Lucene search
+L

89526 matches found

RedHat Linux
RedHat Linux
added 2026/06/25 11:42 a.m.10 views

perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

A flaw was found in perl-IO-Compress, a component used for data compression and decompression. A remote attacker could exploit this vulnerability by crafting a malicious input, specifically an output glob, that bypasses the intended security measures. This could lead to the execution of...

7.8CVSS6.1AI score0.00292EPSS
SaveExploits3References6
EUVD
EUVD
added 2026/06/25 12:33 a.m.11 views

EUVD-2026-39113

ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the uploadSSL...

5.5CVSS6.4AI score0.03248EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.13 views

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in ANGLE in Google Chrome prior to version 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

8.8CVSS7.6AI score0.00271EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.11 views

Astra Linux – Vulnerability in mapserver

MapServer is a system for developing web-based GIS applications. Starting from version 4.2 and before version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD Styled Layer Descriptor parser allowed a remote, unauthenticated attacker to crash the MapServer process by sending a crafted SLD...

7.5CVSS5.7AI score0.00865EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.9 views

Astra Linux – Vulnerability in Chromium

In V8 in Google Chrome, prior to version 147.0.7727.55, allowing remote attackers to potentially exploit heap corruption through a crafted HTML page was possible. Chromium security severity: Medium...

6.8CVSS7.3AI score0.0015EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.8 views

Astra Linux – Vulnerability in Chromium

In Google Chrome, policy bypass in the “Audio” section prior to version 147.0.7727.55 allowed a remote attacker who convinced a user to perform certain UI gestures to bypass sandbox download restrictions through a crafted HTML page. Chromium security severity: Low...

6.1CVSS6.9AI score0.00155EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/24 1:13 p.m.9 views

OESA-2026-2731 mercurial security update

Mercurial is a free, distributed source control management tool. It efficiently handles projects of any size and offers an easy and intuitive interface. Security Fixes: A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects...

5.3CVSS3.6AI score0.00486EPSS
SaveExploits0References2
Redos
Redos
added 2026/06/24 12:0 a.m.8 views

ROS-20260624-73-0021

The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...

7.5CVSS6.6AI score0.0064EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/06/24 12:0 a.m.22 views

PT-2026-52143

Name of the Vulnerable Software and Affected Versions Quest NetVault Backup affected versions not specified Description An authentication bypass issue exists within the 'viewclient' webpage due to improper validation of user-supplied data. This allows remote attackers to inject arbitrary scripts,...

8.8CVSS7.5AI score0.0067EPSS
SaveExploits0References7
Redos
Redos
added 2026/06/24 12:0 a.m.7 views

ROS-20260624-73-0029

The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...

9.8CVSS6.8AI score0.00607EPSS
SaveExploits1
Redos
Redos
added 2026/06/23 12:0 a.m.10 views

ROS-20260623-73-0041

The vulnerability of the bytes.decode function in the CPython interpreter relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

9.1CVSS6.2AI score0.00579EPSS
SaveExploits0
OSV
OSV
added 2026/06/22 4:16 p.m.3 views

DEBIAN-CVE-2026-12725

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply su...

5.9CVSS6.1AI score0.00403EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/06/22 3:13 p.m.9 views

mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase

A flaw was found in Apache HTTP Server. This late release of memory after effective lifetime vulnerability allows a remote, unauthenticated attacker to cause a denial of service DoS. The vulnerability can lead to resource exhaustion, making the server unavailable to legitimate users...

7.5CVSS5.8AI score0.04576EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/06/22 3:13 p.m.11 views

httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

7.5CVSS7.1AI score0.27984EPSS
SaveExploits8References6
RedHat Linux
RedHat Linux
added 2026/06/22 2:50 p.m.10 views

urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response,...

8.9CVSS5.9AI score0.0068EPSS
SaveExploits0References5
OSV
OSV
added 2026/06/22 1:11 p.m.8 views

USN-8457-1 mysql-8.0, mysql-8.4 vulnerabilities

It was discovered that MySQL Router incorrectly handled repeated TLS protocol upgrade requests. An unauthenticated remote attacker could possibly use this issue to cause MySQL Router to crash, resulting in a denial of service. CVE-2026-46862 It was discovered that MySQL Server incorrectly handled...

7.5CVSS5.9AI score0.00471EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/22 6:10 a.m.13 views

postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison

A flaw was found in PostgreSQL. This vulnerability, a covert timing channel, exists in the comparison of MD5-hashed passwords during authentication. A remote attacker could exploit this to recover user credentials, gaining unauthorized access to the database. This issue specifically impacts...

8.2CVSS5.9AI score0.00558EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/06/22 12:0 a.m.7 views

The vulnerability of the mpls_do_error() function in the sys/netmpls/mpls_input.c script of the OpenBSD operating system, which allows a hacker to disclose protected information

The vulnerability of the mplsdoerror function in the sys/netmpls/mplsinput.c file of the OpenBSD operating system is related to the issue of operations going out of the buffer boundaries during the processing of MPLS tags. Exploitation of this vulnerability can allow a remote attacker to disclose...

5.3CVSS5.9AI score0.00423EPSS
SaveExploits2References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/22 12:0 a.m.17 views

PT-2026-51325

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 8.5 IBM WebSphere Application Server version 9.0 Description A remote attacker could bypass authentication to gain unauthorized access to JAX-WS applications. JAX-WS Java API for XML Web Services is a...

7.3CVSS5.8AI score0.00466EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/21 11:15 p.m.23 views

CVE-2026-12821

Flowise Flowise (up to 3.1.2) is affected by a path traversal vulnerability in the S3 Document Loader, specifically in packages/components/nodes/documentloaders/S3/S3.ts. The description notes an unknown function as the vulnerable element and states that an attacker can exploit this remotely to t...

6.5CVSS6.3AI score0.00494EPSS
SaveExploits0References5
Rows per page
Query Builder