Lucene search
+L

11725 matches found

CVE
CVE
added 2026/08/25 10:19 p.m.22 views

CVE-2026-18985

CVE-2026-18985 is an Incorrect Authorization vulnerability in the Drupal Edit in-place field contrib module (versions 0.0.0 through 2.1.1 ). The module fails to sufficiently verify access rights when editing entities, allowing a malicious user to craft requests and modify any field on any entity ...

8.1CVSS5.2AI score0.00201EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/25 10:17 p.m.11 views

DEBIAN-CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

9.8CVSS5.3AI score0.00754EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 10:17 p.m.8 views

CVE-2026-63403

Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the server is vulnerable to an unauthenticated denial of service in which a single malformed command crashes the entire process. Its wire protocol is line-based, and several command handlers slice or index the...

8.7CVSS0.00426EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 9:17 p.m.11 views

DEBIAN-CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.6AI score0.00344EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 9:17 p.m.9 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS0.00344EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/25 9:17 p.m.15 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.8AI score0.00344EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 9:17 p.m.7 views

UBUNTU-CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.8AI score0.00344EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/25 8:36 p.m.43 views

CVE-2026-77680 Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS0.00344EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/25 8:36 p.m.9 views

EUVD-2026-66111

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.4AI score0.00344EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/08/25 8:36 p.m.11 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.6AI score0.00344EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/08/25 8:36 p.m.10 views

CVE-2026-77680 Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS5.5AI score0.00344EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/25 8:36 p.m.23 views

CVE-2026-77680

libsoup contains an algorithmic complexity flaw in its HTTP Range header processing that persists after the CVE-2025-32907 fix. The root cause is that the coalescing loop in soup_message_headers_get_ranges_internal() uses g_array_remove_index() for each merged range, resulting in O(N²) work when ...

5.3CVSS5.5AI score0.00344EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/25 8:36 p.m.10 views

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

5.3CVSS6.7AI score0.00684EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/25 4:17 p.m.14 views

CVE-2026-79775

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

7.1CVSS6AI score0.00307EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/25 1:01 p.m.13 views

CVE-2026-66276

A flaw was found in Apache Qpid Proton-J. An authenticated attacker can exploit this vulnerability by crafting a specially designed disposition frame with large or illegal ranges. This can cause excessive CPU usage due to naive range handling, leading to a denial of service DoS for the affected...

6.5CVSS5.4AI score0.00421EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/25 2:16 a.m.10 views

UBUNTU-CVE-2026-34967

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled conte...

5.4CVSS6AI score0.00237EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.19 views

PT-2026-81851

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in soup...

5.3CVSS6.7AI score0.00684EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/24 10:16 p.m.13 views

CVE-2026-17113

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

6CVSS5.5AI score0.00107EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/24 9:22 p.m.9 views

CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

6CVSS5.7AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 9:22 p.m.37 views

CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

6CVSS0.00107EPSS
SaveExploits0References2
Rows per page
Query Builder