Lucene search
+L

24085 matches found

OSV
OSV
added 2026/07/21 1:32 a.m.4 views

MINI-V38C-FFR9-6V44

Bulletin has no description...

7.5CVSS6AI score0.00651EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.10 views

PT-2026-61964

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains an insecure direct object reference IDOR flaw, which occurs when an application provides direct access to objects based on user-supplied input. This issue...

9.1CVSS6.5AI score0.00546EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.9 views

PT-2026-61962

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description An insecure direct object reference IDOR issue allows an attacker with group administrator access to achieve privilege escalation and remote code execution as root. IDOR is a type o...

9.1CVSS6.5AI score0.00558EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.15 views

PT-2026-61975

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains an insecure direct object reference IDOR flaw, which occurs when an application provides direct access to objects based on user-supplied input. This issue...

9.1CVSS5.9AI score0.00344EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.9 views

PT-2026-61967

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains an insecure direct object reference IDOR flaw, which occurs when an application provides direct access to objects based on user-supplied input. This issue...

9.1CVSS6.2AI score0.00546EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/21 12:0 a.m.4 views

SolarWinds Serv-U 15.5.4 < 2026.3 Multiple Vulnerabilities XSS

The version of SolarWinds Serv-U installed on the remote host is prior to 2026.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsserv-u20263 advisory. - SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead...

9.1CVSS5.4AI score0.00445EPSS
SaveExploits0References10
Oracle linux
Oracle linux
added 2026/07/21 12:0 a.m.8 views

kernel security, bug fix, and enhancement update

4.18.0-553.146.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

8.8CVSS7.2AI score0.0026EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.6 views

PT-2026-61974

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains an insecure direct object reference IDOR flaw, which occurs when an application provides direct access to objects based on user-supplied input. This issue...

9.1CVSS6AI score0.0128EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.15 views

PT-2026-61971

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains an insecure direct object reference IDOR flaw. This issue allows for SMTP hijacking, which can result in arbitrary account takeover. The impact of this...

9.1CVSS5.9AI score0.00344EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.11 views

PT-2026-61972

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description An insecure direct object reference IDOR issue exists that allows for account takeover. This occurs when an application provides direct access to objects based on user-supplied inpu...

9.1CVSS5.9AI score0.00445EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/20 9:24 p.m.7 views

GHSA-FFQ3-XPV3-J92Q Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

Summary Type: Algorithmic-complexity DoS in reference-link definition handling. A markdown document with N reference-link definitions of the same key or many distinct keys takes ON² parser time. 5000 repeated a: u\n definitions take 1.1 second; 10000 → 4.5 seconds. File: src/mistune/blockparser.p...

7.5CVSS5.3AI score0.00413EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2026/07/20 9:24 p.m.8 views

Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

Summary Type: Algorithmic-complexity DoS in reference-link definition handling. A markdown document with N reference-link definitions of the same key or many distinct keys takes ON² parser time. 5000 repeated a: u\n definitions take 1.1 second; 10000 → 4.5 seconds. File: src/mistune/blockparser.p...

7.5CVSS5.3AI score0.00413EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2026/07/20 9:24 p.m.10 views

EUVD-2026-42338

Mistune blockparser: quadratic-time parsing on long lists of repeated reference-link definitions...

7.5CVSS5.2AI score0.00413EPSS
SaveExploits1References5
NVD
NVD
added 2026/07/20 9:16 p.m.8 views

CVE-2026-13381

VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference IDOR vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server...

8.7CVSS0.00215EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/20 8:12 p.m.38 views

CVE-2026-13381 VSee Clinic and API Insecure Direct Object Reference in File API Allows Unauthorized File Access and Deletion

VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference IDOR vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server...

8.7CVSS0.00215EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/20 8:12 p.m.17 views

CVE-2026-13381

VSee Clinic 7.1.26 and API 1.3.0 expose an Insecure Direct Object Reference (IDOR) in the /v1.3.0/api/files endpoint. An authenticated attacker can modify the remark parameter to enumerate, access, and delete files owned by other users, impacting confidentiality, integrity, and availability. Root...

8.7CVSS5.4AI score0.00215EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/20 8:4 p.m.35 views

CVE-2026-44585 Paymenter: Broken object level authorization via service reference manipulation on ticket creation

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing...

5.4CVSS0.00178EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/20 8:4 p.m.36 views

CVE-2026-44585

CVE-2026-44585 affects Paymenter prior to v1.5.0. The ticket creation endpoint validates ownership of a user-supplied service identifier is not enforced, enabling an authenticated user to create tickets that reference another user’s service. Impact stated: no direct access to service contents or ...

5.4CVSS5.3AI score0.00178EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2026/07/20 7:21 p.m.9 views

USN-8573-1: libde265 vulnerabilities

It was discovered that libde265 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2023-51792 It was discovered that libde265 did not...

8.7CVSS7AI score0.00449EPSS
SaveExploits6
OSV
OSV
added 2026/07/20 7:21 p.m.7 views

USN-8573-1 libde265 vulnerabilities

It was discovered that libde265 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2023-51792 It was discovered that libde265 did not...

8.7CVSS7AI score0.00449EPSS
SaveExploits6References13
Rows per page
Query Builder