Lucene search
+L

124832 matches found

Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.28 views

PT-2026-54935

Name of the Vulnerable Software and Affected Versions MLflow versions prior to 3.14.0 Description When authentication is enabled, the trace API endpoints lack proper authorization validators. This occurs because the before request handler fails to register authorization validators for these...

8.1CVSS7.2AI score0.00376EPSS
SaveExploits1References9
CVE
CVE
added 2026/07/02 12:0 a.m.44 views

CVE-2026-38969

CVE-2026-38969 entry is rejected/not used and does not represent an active vulnerability.

6.1AI score0.00352EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 12:0 a.m.9 views

CVE-2026-38969

ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling. NOTE: the Supplier reports that "The project README states that it is suitable for testing and development, and that its developers do not encourage its use to serve...

7.5CVSS6.1AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.25 views

PT-2026-55438

It was discovered that the nghttp2 nghttpx proxy incorrectly handled HTTP/1.1 Upgrade requests that included a Content-Length header and body. A remote attacker could possibly use this issue to perform HTTP request and response smuggling attacks against backend services...

6.3CVSS6.1AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.24 views

PT-2026-55319

Name of the Vulnerable Software and Affected Versions Azure OpenAI affected versions not specified Description A server-side request forgery SSRF issue exists in Azure OpenAI. This flaw allows an authorized attacker to elevate privileges over a network. SSRF is a vulnerability where an attacker c...

9.9CVSS5.9AI score0.00608EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.19 views

PT-2026-55268

Content removed...

5.3CVSS5.8AI score0.00331EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.37 views

PT-2026-55321

Name of the Vulnerable Software and Affected Versions Microsoft Entra Provisioning Service SyncFabric affected versions not specified Description Server-side request forgery SSRF in the Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a...

9.9CVSS5.9AI score0.00653EPSS
SaveExploits0References12
Debian CVE
Debian CVE
added 2026/07/02 12:0 a.m.14 views

CVE-2026-38969

Removed by vendor...

5AI score0.00352EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/02 12:0 a.m.12 views

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-12505)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-12505 advisory. - A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop...

7.8CVSS6.1AI score0.00157EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/01 11:16 p.m.10 views

CVE-2026-14440

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design e.g. 'issue "letsencrypt.org"' without parameters. On Universal SSL zones,...

7.6CVSS0.00195EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/07/01 11:13 p.m.9 views

CVE-2026-55791

Craft CMS is a content management system CMS. Versions 4.0.0-RC1 and above, prior to 4.18.0 and 5.0.0-RC1, and above, prior to 5.10.0, are vulnerable to Server-Side Request Forgery SSRF and Arbitrary JavaScript Injection through the /actions/app/resource-js endpoint. By exploiting the default...

6.9CVSS5.8AI score0.00331EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
added 2026/07/01 9:6 p.m.10 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the realm parameter in the authentication process. An attacker can cause the client to send requests to internal network endpoints or transmit credentials over an unencrypted channel by controlling t...

3.1CVSS6AI score0.00211EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/01 8:56 p.m.11 views

GHSA-28PQ-6QXG-WG5R Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)

Summary The fix for GHSA-fpxj-m5q8-fphw CVE-2026-45710, "Mailpit: Set a default 50MB p/m limit to prevent DoS via unlimited SMTP DATA and /api/v1/send body sizes" wrapped only POST /api/v1/send with http.MaxBytesReader. The four other Mailpit JSON-body API endpoints PUT /api/v1/messages...

5.3CVSS5.9AI score0.00421EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/07/01 8:45 p.m.12 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the helm.repo process when the helmRepoURLRegex field is not set on a GitRepo resource. An attacker with git push access to a monitored repository can cause the system to forward Helm authentication...

5.3CVSS6.1AI score0.0033EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/01 8:45 p.m.9 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the helm.repo process when the helmRepoURLRegex field is not set on a GitRepo resource. An attacker with git push access to a monitored repository can cause the system to forward Helm authentication...

5.3CVSS6.1AI score0.0033EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/01 8:45 p.m.9 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the helm.repo process when the helmRepoURLRegex field is not set on a GitRepo resource. An attacker with git push access to a monitored repository can cause the system to forward Helm authentication...

5.3CVSS6.1AI score0.0033EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/01 8:37 p.m.14 views

MAL-2026-6713 Malicious code in polymarket-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aa9243f492d222e1bb036c8ed55fb17268bd987a63ad2ea2aa1b28e44defc3 Package is published as a Polymarket API client but its default export getPlugin performs unconditional remote code execution on use. On invocation i...

6.4AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/07/01 8:2 p.m.22 views

SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation

The HTTP /rpc endpoint has a time-of-check/time-of-use TOCTOU race condition on internal session state. When authenticated and unauthenticated requests are processed concurrently, the unauthenticated request can inherit the authenticated user's session and privileges. The /rpc endpoint is the...

5.8AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/07/01 6:16 p.m.13 views

GHSA-PVRJ-8CG3-J5F8 auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback

SSRF Protection Bypass via IPv4-mapped IPv6 Loopback Summary auth-fetch-mcp v3.0.1 implements SSRF protection in assertSafeUrl src/security.ts to block requests to private and loopback addresses. However, the isPrivateV6 function fails to detect IPv4-mapped IPv6 loopback addresses in their...

7.4CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/01 6:16 p.m.10 views

Server-side Request Forgery (SSRF)

Overview auth-fetch-mcp is a MCP server that lets AI read Notion, Google Docs, Jira & any login-protected page via a real browser Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the isPrivateV6 function, which fails to properly detect IPv4-mapped IPv6...

7.4CVSS6AI score
SaveExploits0References2
Rows per page
Query Builder