Lucene search
+L

89520 matches found

OSV
OSV
added 2026/06/24 1:13 p.m.9 views

OESA-2026-2731 mercurial security update

Mercurial is a free, distributed source control management tool. It efficiently handles projects of any size and offers an easy and intuitive interface. Security Fixes: A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects...

5.3CVSS3.6AI score0.00486EPSS
SaveExploits0References2
Redos
Redos
added 2026/06/24 12:0 a.m.8 views

ROS-20260624-73-0021

The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...

7.5CVSS6.6AI score0.0064EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/06/24 12:0 a.m.22 views

PT-2026-52143

Name of the Vulnerable Software and Affected Versions Quest NetVault Backup affected versions not specified Description An authentication bypass issue exists within the 'viewclient' webpage due to improper validation of user-supplied data. This allows remote attackers to inject arbitrary scripts,...

8.8CVSS7.5AI score0.0067EPSS
SaveExploits0References7
Redos
Redos
added 2026/06/24 12:0 a.m.7 views

ROS-20260624-73-0029

The vulnerability in Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP request smuggling attack...

9.8CVSS6.8AI score0.00607EPSS
SaveExploits1
Redos
Redos
added 2026/06/23 12:0 a.m.10 views

ROS-20260623-73-0041

The vulnerability of the bytes.decode function in the CPython interpreter relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

9.1CVSS6.2AI score0.00579EPSS
SaveExploits0
OSV
OSV
added 2026/06/22 4:16 p.m.3 views

DEBIAN-CVE-2026-12725

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply su...

5.9CVSS6.1AI score0.00403EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/06/22 3:13 p.m.9 views

mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase

A flaw was found in Apache HTTP Server. This late release of memory after effective lifetime vulnerability allows a remote, unauthenticated attacker to cause a denial of service DoS. The vulnerability can lead to resource exhaustion, making the server unavailable to legitimate users...

7.5CVSS5.8AI score0.04576EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/06/22 3:13 p.m.11 views

httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

7.5CVSS7.1AI score0.27984EPSS
SaveExploits8References6
RedHat Linux
RedHat Linux
added 2026/06/22 2:50 p.m.10 views

urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response,...

8.9CVSS5.9AI score0.0068EPSS
SaveExploits0References5
OSV
OSV
added 2026/06/22 1:11 p.m.8 views

USN-8457-1 mysql-8.0, mysql-8.4 vulnerabilities

It was discovered that MySQL Router incorrectly handled repeated TLS protocol upgrade requests. An unauthenticated remote attacker could possibly use this issue to cause MySQL Router to crash, resulting in a denial of service. CVE-2026-46862 It was discovered that MySQL Server incorrectly handled...

7.5CVSS5.9AI score0.00471EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/22 6:10 a.m.13 views

postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison

A flaw was found in PostgreSQL. This vulnerability, a covert timing channel, exists in the comparison of MD5-hashed passwords during authentication. A remote attacker could exploit this to recover user credentials, gaining unauthorized access to the database. This issue specifically impacts...

8.2CVSS5.9AI score0.00558EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/06/22 12:0 a.m.7 views

The vulnerability of the mpls_do_error() function in the sys/netmpls/mpls_input.c script of the OpenBSD operating system, which allows a hacker to disclose protected information

The vulnerability of the mplsdoerror function in the sys/netmpls/mplsinput.c file of the OpenBSD operating system is related to the issue of operations going out of the buffer boundaries during the processing of MPLS tags. Exploitation of this vulnerability can allow a remote attacker to disclose...

5.3CVSS5.9AI score0.00423EPSS
SaveExploits2References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/22 12:0 a.m.17 views

PT-2026-51325

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 8.5 IBM WebSphere Application Server version 9.0 Description A remote attacker could bypass authentication to gain unauthorized access to JAX-WS applications. JAX-WS Java API for XML Web Services is a...

7.3CVSS5.8AI score0.00466EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/21 11:15 p.m.23 views

CVE-2026-12821

Flowise Flowise (up to 3.1.2) is affected by a path traversal vulnerability in the S3 Document Loader, specifically in packages/components/nodes/documentloaders/S3/S3.ts. The description notes an unknown function as the vulnerable element and states that an attacker can exploit this remotely to t...

6.5CVSS6.3AI score0.00494EPSS
SaveExploits0References5
CVE
CVE
added 2026/06/21 11:0 p.m.26 views

CVE-2026-12815

CVE-2026-12815 affects coollabsio coolify 4.0.0, specifically the Image Name Handler component. The vulnerability is an os command injection caused by manipulation in the image name processing, with a remote attack vector and low-privilege conditions. The CVSS metrics indicate network access, low...

6.5CVSS6.2AI score0.01986EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/21 8:16 p.m.13 views

CVE-2026-12806

A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. It is possible to initiate the attack...

9CVSS0.00805EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/06/21 7:30 p.m.34 views

CVE-2026-12806 Edimax BR-6478AC V2 POST Request formWlSiteSurvey buffer overflow

A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. It is possible to initiate the attack...

9CVSS0.00805EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/21 10:16 a.m.24 views

CVE-2026-12798

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function loadopenapispecasync of the file litellm/proxy/experimental/mcpserver/openapitomcpgenerator.py of the component MCP OpenAPI Spec Loader. This manipulation of the argument specpath causes...

6.5CVSS0.00262EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/06/21 9:30 a.m.10 views

EUVD-2026-38157

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function loadopenapispecasync of the file litellm/proxy/experimental/mcpserver/openapitomcpgenerator.py of the component MCP OpenAPI Spec Loader. This manipulation of the argument specpath causes...

6.5CVSS6.2AI score0.00262EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/06/21 9:15 a.m.14 views

EUVD-2026-38156

A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function asyncprecallhook of the file enterprise/enterprisehooks/bannedkeywords.py of the component Completions Interface. The manipulation of the argument prompt results in incorrect authorization. The attack ma...

6.5CVSS6.1AI score0.004EPSS
SaveExploits1References5
Rows per page
Query Builder