Lucene search
+L

256984 matches found

Debian CVE
Debian CVE
added 2 days ago5 views

CVE-2026-16805

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.00305EPSS
SaveExploits0
Cvelist
Cvelist
added 2 days ago35 views

CVE-2026-16805

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

0.00305EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago20 views

CVE-2026-16805

CVE-2026-16805 is a use-after-free in Blink affecting Google Chrome prior to 150.0.7871.186, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The Chrome Stable Channel update mirrors this fix, upgrading to 150.0.7871.186 (Windows/Mac) or 150.0.7871....

8.8CVSS6.2AI score0.00305EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2 days ago5 views

CVE-2026-16806

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.00305EPSS
SaveExploits0
CVE
CVE
added 2 days ago26 views

CVE-2026-16806

CVE-2026-16806 affects Google Chrome WebMCP. A use-after-free in WebMCP can be triggered by visiting a crafted HTML page, allowing a remote attacker to execute arbitrary code inside the sandbox. The public sources confirm this vulnerability and tie it to the Chrome stable release update LP to 150...

8.8CVSS6.2AI score0.00305EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago7 views

CVE-2026-52439

An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...

9.8CVSS0.00239EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago7 views

CVE-2026-49035

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

9.2CVSS0.00369EPSS
SaveExploits1References1
CVE
CVE
added 2 days ago14 views

CVE-2026-63732

9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authenticates fresh installs; a bypass of the LOCAL_ONLY network gate via a spoofed Host header; and unvalidated arguments passed to child_process.spawn() when registering MCP plugins....

9.9CVSS6.3AI score0.00744EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago18 views

CVE-2025-71389

Cal.com (calcom/cal.diy) versions before 5.9.9 are vulnerable to unauthenticated remote code execution via Next.js React Server Components (RSC) request handling that deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server to execute arbitrary code d...

10CVSS6.7AI score0.00928EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2 days ago30 views

CVE-2025-71389 Cal.com before 5.9.9 Remote Code Execution via RSC

Cal.com calcom/cal.diy before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components RSC request handling deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server and cause...

10CVSS0.00928EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago13 views

CVE-2026-49035

CVE-2026-49035 affects libIEC61850’s MMS file service across version 1.0.0 through 1.6.1. The root cause is a heap-based buffer overflow triggered by an underflow of maxPduSize in the MMS Initiate processing (mms_file_service.c:834), allowing unauthenticated remote interaction. In experiments, re...

9.2CVSS6.3AI score0.00369EPSS
SaveExploits1References1
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-48430

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

9.2CVSS6.3AI score0.00369EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2 days ago29 views

CVE-2026-49035 Stack-based Buffer Overflow in MZ Automation libIEC61850

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

9.2CVSS0.00369EPSS
SaveExploits1References1
NVD
NVD
added 2 days ago7 views

CVE-2026-47670

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...

9.4CVSS0.01714EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2 days ago12 views

Security Bulletin: Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution

Summary A path traversal vulnerability exists in multiple Langflow OSS file processing components Docling, Docling Serve, Read File, NVIDIA Retriever Extraction, Video File, and Unstructured API that are based on BaseFileComponent. The vulnerability in the unpackbundle function allows attackers t...

9.8CVSS6.5AI score0.00787EPSS
SaveExploits0Affected Software1
Debian CVE
Debian CVE
added 2 days ago3 views

CVE-2026-60122

gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute arbitrary OS commands by injecting malicious content into the SKY.satellites.used field, which is inserted unsanitize...

8.5CVSS6.3AI score0.00174EPSS
SaveExploits0
CVE
CVE
added 2 days ago36 views

CVE-2026-47669

CVE-2026-47669 (DbGate Zip Slip) : The unzipDirectory function in DbGate’s API path traversal allows writing files outside the target directory via ZIP entries with “..” (Zip Slip), enabling arbitrary file writes and potential RCE, especially in default Docker deployments running as root. Impact ...

9.3CVSS5.3AI score0.00344EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago34 views

CVE-2026-47669 DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE

DbGate is cross-platform database manager. In versions 7.1.8 and prior, the unzipDirectory function in packages/api/src/shell/unzipDirectory.js line 27 does not validate that extracted file paths stay within the output directory. A malicious ZIP with ../ entries writes files anywhere on the...

9.3CVSS0.00344EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-47670

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...

9.4CVSS6AI score0.01714EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2 days ago35 views

CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...

9.4CVSS0.01714EPSS
SaveExploits1References2
Rows per page
Query Builder