Lucene search
+L

124847 matches found

CVE
CVE
added 2026/06/30 8:56 p.m.59 views

CVE-2026-11541

IBM WebSphere Application Server 9.0, 8.5 and IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability tracked as CVE-2026-11541. The available connected sources consistently identify the affected products and the vulnerability cla...

9.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2026/06/30 8:53 p.m.13 views

rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

7.8CVSS6.4AI score0.00132EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/30 8:23 p.m.14 views

EUVD-2025-210383

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper allocation of resource throttling...

4.3CVSS5.8AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 8:18 p.m.30 views

CVE-2025-36324

CVE-2025-36324 affects IBM watsonx.data intelligence versions 5.2.0, 5.2.1, 5.2.2, and 5.3.0. The issue is a server-side request forgery (SSRF) that could allow an authenticated attacker to make unauthorized requests from the system, potentially enabling network enumeration or facilitating other ...

4.3CVSS5.8AI score0.00162EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/06/30 8:17 p.m.16 views

CVE-2026-10564

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery SSRF. The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker c...

8.2CVSS6AI score
SaveExploits0References1
OSV
OSV
added 2026/06/30 8:17 p.m.8 views

CVE-2026-10129

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery SSRF protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges flow author role can bypass SSRF protections by enabling the followredirects parameter and supplying a...

8.5CVSS6AI score
SaveExploits0References1
NVD
NVD
added 2026/06/30 8:17 p.m.10 views

CVE-2026-10129

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery SSRF protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges flow author role can bypass SSRF protections by enabling the followredirects parameter and supplying a...

8.5CVSS0.00185EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 7:59 p.m.29 views

CVE-2026-10129

CVE-2026-10129 affects IBM Langflow OSS 1.0.0–1.9.3. A SSRF protection bypass exists in the API Request component: with a low-privilege flow author, an attacker can enable follow_redirects and supply a public URL that redirects to internal/localhost addresses. The app validates only the initial U...

8.5CVSS5.8AI score0.00185EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/06/30 7:51 p.m.14 views

EUVD-2026-40400

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery SSRF. The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker c...

8.2CVSS5.8AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 7:51 p.m.41 views

CVE-2026-10564

CVE-2026-10564 affects IBM Langflow OSS 1.0.0–1.9.6. The legacy RSSReaderComponent (rss.py) and SearXNG component (searxng.py) perform unvalidated HTTP requests to user-controlled URLs, bypassing protections added in 1.9.3 and enabling an authenticated attacker to reach internal resources, includ...

8.2CVSS5.8AI score0.00199EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/30 7:51 p.m.11 views

CVE-2026-11546 IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled...

7.1CVSS5.8AI score0.00222EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/30 7:51 p.m.14 views

EUVD-2026-40399

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled...

7.1CVSS5.8AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/30 7:44 p.m.46 views

CVE-2026-11714 IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability

IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled...

8.5CVSS0.00207EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/30 7:44 p.m.11 views

CVE-2026-11714

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled...

8.5CVSS5.8AI score0.00207EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/30 7:44 p.m.10 views

CVE-2026-11714 IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability

IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled...

8.5CVSS5.5AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 7:20 p.m.47 views

CVE-2026-13773

CVE-2026-13773 affects IBM WebSphere eXtreme Scale 8.6.1.0–8.6.1.6. Approximately 50 generated CORBA stub classes in ogclient.jar deserialize an attacker-controlled IOR via ObjectInputStream, using ORB.string_to_object() to perform outbound IIOP SSRF to a chosen host. When combined with IBM ORB g...

10CVSS6.4AI score0.03415EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2026/06/30 6:40 p.m.11 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to path and method values taken directly from incoming requests. An attacker can exhaust server memory and trigger an OOM by sending requests with arbitrary URL paths or custom HT...

8.7CVSS6.1AI score0.00447EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/30 6:40 p.m.11 views

GHSA-9C54-X2G4-V92J Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality

Impact An unauthenticated remote attacker can trigger unbounded memory growth on the timestamp authority server. This vulnerability exists because the global wrapMetrics middleware records the raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency a...

5.9CVSS6AI score0.00447EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/30 5:25 p.m.7 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation via the pipeline.Author process. An attacker can execute unauthorized pipeline steps and exfiltrate CI secrets by setting the commit author name in a GitLab webhook payload to match an entry in the approval list,...

9.2CVSS6AI score0.00546EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/30 5:25 p.m.6 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation via the pipeline.Author process. An attacker can execute unauthorized pipeline steps and exfiltrate CI secrets by setting the commit author name in a GitLab webhook payload to match an entry in the approval list,...

9.2CVSS6AI score0.00546EPSS
SaveExploits0References2
Rows per page
Query Builder