Lucene search
+L

979293 matches found

Oracle linux
Oracle linux
added 2026/07/17 12:0 a.m.10 views

perl-HTTP-Daemon security update

6.16-7.1 - Fix CVE-2026-8450: sendfile shell-magic via 2-arg open - Resolves: RHEL-184826...

9.1CVSS5.3AI score0.01398EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/17 12:0 a.m.9 views

RabbitMQ 4.2.x < 4.2.6 OAuth Token Expiry Consumer Bypass

The version of RabbitMQ installed on the remote host is 4.2.x prior to 4.2.6. It is, therefore, affected by an authorization bypass vulnerability: - RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.updatesecret refresh to reduced...

6.5CVSS5.4AI score0.00352EPSS
SaveExploits1References2
CNVD
CNVD
added 2026/07/17 12:0 a.m.11 views

Microsoft ASP.NET Core privilege escalation vulnerability (CNVD-2026-28484)

Microsoft ASP.NET Core is a cross-platform open-source framework developed by Microsoft. This framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. There is a permission escalation vulnerability in Microsoft ASP.NET Core, which allows...

8.8CVSS5.9AI score0.00736EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.22 views

PT-2026-60776

Name of the Vulnerable Software and Affected Versions SigNoz versions prior to 0.133.1 Description An open redirect flaw exists in the SSO authentication flow for instances configured with Google OAuth, SAML, or OIDC. Unauthenticated attackers can exploit this by calling the sessions context...

8.1CVSS5.9AI score0.00172EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2026/07/17 12:0 a.m.188 views

The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...

8.1CVSS6.3AI score0.03596EPSS
SaveExploits5References7Affected Software8
NVD
NVD
added 2026/07/16 8:16 p.m.20 views

CVE-2026-54728

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. Prior to BunkerWeb 1.6.12 and BunkerWeb PRO 0.57, authenticated Host header handling in the BunkerWeb UI and API improperly validated and neutralized user-controlled input in a configuration-dependent path, allowing a...

6.1CVSS0.00237EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/16 6:16 p.m.12 views

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

5.7CVSS0.00216EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/16 5:56 p.m.7 views

SUSE CVE-2026-56434

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...

8.3CVSS5.5AI score0.0045EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2026/07/16 5:44 p.m.13 views

USN-8557-1: Authlib vulnerabilities

Jay Neiva and Mauro Carrillo discovered that Authlib did not properly validate cryptographic keys embedded in JWT headers. An attacker could possibly use this issue to forge trusted tokens, resulting in authentication and authorization bypass. CVE-2026-27962 Jay Neiva and Mauro Carrillo discovere...

9.1CVSS6.3AI score0.00548EPSS
SaveExploits4
ATTACKERKB
ATTACKERKB
added 2026/07/16 5:3 p.m.10 views

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

5.7CVSS6.1AI score0.00216EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/07/16 5:3 p.m.23 views

EUVD-2026-44988

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

5.7CVSS6.1AI score0.00216EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/16 5:3 p.m.10 views

CVE-2026-15737 Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

5.7CVSS6.1AI score
SaveExploits0References5
Snyk
Snyk
added 2026/07/16 4:36 p.m.7 views

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via CodeMethodWriter in CodeMethodWriter.cs and RubyConventionService in RubyConventionService.cs. An attacker can inject arbitrary Ruby code into generated client classes by supplying an OpenAPI specification...

9.2CVSS6AI score0.01471EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/16 4:36 p.m.7 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the LanguageInformation handling in Kiota.Builder.Models.LanguageInformation and GenerationConfiguration when it reads x-ms-kiota-info clientClassName and clientNamespaceName values. An attacker can overwrite...

9.8CVSS6.4AI score0.01355EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/16 4:19 p.m.18 views

CVE-2026-59865

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, kiota info read x-ms-kiota-info.languagesInformation..dependencyInstallCommand plus dependency name and version values from an OpenAPI description and presented the spec-supplied command as Kiota's recommended install command,...

9.3CVSS0.0319EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/16 3:56 p.m.6 views

CVE-2026-63085 Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence

Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such...

8.7CVSS6.1AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/16 3:56 p.m.38 views

CVE-2026-63085 Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence

Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such...

8.8CVSS0.00371EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 3:56 p.m.15 views

CVE-2026-63085

Axelor Open Platform 8.x prior to 8.2.2 contains an authorization bypass vulnerability. Authenticated non-admins can escalate privileges by exploiting unenforced field restrictions on nested relational save operations, enabling modification of sensitive User fields (roles, groups) through a relat...

8.8CVSS6.1AI score0.00371EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/16 3:42 p.m.9 views

CVE-2026-45695

Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to 0.23.0, Kopia's HTTP server started with --without-password accepts unauthenticated requests to /api/v1/repo/exists a...

9.8CVSS6.1AI score0.00348EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/07/16 3:42 p.m.10 views

EUVD-2026-44948

Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to 0.23.0, Kopia's HTTP server started with --without-password accepts unauthenticated requests to /api/v1/repo/exists a...

9.8CVSS6.1AI score0.00348EPSS
SaveExploits0References4
Rows per page
Query Builder