Lucene search
+L

37245 matches found

EUVD
EUVD
added 2026/08/10 7:42 a.m.14 views

EUVD-2026-55097

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

5.1CVSS5.2AI score0.00113EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/10 7:41 a.m.12 views

EUVD-2026-55096

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

5.1CVSS5.2AI score0.00105EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/10 7:40 a.m.11 views

CVE-2026-21062

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data...

4.8CVSS5.2AI score0.00094EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/10 7:16 a.m.19 views

CVE-2026-14293

The Autopay WordPress plugin before 5.0.1 does not perform any capability or nonce check before saving a styling option from a public request, and does not escape that value when it is later output on the checkout page, allowing unauthenticated attackers to store JavaScript that executes in the...

8.8CVSS0.00276EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-71391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared- coordinate index boundary check in sfntvarysimpleglyph an...

5.3CVSS5.5AI score0.00327EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/09 6:17 p.m.9 views

CVE-2026-70395

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up. When managerelationship is used with onlookup: :relate on a belongsto...

2.1CVSS5.3AI score0.00138EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/08/09 5:49 p.m.10 views

CVE-2026-15534

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in Sregmatch. The regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject...

5.7CVSS5.5AI score0.00167EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/09 8:03 a.m.9 views

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

...

7.3CVSS5.2AI score0.00135EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/09 8:03 a.m.10 views

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

...

6.5CVSS5.2AI score0.0033EPSS
SaveExploits1
NVD
NVD
added 2026/08/09 6:19 a.m.16 views

CVE-2026-18465

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

6.5CVSS0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/09 6:00 a.m.44 views

CVE-2026-18464 WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

0.003EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/09 6:00 a.m.58 views

CVE-2026-18464

CVE-2026-18464 affects the WP MAPS PRO WordPress plugin before version 6.1.3. Affected: an AJAX action does not perform a capability check and is accessible to unauthenticated users, allowing them to trigger an operation that can recurse indefinitely, exhausting server resources and causing a Den...

7.5CVSS5.3AI score0.003EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/08 12:00 a.m.17 views

EulerOS 2.0 SP11 : bzip2 (EulerOS-SA-2026-3060)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

4.8CVSS5.6AI score0.00126EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/08 12:00 a.m.16 views

Debian dla-4723 : linux-config-6.1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4723 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4723-1 [email protected]...

9.8CVSS7.3AI score0.00714EPSS
SaveExploits13References378
CVE
CVE
added 2026/08/07 10:43 p.m.115 views

CVE-2026-47127

Summary: Ghostfolio prior to 3.4.0 allowed any authenticated user to self-grant a 1-year Premium subscription via the Stripe checkout success callback at GET /api/v1/subscription/stripe/callback?checkoutSessionId=, which unconditionally assigns the session’s client_reference_id without checking s...

6.5CVSS5.4AI score0.00295EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/07 10:32 p.m.93 views

CVE-2026-52878

CVE-2026-52878 affects Klever-Go (versions 1.7.14–1.7.17). A nil RawData sub-message in protobuf Transaction triggers a nil-pointer panic when txVersionChecker.CheckTxVersion dereferences tx.RawData.Version without a nil check, causing a crash in the libp2p pubsub/the node process. The crash prop...

7.5CVSS7.7AI score0.00337EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/07 8:40 p.m.27 views

Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)

Summary IBM® Db2® could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Vulnerability Details CVEID:CVE-2026-18097 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain...

5.5CVSS5.3AI score0.00109EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/07 8:37 p.m.22 views

Security Bulletin: IBM® Db2® is vulnerable to privilege escalation with a specially crafted query (CVE-2026-10543)

Summary IBM® Db2® is vulnerable to privilege escalation with a specially crafted query. Vulnerability Details CVEID:CVE-2026-10543 DESCRIPTION: IBM Db2 is vulnerable to privilege escalation with a specially crafted query. CWE:CWE-285: Improper Authorization CVSS Source: IBM CVSS Base score: 8.2...

9.8CVSS5.3AI score0.00275EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/07 7:18 p.m.21 views

CVE-2026-66000

Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, Document Follow notification generation does not re-evaluate the recipient's current document permissions, allowing users whose access was revoked or reduced to continue receiving document data by email. This issue i...

2.3CVSS0.00259EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/08/07 5:08 p.m.10 views

SUSE CVE-2026-18508

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...

4.4CVSS5.3AI score0.00141EPSS
SaveExploits0References3
Rows per page
Query Builder