Lucene search
+L

5716 matches found

OSV
OSV
added 2026/04/18 12:1 p.m.7 views

RLSA-2026:8475 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime...

7.5CVSS6.3AI score0.02279EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/18 12:1 p.m.19 views

RLSA-2026:8468 Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK SDKVERSION and .NET Runtime...

7.5CVSS5.8AI score0.02279EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/18 12:1 p.m.7 views

RLSA-2026:8473 Important: .NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime...

7.5CVSS5.8AI score0.02279EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/18 12:16 a.m.10 views

CVE-2026-40324

Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser Utf8GraphQLParser has no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types...

9.1CVSS0.00902EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.7 views

RockyLinux 8 : .NET 10.0 (RLSA-2026:8473)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8473 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.7 views

RockyLinux 9 : .NET 8.0 (RLSA-2026:8469)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8469 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.6 views

RockyLinux 9 : .NET 10.0 (RLSA-2026:8471)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8471 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.6 views

RockyLinux 10 : .NET 10.0 (RLSA-2026:8467)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8467 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotne...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.9 views

RockyLinux 10 : .NET 8.0 (RLSA-2026:8470)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8470 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotne...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/04/17 11:5 p.m.4 views

CVE-2026-40324

Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser Utf8GraphQLParser has no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types...

9.1CVSS5.7AI score0.00902EPSS
SaveExploits0References13Affected Software1
OSV
OSV
added 2026/04/17 11:5 p.m.6 views

CVE-2026-40324 Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL Documents

Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser Utf8GraphQLParser has no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types...

9.1CVSS5.9AI score
SaveExploits0References14
CVE
CVE
added 2026/04/17 11:5 p.m.18 views

CVE-2026-40324

Hot Chocolate (GraphQL server) contains a vulnerability in Utf8GraphQLParser: prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, the recursive descent parser has no recursion-depth limit, so deeply nested GraphQL documents (as small as ~40 KB) can trigger a StackOverflowException. This unca...

9.1CVSS5.7AI score0.00902EPSS
SaveExploits0References12
Cvelist
Cvelist
added 2026/04/17 11:5 p.m.42 views

CVE-2026-40324 Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL Documents

Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser Utf8GraphQLParser has no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types...

9.1CVSS0.00902EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2026/04/17 10:58 p.m.6 views

CVE-2026-40323 SP1 V6 Recursion Circuit Row-Count Binding Gap

SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof...

8.9CVSS5.9AI score0.00195EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/17 10:58 p.m.40 views

CVE-2026-40323 SP1 V6 Recursion Circuit Row-Count Binding Gap

SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof...

8.9CVSS0.00195EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/17 1:3 p.m.10 views

OESA-2026-1981 jq security update

jq is a lightweight and flexible command-line JSON processor. you can use it to slice and filter and map and transform structured data. It is written in portable C, and it has zero runtime dependencies. it can mangle the data format that you have into the one that you want. Security Fixes: jq is ...

8.2CVSS6.1AI score0.00559EPSS
SaveExploits5References7
OSV
OSV
added 2026/04/17 1:0 p.m.17 views

OESA-2026-1921 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS7AI score0.00566EPSS
SaveExploits0References12
OSV
OSV
added 2026/04/17 1:0 p.m.23 views

OESA-2026-1920 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS6.7AI score0.00566EPSS
SaveExploits0References9
OSV
OSV
added 2026/04/17 1:0 p.m.10 views

OESA-2026-1918 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS7AI score0.00566EPSS
SaveExploits0References12
OSV
OSV
added 2026/04/17 12:59 p.m.15 views

OESA-2026-1917 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS7AI score0.00566EPSS
SaveExploits0References12
Rows per page
Query Builder