Lucene search
+L

33509 matches found

RedHat Linux
RedHat Linux
added 2026/08/24 2:10 a.m.8 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.8CVSS8.5AI score0.72648EPSS
SaveExploits16References25
NVD
NVD
added 2026/08/23 8:16 p.m.6 views

CVE-2026-19565

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...

SaveExploits0References3
CVE
CVE
added 2026/08/23 7:18 p.m.13 views

CVE-2026-19565

Apache::AppSamurai::Util (Perl, versions through 1.01 ) contains a vulnerability in CreateSessionAuthKey that generates predictable session authentication keys. The function derives keys from Time::HiRes microsecond readings and the process ID , both of which have a small entropy space. Since Cre...

5.5AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.42 views

Apache NiFi - Information Disclosure

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

5.4CVSS5.8AI score0.0313EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.59 views

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

9.9CVSS5.9AI score0.36503EPSS
SaveExploits7References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.20 views

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the registration...

10CVSS8.7AI score0.08975EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
added 2026/08/22 12:50 a.m.6 views

SUSE CVE-2026-76019

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

8.1CVSS5.4AI score0.00413EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-76019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged...

8.1CVSS5.5AI score0.00413EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-76023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process t...

8.8CVSS6.3AI score0.00498EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/21 9:31 p.m.4 views

CVE-2026-53530 ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint ratexparser::parse&str panics on the 9-byte input \verbéxé i.e. \verb followed by the non-ASCII delimiter é. When handling a \verb command, the parser slices the verbatim...

8.7CVSS5.6AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/21 7:35 p.m.114 views

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...

7.5CVSS7.6AI score0.62089EPSS
SaveExploits16References5
NVD
NVD
added 2026/08/21 7:17 p.m.9 views

CVE-2026-63462

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw request value from lodash.get to JSON.stringify in genericErrorMessage and fromOpenApiValidationErrors without guarding...

7.5CVSS0.00379EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/21 6:12 p.m.10 views

CVE-2026-63462

Unleash , an open-source feature management platform, is vulnerable to an unauthenticated denial-of-service in versions prior to 7.5.2, 7.6.5, and 8.0.2 . The root cause is in the shared OpenAPI validation error path (src/lib/error/bad-data-error.ts), which passes a raw request value from lodash....

7.5CVSS5.5AI score0.00379EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/21 3:03 p.m.16 views

CVE-2026-77087 Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding

Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...

9.4CVSS6.1AI score
SaveExploits0References4
CVE
CVE
added 2026/08/21 3:03 p.m.16 views

CVE-2026-77087

Paperclip before 0.3.1 running in its default local_trusted mode fails to validate Host headers , enabling DNS rebinding attacks. An attacker can craft a malicious webpage that, when visited by a developer with Paperclip running locally, makes authenticated API requests and executes arbitrary com...

9.6CVSS5.8AI score0.00396EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2026/08/21 12:08 p.m.11 views

kbd security update

An update is available for kbd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kbd packages provide tools for managing console behavior on a Linux system,...

7.8CVSS5.5AI score0.00107EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/08/21 6:01 a.m.7 views

cups-filters security update

An update is available for cups-filters. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cups-filters package contains back ends, filters, and other software...

7.5CVSS5.6AI score0.00361EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/21 3:56 a.m.8 views

Malicious code in @js-lib-team/env-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae761b7dd660e94dd99388dedf8c2227fa6a683e314468e7a482cd649c2e1a47 Package @js-lib-team/env-parser is advertised as an environment-variable parser but on require/import executes a top-level IIFE in index.js that read...

5.5AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/21 1:06 a.m.4 views

CVE-2026-74970

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics component...

6.1CVSS5.2AI score0.00168EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/08/21 12:37 a.m.6 views

SUSE CVE-2026-76033

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

4.2CVSS5.3AI score0.00272EPSS
SaveExploits0References3
Rows per page
Query Builder