Lucene search
+L

45 matches found

SUSE CVE
SUSE CVE
•added 2026/10/05 4:28 p.m.•5 views

SUSE CVE-2026-105083

ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in '' makes the parser consume the rest of the file, so no policy rules are applied a...

4.2CVSS5.7AI score0.00113EPSS
SaveExploits0References5
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•33 views

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, the CUPS daemon cupsd contained a authorization bypass vulnerability due to case-insensitive username comparisons during authorization checks. This vulnerability...

6.3CVSS5.5AI score0.0026EPSS
SaveExploits1References2
NVD
NVD
•added 2026/10/03 2:17 a.m.•24 views

CVE-2026-105083

ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in '' makes the parser consume the rest of the file, so no policy rules are applied a...

4.2CVSS0.00113EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/10/03 2:17 a.m.•10 views

CVE-2026-105083

ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in '' makes the parser consume the rest of the file, so no policy rules are applied a...

3.9CVSS5.6AI score0.00113EPSS
SaveExploits0References9
osv_ubuntu
osv_ubuntu
•added 2026/10/03 2:17 a.m.•24 views

UBUNTU-CVE-2026-105083

ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in '' makes the parser consume the rest of the file, so no policy rules are applied a...

4.2CVSS5.7AI score0.00113EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/10/03 1:11 a.m.•28 views

EUVD-2026-91870

ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in '' makes the parser consume the rest of the file, so no policy rules are applied a...

3.9CVSS5.7AI score0.00113EPSS
SaveExploits0References8
CVE
CVE
•added 2026/10/03 1:11 a.m.•49 views

CVE-2026-105083

ImageMagick versions before 7.1.2-32 and 6.9.13-57 are vulnerable to a Protection Mechanism Failure in the LoadPolicyCache process. An attacker can bypass security policy enforcement by crafting a policy.xml file containing an alternate DOCTYPE that does not end in ]>. This causes the parser t...

4.2CVSS5.7AI score0.00113EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/03 12:00 a.m.•12 views

CVE-2026-105083: Protection Mechanism Failure

ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in '' makes the parser consume the rest of the file, so no policy rules are applied a...

4.2CVSS5.7AI score0.00113EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-105083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml us...

4.2CVSS5.7AI score0.00113EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/03 12:00 a.m.•16 views

PT-2026-104477

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 ImageMagick versions prior to 6.9.13-57 Description A security policy bypass exists in the LoadPolicyCache function. This occurs when the policy.xml file utilizes an alternate DOCTYPE that does not end in...

6.5CVSS5.8AI score0.00348EPSS
SaveExploits0References102
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•10 views

CentOS Linux 6 [TuxCare] Security Update: cups / cups-devel / cups-libs / cups-lpd / cups-php (CENTOS6:CLSA-2026:1778142413)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1778142413 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon...

6.3CVSS5.5AI score0.0026EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•8 views

Rocky Linux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.6:CLSA-2026:1779436377)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779436377 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS...

6.3CVSS5.5AI score0.0026EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•15 views

CentOS Linux 7 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS7:CLSA-2026:1778662564)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778662564 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon...

6.3CVSS5.5AI score0.0026EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/07/14 12:31 a.m.•23 views

EUVD-2026-43570

OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip cross-provider requester...

8.1CVSS5.9AI score0.00415EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/13 10:16 p.m.•35 views

CVE-2026-62198

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

5.4CVSS0.00271EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/13 10:16 p.m.•25 views

CVE-2026-62192

OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip cross-provider requester...

8.1CVSS0.00415EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/13 9:30 p.m.•24 views

CVE-2026-62198 OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

5.3CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Mend
Mend
•added 2026/07/13 9:30 p.m.•8 views

CVE-2026-62198

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/07/13 9:30 p.m.•25 views

CVE-2026-62192 OpenClaw 2026.6.6 < 2026.6.9 Authorization Bypass

OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip cross-provider requester...

7.2CVSS5.9AI score0.00415EPSS
SaveExploits0References5
CVE
CVE
•added 2026/07/13 9:30 p.m.•54 views

CVE-2026-62192

OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip cross-provider requester authorizat...

8.1CVSS5.9AI score0.00415EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder