings indicating installer-side harm. No exfiltration, install-time code fetch,...

6.1AI score
SaveExploits0References2
OSV
OSV
added 2026/07/07 3:26 p.m.12 views

GO-2026-5891 Calico Inserts Sensitive Information into Log File in github.com/projectcalico/calico

Calico Inserts Sensitive Information into Log File in github.com/projectcalico/calico. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanner...

6.5CVSS5.9AI score0.00323EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/07 3:26 p.m.27 views

GO-2026-5821 Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check in github.com/nezhahq/nezha

Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check in github.com/nezhahq/nezha. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If thi...

5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/07 3:9 p.m.10 views

CVE-2026-56811

Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix Phoenix.Socket module allows an unauthenticated attacker to cause a denial of service against any endpoint that mounts a Phoenix socket with a reachable channel transport WebSocket or LongPoll. This...

8.7CVSS5.9AI score0.0042EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2026/07/07 2:34 p.m.13 views

PYSEC-2026-1591 LoLLMS Code Injection vulnerability

A remote code execution vulnerability exists in the Calculate function of parisneo/lollms version 9.8. The vulnerability arises from the use of Python's eval function to evaluate mathematical expressions within a Python sandbox that disables builtins and only allows functions from the math module...

8.4CVSS6.8AI score0.00435EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 2:34 p.m.6 views

PYSEC-2026-1121 ansible-core Incorrect Authorization vulnerability

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.8AI score0.00258EPSS
SaveExploits0References16
OSV
OSV
added 2026/07/07 2:34 p.m.7 views

PYSEC-2026-2074 zipp Denial of Service vulnerability

A Denial of Service DoS vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the...

6.9CVSS6.8AI score0.00236EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 1:43 p.m.9 views

JLSEC-2026-657 Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions

Summary When Deno was run in BYONM mode nodeModulesDir: "manual", the module resolver did not validate that a package's resolved entrypoint stayed within its nodemodules// directory. A malicious package.json whose main field contained .. segments was able to resolve to an arbitrary path on disk,...

5.5CVSS6.2AI score0.00171EPSS
SaveExploits1References2
NVD
NVD
added 2026/07/07 12:16 p.m.21 views

CVE-2011-10043

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary...

9.8CVSS0.00447EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/07 12:16 p.m.6 views

UBUNTU-CVE-2011-10043

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary...

9.8CVSS6.3AI score0.00447EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/07 12:14 p.m.13 views

Malicious code in zwkopt15 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSV
OSV
added 2026/07/07 12:5 p.m.11 views

RLSA-2026:34109 Important: httpd security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...

7.7CVSS6AI score0.01118EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/07/07 11:46 a.m.11 views

CVE-2011-10043

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary...

9.8CVSS6.1AI score0.00447EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/07 11:46 a.m.37 views

CVE-2011-10043 Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary...

0.00447EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/07 11:46 a.m.32 views

CVE-2011-10043

Technical details about CVE-2011-10043 are not publicly available in the provided documents. Monitor for updates from official advisories; no confirmed exploit vectors, affected products, or remediation details are included here.

9.8CVSS6.1AI score0.00447EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/07 11:46 a.m.11 views

EUVD-2011-5272

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary...

9.8CVSS6.1AI score0.00447EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/07 11:46 a.m.8 views

CVE-2011-10043

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary...

9.8CVSS6.1AI score0.00447EPSS
SaveExploits0
OSV
OSV
added 2026/07/07 11:45 a.m.6 views

PYSEC-2026-1125 Ansible may expose private key

A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2key module prints out the private key directly to the standard output. This flaw allows an attacker to fetch those keys from the log files, compromising the system's confidentiality, integrity, and availabili...

6.5CVSS7AI score0.00239EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/07 10:17 a.m.8 views

PYSEC-2026-805 Terms and Conditions Module vulnerable to Open Redirect

A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.10 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading...

6.1CVSS5AI score0.00453EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/07/07 9:54 a.m.8 views

perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in send_file()

A flaw was found in HTTP::Daemon, a Perl module used for creating HTTP servers. A remote attacker can exploit this vulnerability by providing specially crafted input to the sendfile function, leading to OS command injection. This allows the attacker to execute arbitrary commands on the system wit...

9.1CVSS6.2AI score0.01398EPSS
SaveExploits0References7
Rows per page
Query Builder