Lucene search
+L

108722 matches found

RedhatCVE
RedhatCVE
added 2026/07/29 11:14 a.m.5 views

CVE-2026-64400

A flaw was found in the Linux kernel's ksmbd component. A vulnerability in the ksmbd component allows a remote authenticated attacker to bypass path restrictions. Specifically, a bug in the caseless retry logic during path resolution fails to properly handle directory traversal attempts. This...

8.6CVSS5.9AI score0.00357EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/07/29 10:23 a.m.46 views

Exploit for CVE-2026-52832

CVE-2026-52832-PoC-exploit-nuclei-dashboard Nuclio Dashboard...

6AI score
SaveExploits2
GithubExploit
GithubExploit
added 2026/07/29 10:23 a.m.42 views

Exploit for CVE-2026-52832

CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard...

6AI score
SaveExploits2
NVD
NVD
added 2026/07/29 10:16 a.m.8 views

CVE-2026-58177

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

9.8CVSS0.00547EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/29 9:40 a.m.7 views

CVE-2026-56390

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...

6.8CVSS5.9AI score0.00154EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/07/29 9:40 a.m.29 views

CVE-2026-56390 Arbitrary Output Location Change in GNU Bison

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...

4.6CVSS0.00133EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/29 9:40 a.m.15 views

CVE-2026-56390

GNU Bison is affected by CVE-2026-56390 through grammar-defined output directives (%output, %header), which can accept unrestricted file paths and override caller-supplied output options. When processing attacker-supplied grammar, this allows writing generated files to arbitrary writable location...

4.6CVSS5.9AI score0.00133EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/29 8:42 a.m.5 views

CVE-2026-58177 Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS5.4AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/29 8:42 a.m.5 views

CVE-2026-58177 Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS5.8AI score0.00547EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/29 8:42 a.m.8 views

CVE-2026-58177

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS5.8AI score0.00547EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/29 8:42 a.m.29 views

CVE-2026-58177 Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS0.00547EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/29 8:42 a.m.20 views

CVE-2026-58177

The CVE-2026-58177 entry describes memory-safety issues in the Apache Traffic Server Cripts framework, including out-of-bounds writes, path traversal, and use-after-free errors affecting 10.0.0–10.1.3. The issue is mitigated by upgrading to version 10.1.4, which fixes the vulnerability. The conne...

9.8CVSS5.8AI score0.00547EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/29 8:42 a.m.6 views

EUVD-2026-50222

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS5.8AI score0.00547EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/29 8:16 a.m.4 views

CVE-2026-18192

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.0038EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/29 8:10 a.m.2 views

SUSE-SU-2026:22978-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when sftp server:/path . is used with an attacker-controlled server bsc1271044. - CVE-2026-59996: scp: file placed in the parent directory of an intended target...

9.4CVSS5.5AI score0.00441EPSS
SaveExploits0References17
ATTACKERKB
ATTACKERKB
added 2026/07/29 6:40 a.m.8 views

CVE-2026-18192

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.0038EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/29 6:40 a.m.9 views

CVE-2026-18192

CVE-2026-18192 affects Vacron VIN-DS783E-E6 devices and concerns an Arbitrary File Read via Relative Path Traversal. Reported as an authenticated remote vulnerability with network access and low attack complexity; exploitation would enable reading arbitrary system files, exposing confidentiality ...

7.1CVSS6AI score0.0038EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/29 6:40 a.m.8 views

EUVD-2026-50164

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.0038EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/29 6:40 a.m.34 views

CVE-2026-18192 Vacron|IP Camera - Arbitrary File Read

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.0038EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/29 6:0 a.m.7 views

RLSA-2026:47011 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

7CVSS5.8AI score0.00395EPSS
SaveExploits0References2
Rows per page
Query Builder