Lucene search
+L

33270 matches found

EUVD
EUVD
added 11 hours ago7 views

EUVD-2026-60495

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination...

5.4AI score
SaveExploits0References3
EUVD
EUVD
added 11 hours ago5 views

EUVD-2026-60485

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash...

5.4AI score
SaveExploits0References4
CVE
CVE
added yesterday12 views

CVE-2026-64715

A use-after-free in Apple's WebKit memory management is fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may cause a process crash. No exploit details are provided in the documents.

5.4AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-64715

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash...

5.3AI score
SaveExploits0References4
Chainguard
Chainguard
added yesterday4 views

GHSA-V5X7-VHWF-5V44 vulnerabilities

Vulnerabilities for packages: firefox...

5.3AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-71858

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, macros loaded from an attacker-controlled shortcuts.xml bypass the HMAC validation applied to UserDefinedCommands and can invoke Scintilla actions and the internal Open in Default Viewer command in an elevated Notepad++...

5.4CVSS5.6AI score
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added yesterday17 views

CVE-2026-71980 Belledonne Communications bcg729 1.1.2 Out-of-Bounds Read via decodeSIDframe()

Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerability in the decodeSIDframe function in src/cng.c that allows unauthenticated network-adjacent attackers to trigger a heap read beyond buffer boundaries by sending a zero-length comfort-noise RTP payload. A...

8.7CVSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added yesterday7 views

Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection

Summary CVE-2026-32608 "Command Injection via Process Names in Action Command Templates" was fixed commit 5680a5d by adding sanitizemustachedict, which replaces the shell operators &&, |, , with spaces in the values rendered into action command templates. The sanitizer only processes top-level...

8.8CVSS7.4AI score0.00243EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added yesterday3 views

CVE-2026-68519

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run in glances/actions.py ignores --disable-config-exec for on-alert action commands and invokes securepopen with shell operators enabled, allowing configured redirection, command chaining, or pipes to...

7.1CVSS5.5AI score
SaveExploits0
EUVD
EUVD
added yesterday7 views

EUVD-2026-60303

Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, sanitizemustachedict in glances/actions.py skips nested list and dictionary strings such as process cmdline values, allowing pipe characters to survive chevron.render and be executed by securepopen through...

8.8CVSS5.2AI score
SaveExploits0References3
CVE
CVE
added yesterday18 views

CVE-2026-62982

Glances versions 4.5.2 to 4.5.5 allow OS command injection via process cmdline values: _sanitize_mustache_dict() in glances/actions.py skips nested strings, letting pipe characters pass through chevron.render() and execute via secure_popen() in administrator-configured action templates. Fixed in ...

8.8CVSS5.2AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-62982

Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, sanitizemustachedict in glances/actions.py skips nested list and dictionary strings such as process cmdline values, allowing pipe characters to survive chevron.render and be executed by securepopen through...

8.8CVSS5.3AI score
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added yesterday3 views

CVE-2026-68517

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the corsorigins guard in glances/outputs/glancesrestfulapi.py uses exact list equality instead of wildcard membership, allowing a multi-origin list containing the wildcard to retain corscredentials and expose...

6.5CVSS5.3AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-40145

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

7.1CVSS5.3AI score
SaveExploits0References3
EUVD
EUVD
added yesterday8 views

EUVD-2026-60270

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

7.1CVSS5.3AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-68518

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, sanitizemustachedict in glances/actions.py sanitizes individual Mustache values before chevron.render, allowing adjacent unescaped Mustache variables to reconstruct shell operators that securepopen executes when...

8.8CVSS5.3AI score
SaveExploits0References4Affected Software1
NVD
NVD
added yesterday3 views

CVE-2026-74873

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

8.7CVSS
SaveExploits0References2
Cvelist
Cvelist
added yesterday24 views

CVE-2026-74895 openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation

opensslencrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules...

9.8CVSS
SaveExploits0References2
CVE
CVE
added yesterday18 views

CVE-2026-74895

openssl_encrypt (Python package) versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution, allowing attackers to run malicious plugins with unrestricted filesystem, network, subprocess, and Python module access (CVSS 9.8 CRITICAL). No in-...

9.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added yesterday9 views

EUVD-2026-60114

opensslencrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules...

9.8CVSS5.5AI score
SaveExploits0References2
Rows per page
Query Builder