Lucene search
+L

138445 matches found

GithubExploit
GithubExploit
added 2026/07/15 9:58 a.m.72 views

Exploit for CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher ≤ 4.5.1 Unauthentic...

9.8CVSS6.2AI score0.02959EPSS
SaveExploits5
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 9:57 a.m.17 views

Security Bulletin: Vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2026-50645, CVE-2026-9322, CVE-2026-9171, CVE-2026-11712, CVE-2026-11595, CVE-2026-11708, CVE-2026-8408)

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about multiple vulnerabilities affecting WebSphere Application Server have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in...

9.3CVSS6.1AI score0.00663EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 9:56 a.m.8 views

Security Bulletin: Multiple vulnerabilities in python affects AIX/VIOS.

Summary Integer overflow and use after may cause memory corruption and denial of service. Vulnerability Details CVEID:CVE-2026-56403 DESCRIPTION: libexpat before 2.8.2 has an integer overflow in storeAtts. CWE:CWE-190: Integer Overflow or Wraparound CVSS Source: NVD CVSS Base score: 6.9 CVSS...

6.9CVSS6.1AI score0.00138EPSS
SaveExploits1Affected Software2
SUSE Linux
SUSE Linux
added 2026/07/15 9:53 a.m.8 views

Security update for python-paramiko

This update for python-paramiko fixes the following issues: CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

6.3CVSS6.3AI score0.00114EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/15 9:53 a.m.4 views

SUSE-SU-2026:3031-1 Security update for python-paramiko

This update for python-paramiko fixes the following issues: - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...

3.4CVSS6.1AI score0.00114EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 9:53 a.m.10 views

Security Bulletin: Multiple vulnerabilities in Python affects AIX/VIOS.

Summary Integer overflow and use after may cause memory corruption and denial of service. Vulnerability Details CVEID:CVE-2026-56403 DESCRIPTION: libexpat before 2.8.2 has an integer overflow in storeAtts. CWE:CWE-190: Integer Overflow or Wraparound CVSS Source: NVD CVSS Base score: 6.9 CVSS...

6.9CVSS6.1AI score0.00139EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 9:49 a.m.8 views

Security Bulletin: Vulnerabilities in python (CVE-2026-56131, CVE-2026-56132) affects AIX/VIOS.

Summary Use after free and heap buffer overflow may casue denial of service. Vulnerability Details CVEID:CVE-2026-56131 DESCRIPTION: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can...

6.9CVSS6.2AI score0.00135EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 9:45 a.m.9 views

Security Bulletin: Vulnerability in python (CVE-2026-50219) affects AIX/VIOS.

Summary Use-after-free can casue denial of service. Vulnerability Details CVEID:CVE-2026-50219 DESCRIPTION: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLGetBuffer, XMLParse, XMLParseBuffer, XMLParserFree, or XMLParserReset from within handlers in cases of a policy...

5.9CVSS6.1AI score0.00288EPSS
SaveExploits0Affected Software2
F5 Networks
F5 Networks
added 2026/07/15 8:29 a.m.22 views

K000162270: Spring Framework vulnerability CVE-2026-40997

Security Advisory Description Several Spring WS integration paths with Spring Security could surface detailed account state for example locked or disabled user semantics to remote SOAP clients through exception messages or callback outcomes, instead of failing with generic authentication errors...

5.3CVSS6.1AI score0.00366EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2026/07/15 8:26 a.m.15 views

K000162268: PHP vulnerabilities CVE-2025-14179 and CVE-2026-7261

Security Advisory Description CVE-2025-14179 In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queries. During token-by-token query construction, a string token containing a NU...

9.8CVSS7AI score0.00439EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2026/07/15 8:23 a.m.15 views

K000162269: Apache HTTP Server Vulnerabilities CVE-2026-42535 and CVE-2026-42536

Security Advisory Description CVE-2026-42535 A path handling issue in moddavfs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which...

9.1CVSS6.1AI score0.00986EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/07/15 8:10 a.m.61 views

vulnerability-intel-pipeline

Vulnerability Intelligence Pipeline A real ETL pipeline again...

6.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 7:57 a.m.8 views

Security Bulletin: Vulnerability in python (CVE-2026-41080) affects AIX/VIOS.

Summary Denial of service through hash flooding via a crafted XML document. Vulnerability Details CVEID:CVE-2026-41080 DESCRIPTION: libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. CWE:CWE-331: Insufficient Entropy CVSS Source:...

7.5CVSS6.1AI score0.00398EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 7:52 a.m.8 views

Security Bulletin: Vulnerability in python (CVE-2026-45186) affects AIX/VIOS.

Summary Denial of service via moderately sized crafted XML input. Vulnerability Details CVEID:CVE-2026-45186 DESCRIPTION: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. CWE:CWE-407:...

7.5CVSS6.1AI score0.00443EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 6:09 a.m.8 views

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to urllib3

Summary urllib3 is used by IBM Cloud Pak for Data System 1.0 to provide HTTP client functionality for Python applications. Multiple vulnerabilities affect urllib3. CVE-2026-44431 involves exposure of sensitive information where cross-origin redirects followed through the low-level ProxyManager AP...

8.9CVSS7AI score0.0068EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 6:08 a.m.10 views

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to PyJWT

Summary PyJWT is used by IBM Cloud Pak for Data System 1.0 as a Python library for encoding and decoding JSON Web Tokens JWT for authentication and authorization. Multiple vulnerabilities affect PyJWT. CVE-2026-48522 involves a Server-Side Request Forgery SSRF vulnerability where PyJWKClient pass...

5.4CVSS6.2AI score0.0037EPSS
SaveExploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 6:07 a.m.8 views

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to pip

Summary pip is used by IBM Cloud Pak for Data System 1.0 as the Python package installer for managing and installing Python software packages. Multiple vulnerabilities affect pip. CVE-2026-1703 involves a path traversal vulnerability where files from a maliciously crafted wheel archive may be...

8CVSS6.2AI score0.0039EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 6:06 a.m.9 views

Security Bulletin: IBM Jazz Reporting Service is affected by Nesting-Based mXSS Vulnerability of DOMPurify

Summary DOMPurify is used internally by IBM Jazz Reporting Service CVE-2024-47875, CVE-2024-45801, CVE-2024-48910, CVE-2026-41239, CVE-2026-41240, CVE-2025-26791. Vulnerability Details CVEID:CVE-2024-47875 DESCRIPTION: DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML,...

10CVSS5.7AI score0.01151EPSS
SaveExploits6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/15 6:03 a.m.9 views

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by use of a broken cryptographic algorithm vulnerability due to Paramiko

Summary Paramiko is used by IBM Cloud Pak for Data System 1.0 as a Python implementation of the SSH protocol for secure remote connections and file transfers. CVE-2026-44405 affects Paramiko's RSA key handling in rsakey.py, where the SHA-1 algorithm is permitted for cryptographic operations despi...

3.4CVSS6.1AI score0.00114EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
added 2026/07/15 5:58 a.m.20 views

K000162267: Openfire vulnerability CVE-2023-32315

Security Advisory Description Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the...

8.6CVSS7AI score0.99999EPSS
SaveExploits15
Rows per page
Query Builder