Lucene search
K

9 matches found

NVD
NVD
added 2026/05/27 8:16 a.m.8 views

CVE-2026-41704

AgentClienthandlemethod lines 264-303 processes every NATS reply. It calls injectcompilelog line 273 on every response, which reads response'value''result''compilelogid' line 332-338 and passes it to downloadanddeleteblob. Separately, any response containing 'exception' goes through formatexcepti...

6.8CVSS0.00011EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.3 views

MiracleLinux 9 : openssl-3.0.1-41.el9 (AXSA:2022-3964:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3964:07 advisory. openssl: crehash script allows command injection CVE-2022-1292 openssl: Signer certificate verification returns inaccurate response when using...

10CVSS7AI score0.38894EPSS
Exploits6References6
RedhatCVE
RedhatCVE
added 2025/10/16 7:56 a.m.1 views

CVE-2025-58578

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...

3.8CVSS6.8AI score0.00076EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/06 6:47 a.m.1 views

CVE-2025-58578 Unlimited user creation by authorized users

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...

3.8CVSS6.5AI score0.00076EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/10/06 6:47 a.m.4 views

CVE-2025-58578 Unlimited user creation by authorized users

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...

3.8CVSS0.00076EPSS
Exploits0References6
RustSec
RustSec
added 2025/10/02 12:0 p.m.3 views

soundness issue and unmaintained

All functions under wrflib::byteextract are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter. wrflib is unmaintained...

7AI score
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/08 12:0 a.m.5 views

PT-2025-32393 · Unknown · Projectpier

Name of the Vulnerable Software and Affected Versions: Project Pier versions 0.8.8 and earlier Description: Project Pier is susceptible to an unauthenticated arbitrary file upload issue in the tools/upload file.php script. The upload process does not validate file types or require authentication,...

9.3CVSS7.3AI score0.81635EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 3:34 a.m.1 views

SUSE CVE-2022-1343

The function OCSPbasicverify verifies the signer certificate on an OCSP response. In the case where the non-default flag OCSPNOCHECKS is used then the response will be positive meaning a successful verification even in the case where the response signing certificate fails to verify. It is...

6.1CVSS6.6AI score0.00192EPSS
Exploits0References4
CNVD
CNVD
added 2015/09/20 12:0 a.m.1 views

Apple iOS Process Modification Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability in the ROOT process using the processorsettasks API that allows a local process to modify other processes without authorization checks...

7.2CVSS6.4AI score0.00067EPSS
Exploits0References1
Rows per page
Query Builder