Lucene search
+L

56417 matches found

NVD
NVD
added 2026/07/20 7:17 p.m.11 views

CVE-2026-64194

Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call stack at least with...

7.5CVSS0.00433EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/20 7:6 p.m.7 views

MGASA-2026-0279 Updated nginx packages fix security vulnerabilities

ngxhttpproxyv2module and ngxhttpgrpcmodule vulnerability. CVE-2026-42055 ngxhttpcharsetmodule vulnerability. CVE-2026-48142...

9.2CVSS5.5AI score0.04044EPSS
SaveExploits2References6
Mageia
Mageia
added 2026/07/20 7:6 p.m.8 views

Updated nginx packages fix security vulnerabilities

ngxhttpproxyv2module and ngxhttpgrpcmodule vulnerability. CVE-2026-42055 ngxhttpcharsetmodule vulnerability. CVE-2026-48142...

9.2CVSS5.5AI score0.04044EPSS
SaveExploits2References5
Mageia
Mageia
added 2026/07/20 7:6 p.m.5 views

Updated perl-JavaScript-Minifier-XS package fixes security vulnerabilities

The updated package fixes security vulnerabilities: JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. CVE-2026-56017 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call...

7.5CVSS5.3AI score0.00459EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/20 5:54 p.m.11 views

EUVD-2026-46051

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option RFC 8914 by tokenising the raw bytes and passing the result to Perl's eval. There is some...

5.7AI score0.00828EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/07/20 4:47 p.m.7 views

CVE-2026-63803

A flaw was found in the Linux kernel's hdlcppp module. This use-after-free vulnerability occurs because the Point-to-Point Protocol PPP control timers are not properly synchronized before the associated memory is freed. An attacker could potentially exploit this by triggering a race condition,...

7.8CVSS5.7AI score0.00133EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/07/20 4:27 p.m.8 views

CVE-2026-64192

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...

5.2AI score0.00162EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/20 4:27 p.m.9 views

EUVD-2026-46012

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...

5.3AI score0.00162EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/20 4:27 p.m.5 views

CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...

5.3AI score
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/20 4:17 p.m.9 views

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

7.5CVSS7.2AI score0.00591EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/20 4:9 p.m.33 views

CVE-2026-32820 dataCycle Public Markdown Path Traversal Via /docs/*path

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the documentation and static markdown renderer accepts...

7.5CVSS0.00603EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/20 4:0 p.m.20 views

Malicious code in ml-core-airflow-auth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a543a55b463967fa7f6b3c1462ecb38735072a4f4f47bf5f9b732e089a64b8a The package advertises itself as an 'auth token handler' but its public API src/mlcoreairflowauth/init.py exposes only a trivial in-memory TokenStore...

6AI score
SaveExploits0References7
EUVD
EUVD
added 2026/07/20 3:34 p.m.13 views

EUVD-2026-45981

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

6.1CVSS5.5AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/20 3:22 p.m.7 views

CVE-2026-63794

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM module, specifically within the Secure Virtual Machine SVM component. The sevdbgcrypt function, when handling encryption, incorrectly calculates the transfer length, leading to a page overflow. This memory corruption can resu...

7.8CVSS5.5AI score0.00142EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/20 3:16 p.m.9 views

CVE-2026-63090

ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the modsftp module that allows authenticated low-privilege attackers to achieve arbitrary code execution by sending crafted SFTP packet fragments exceeding the 16 KB reassembly buffer in the fxp.c component...

8.8CVSS0.00455EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/20 3:16 p.m.7 views

CVE-2026-45270

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the Pages backend module registers the htmlpurify validation rule on language-keyed page content but persists the raw, un-purified POST value into the database. The public renderer for pages Home::index ...

8.7CVSS0.00207EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/20 2:22 p.m.13 views

EUVD-2026-45961

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...

7.1CVSS5.7AI score0.0029EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/20 2:12 p.m.35 views

CVE-2026-45270 CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the Pages backend module registers the htmlpurify validation rule on language-keyed page content but persists the raw, un-purified POST value into the database. The public renderer for pages Home::index ...

8.7CVSS0.00207EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/20 2:12 p.m.8 views

CVE-2026-45270 CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the Pages backend module registers the htmlpurify validation rule on language-keyed page content but persists the raw, un-purified POST value into the database. The public renderer for pages Home::index ...

8.7CVSS5AI score
SaveExploits0References4
CVE
CVE
added 2026/07/20 2:12 p.m.27 views

CVE-2026-45270

CI4MS (ci4-cms-erp/ci4ms) has a stored-XSS vulnerability in its Pages module due to html_purify mutating the input by reference, while the DB stores raw content and the public renderer outputs it without escaping. The issue affects language-keyed page content; administrators and visitors can exec...

8.7CVSS5AI score0.00207EPSS
SaveExploits0References2
Rows per page
Query Builder