Lucene search
+L

24370 matches found

Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.18 views

PT-2026-45487

Name of the Vulnerable Software and Affected Versions praisonai-platform affected versions not specified Description An Insecure Direct Object Reference IDOR exists in the issue CRUD endpoints. The application validates if a user is a member of a workspace but fails to verify if the requested iss...

8.3CVSS6.1AI score0.0028EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.29 views

PT-2026-45488

Name of the Vulnerable Software and Affected Versions praisonai-platform affected versions not specified Description An Insecure Direct Object Reference IDOR exists in the comment endpoints. The system verifies if a user is a member of a workspace but fails to verify if the requested issue belong...

8.1CVSS6.1AI score0.00209EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.24 views

PT-2026-45652

Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.3.0 Description Kiteworks is a private data network PDN. An Insecure Direct Object Reference IDOR—a flaw where an application provides direct access to objects based on user-supplied input—exists in Kiteworks Secu...

4.3CVSS5.5AI score0.00152EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.51 views

PT-2026-45489

Name of the Vulnerable Software and Affected Versions praisonai-platform affected versions not specified Description An Insecure Direct Object Reference IDOR exists in the project CRUD endpoints. The application validates if a user is a member of a workspace but fails to verify if the requested...

8.1CVSS6.1AI score0.00289EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.31 views

PT-2026-45561

Name of the Vulnerable Software and Affected Versions Nanobot versions prior to 0.2.1 Description A server-side request forgery SSRF issue exists in the Microsoft Teams channel handler. This occurs when a remote attacker provides a forged activity containing a malicious serviceUrl value. By sendi...

7CVSS5.9AI score0.00382EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.17 views

PT-2026-45651

Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.3.0 Description An Insecure Direct Object Reference IDOR issue in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users. This occurs due to insufficie...

5.4CVSS5.5AI score0.00138EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/31 8:16 p.m.14 views

DEBIAN-CVE-2026-8796

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srldecoder.c, srlreadobject and srlreadhash process a COPY tag, a back-reference whose target byte the decoder re-decodes as a fresh tag. When that target byte matches the SHORTBINARY...

8.1CVSS5.8AI score0.00399EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/31 7:43 p.m.25 views

EUVD-2026-33517

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srldecoder.c, srlreadobject and srlreadhash process a COPY tag, a back-reference whose target byte the decoder re-decodes as a fresh tag. When that target byte matches the SHORTBINARY...

5.8AI score0.00399EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/31 7:43 p.m.9 views

CVE-2026-8796 Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srldecoder.c, srlreadobject and srlreadhash process a COPY tag, a back-reference whose target byte the decoder re-decodes as a fresh tag. When that target byte matches the SHORTBINARY...

8.1CVSS5.9AI score
SaveExploits0References7
CVE
CVE
added 2026/05/31 7:43 p.m.41 views

CVE-2026-8796

CVE-2026-8796 affects Sereal::Decoder before 5.005 (Perl). A heap out-of-bounds read can be triggered via crafted input when decoding COPY back-references that re-decode as SHORT_BINARY tags, allowing an attacker-controlled COPY offset to skip bounds and read past the input. This may enable consu...

8.1CVSS5.8AI score0.00399EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/31 7:43 p.m.14 views

CVE-2026-8796 Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srldecoder.c, srlreadobject and srlreadhash process a COPY tag, a back-reference whose target byte the decoder re-decodes as a fresh tag. When that target byte matches the SHORTBINARY...

5.8AI score0.00399EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/05/31 7:43 p.m.22 views

CVE-2026-8796

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srldecoder.c, srlreadobject and srlreadhash process a COPY tag, a back-reference whose target byte the decoder re-decodes as a fresh tag. When that target byte matches the SHORTBINARY...

8.1CVSS5.8AI score0.00399EPSS
SaveExploits0
OSV
OSV
added 2026/05/31 12:9 p.m.9 views

ECHO-EE72-5202-2C87

Bulletin has no description...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/31 12:0 a.m.36 views

PT-2026-45212

Name of the Vulnerable Software and Affected Versions Sereal::Decoder versions prior to 5.005 Description An issue exists where crafted input can lead to a heap out-of-bounds read. In the file Perl/Decoder/srl decoder.c, the functions srl read object and srl read hash process a COPY tag, which is...

8.1CVSS5.7AI score0.00399EPSS
SaveExploits0References9
OSV
OSV
added 2026/05/30 3:44 p.m.11 views

MINI-WR87-XWG2-X7HJ

Bulletin has no description...

4.2CVSS5.7AI score0.00222EPSS
SaveExploits1
OSV
OSV
added 2026/05/30 3:43 p.m.17 views

MINI-G4VF-MCH7-385W

Bulletin has no description...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/05/30 3:41 p.m.16 views

MINI-Q57P-73PH-RXC3

Bulletin has no description...

7.3CVSS5.7AI score0.00236EPSS
SaveExploits0
OSV
OSV
added 2026/05/30 3:41 p.m.15 views

MINI-M8WQ-85Q3-M58X

Bulletin has no description...

7.3CVSS5.7AI score0.00236EPSS
SaveExploits0
OSV
OSV
added 2026/05/30 3:41 p.m.11 views

MINI-VXP9-5PRV-7GQW

Bulletin has no description...

6.5CVSS5.7AI score0.0027EPSS
SaveExploits0
OSV
OSV
added 2026/05/30 3:41 p.m.9 views

MINI-FH3H-CJGX-8F8Q

Bulletin has no description...

6.5CVSS5.7AI score0.00275EPSS
SaveExploits0
Rows per page
Query Builder