Lucene search
+L

30758 matches found

EUVD
EUVD
added 2026/07/16 5:31 a.m.25 views

EUVD-2026-44869

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

9.2CVSS6.2AI score0.00177EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/16 12:0 a.m.10 views

RockyLinux 8 : python3.12 (RLSA-2026:39893)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39893 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

8.7CVSS5.6AI score0.00551EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/16 12:0 a.m.23 views

PT-2026-60425

Name of the Vulnerable Software and Affected Versions Snowflake Connector for Python versions prior to 4.7.1 Snowflake Connector for Python versions prior to 3.18.1 Description Improper TLS hostname verification allows a network-positioned attacker to bypass certificate hostname validation on HTT...

9.2CVSS6.1AI score0.00177EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/07/16 12:0 a.m.9 views

Oracle Linux 8 : python3.12 (ELSA-2026-39893)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39893 advisory. 3.12.13-3 - Security fix for CVE-2026-15308 Resolves: RHEL-193776 Tenable has extracted the preceding description block directly from the Oracle Linux security...

8.7CVSS5.6AI score0.00551EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2026/07/16 12:0 a.m.6 views

KLA91157 Multiple vulnerability in Microsoft Apps

Multiple vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-59117 Exploitation CVE list CVE-2026-59117 critical KB list Solution Install necessary updates from the KB...

7.5CVSS7.8AI score0.00442EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 10:55 p.m.14 views

Allocation of Resources Without Limits or Throttling

Overview ddtrace is a Datadog APM client library Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the BaggageHeader.extract parser in ddtrace/propagation/http.py. An attacker can force unbounded CPU and memory use by sending a reques...

8.7CVSS5.5AI score0.00441EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/15 8:47 p.m.37 views

CVE-2026-33684 AVideo's Privilege AVideo: Escalation via Unguarded Permission Parameters in signUp API Allows Self-Granting Upload/Stream/Meet Permissions

WWBN AVideo is an open source video platform. Prior to version 29.0, Privilege Escalation is possible through unguarded permission parameters in signUp API, which allows any user who can solve a CAPTCHA to self-grant elevated permissions during account registration. The setapisignUp method in the...

5.3CVSS0.00208EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/15 7:17 p.m.11 views

CVE-2026-46421

The SAP Cloud Application Programming Model is a tool for building enterprise-grade cloud applications, and cap-js/cds-dbs is the monorepo for SQL database services for that tool. On April 29, 2026, compromised versions of @cap-js/[email protected], @cap-js/[email protected], and @cap-js/[email protected]....

9.3CVSS0.00384EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/15 5:3 p.m.22 views

CVE-2026-59255

BloodHound (through 9.4.0) contains a missing authorization flaw in the custom-nodes API endpoints that lets any authenticated user modify the global graph schema by calling unprotected POST, PUT, and DELETE operations. The issue affects the custom-nodes management API and can affect all users/te...

7.1CVSS6.1AI score0.00246EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/15 2:36 p.m.6 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

1.8CVSS5.9AI score0.00092EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.7 views

Symlink Attack

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

4.8CVSS5.9AI score0.00124EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.10 views

Symlink Attack

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.9AI score0.00124EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

2.9CVSS5.9AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

2.9CVSS5.9AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.8 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

2.9CVSS5.9AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.9 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.9AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.8 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.9AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.5 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.9CVSS5.9AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.25 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.9AI score0.00222EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.8 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.9AI score0.00222EPSS
SaveExploits0References2
Rows per page
Query Builder