Lucene search
K

4549 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/15 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-6307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS6.1AI score0.00365EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/15 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-6306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF...

8.8CVSS6.5AI score0.00336EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/04/14 11:30 p.m.1 views

SUSE CVE-2026-6192

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS5.3AI score0.00112EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-32178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network. CVE-2026-32178 Note that Nessus relies o...

7.5CVSS6.3AI score0.0111EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-33116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

7.5CVSS6.3AI score0.01088EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-32203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. CVE-2026-32203 Note that Nessus relies on...

7.5CVSS6.5AI score0.00787EPSS
Exploits0References2
Amazon
Amazon
added 2026/04/14 12:0 a.m.7 views

Important: squid

Issue Overview: Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable a...

9.2CVSS5.8AI score0.02738EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-34002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map handling. An attacker with...

9.1CVSS5.5AI score0.00397EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/13 6:30 p.m.1 views

EUVD-2026-22030

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS5.4AI score0.00112EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/04/13 4:45 p.m.21 views

CVE-2026-6192 uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS0.00112EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2026/04/13 4:45 p.m.6 views

CVE-2026-6192

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

4.8CVSS4.1AI score0.00112EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.1 views

PT-2026-32447

Name of the Vulnerable Software and Affected Versions uclouvain openjpeg versions prior to 2.5.5 Description An integer overflow occurs in the opj pi initialise encode function within the src/lib/openjp2/pi.c library. This issue requires local access to be exploited. Recommendations Install the...

4.8CVSS5.8AI score0.00112EPSS
Exploits0References28
Tenable Nessus
Tenable Nessus
added 2026/04/13 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-33456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to...

7.6CVSS5.9AI score0.00196EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/04/11 9:26 a.m.1 views

SUSE CVE-2026-2581

This is an uncontrolled resource consumption vulnerability CWE-400 that can lead to Denial of Service DoS. In vulnerable Undici versions, when interceptors.deduplicate is enabled, response data for deduplicated requests could be accumulated in memory for downstream handlers. An attacker-controlle...

5.9CVSS7AI score0.00566EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/11 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-4152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

7.8CVSS7.6AI score0.00606EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-5392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length...

5.4CVSS5.5AI score0.00159EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-34734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a maliciou...

7.8CVSS5.8AI score0.00175EPSS
Exploits1References3
CBLMariner
CBLMariner
added 2026/04/09 10:23 p.m.2 views

CVE-2026-33216 affecting package telegraf for versions less than 1.31.0-18

CVE-2026-33216 affecting package telegraf for versions less than 1.31.0-18. A patched version of the package is available...

8.6CVSS6.4AI score0.00273EPSS
Exploits0
Cvelist
Cvelist
added 2026/04/09 7:0 p.m.19 views

CVE-2026-5972 FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection

A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.runcommand in the library metagpt/tools/libs/terminal.py. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed ...

7.5CVSS0.02328EPSS
Exploits1References6
VulnCheck KEV
VulnCheck KEV
added 2026/04/09 12:0 a.m.2 views

VulnCheck KEV: CVE-2026-21445

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories...

9.3CVSS5.8AI score0.2126EPSS
In wildExploits1References3
Rows per page
Query Builder