Lucene search
K

450 matches found

Circl
Circl
added 2026/05/27 5:17 a.m.10 views

CVE-2026-8450

creationtimestamp| type| source ---|---|--- 2026-05-27 05:17:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqxmuwt222 2026-05-27 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116645011565190190 2026-05-27 06:00:29+00:00| seen|...

9.1CVSS5.8AI score0.0106EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/11 9:31 p.m.6 views

EUVD-2026-29300

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory...

5.8AI score0.00362EPSS
Exploits0References9
Cvelist
Cvelist
added 2026/05/11 8:7 p.m.38 views

CVE-2026-28996

A race condition was addressed with additional validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to access sensitive user data...

0.00112EPSS
Exploits0References7
Circl
Circl
added 2026/04/11 1:30 a.m.1 views

CVE-2026-4149

creationtimestamp| type| source ---|---|--- 2026-04-11 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116383483774809251 2026-04-11 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mj6osz6g672t 2026-04-11 03:06:41+00:00| seen|...

10CVSS8.7AI score0.00995EPSS
Exploits0References6
Circl
Circl
added 2026/04/10 2:50 a.m.2 views

CVE-2026-5994

creationtimestamp| type| source ---|---|--- 2026-04-10 02:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4ct7u4dc2o 2026-04-10 03:17:30+00:00| published-proof-of-concept| Telegram/Fvik4eX2xz-nzJuB7IaHT1kkv6IwgWipFYk1oHJ2HiAA0EI 2026-04-10 05:01:00+00:00| seen|...

10CVSS7.3AI score0.01803EPSS
Exploits0References4
Circl
Circl
added 2026/04/10 1:30 a.m.0 views

CVE-2026-5995

creationtimestamp| type| source ---|---|--- 2026-04-10 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116377821414965974 2026-04-10 01:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mj46e3334v2r 2026-04-10 02:55:37+00:00| seen|...

10CVSS7.3AI score0.01823EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/25 12:32 a.m.6 views

CVE-2026-28876

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to access sensitive user da...

5.8AI score0.00468EPSS
Exploits0References7
NVD
NVD
added 2026/03/05 4:16 p.m.5 views

CVE-2026-30792

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Strategy sync, HTTP API client, config options engine modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...

9.1CVSS0.00265EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/05 3:27 p.m.4 views

CVE-2026-30795 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop modules allows Sniffing Attacks. This vulnerability is associated with program files src/hbbshttp/sync.Rs and program routine...

8.7CVSS5.9AI score0.00271EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/05 2:47 p.m.37 views

CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS0.0024EPSS
Exploits1References3
CNVD
CNVD
added 2026/02/11 12:0 a.m.3 views

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14675)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from improper neutralization of...

6.5CVSS6.1AI score0.00242EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:17 a.m.6 views

CVE-2019-2320

Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053...

10CVSS7.2AI score0.00907EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:0 a.m.4 views

CVE-2020-7224

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load...

9.8CVSS6.7AI score0.02251EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.4 views

KDE Connect 安全漏洞

KDE Connect is a software from the KDE community that connects cell phones and computers. A security vulnerability exists in versions of KDE Connect prior to 2025-11-28 that stems from an unassociated device ID and could affect KDE Connect clients on multiple platforms...

4.7CVSS6.3AI score0.00176EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/11/22 10:31 p.m.5 views

CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

2.7CVSS6.8AI score0.0015EPSS
Exploits0References1
OSV
OSV
added 2025/11/21 11:15 p.m.3 views

UBUNTU-CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

2.7CVSS5.8AI score0.0015EPSS
Exploits0References4
CNVD
CNVD
added 2025/11/18 12:0 a.m.4 views

WordPress WP Content Pilot plugin missing license vulnerability

WordPress WP Content Pilot plugin is an automated content capture plugin designed for WordPress that supports grabbing content from multiple platforms e.g. Amazon, Pinterest, Instagram, etc. and posting it to the site automatically. A lack of authorization vulnerability exists in the WordPress WP...

5.4CVSS6.8AI score0.00171EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/11/04 1:15 a.m.3 views

CVE-2025-43433

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption...

8.8CVSS6.6AI score0.00869EPSS
Exploits0
Cvelist
Cvelist
added 2025/10/27 8:37 p.m.6 views

CVE-2025-62725 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...

8.9CVSS0.13663EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-7538

Malware in sbrugna...

10CVSS6AI score0.0601EPSS
Exploits0References8
Rows per page
Query Builder