Lucene search
+L

77968 matches found

osv_root
osv_root
•added 2026/10/16 7:51 a.m.•30 views

ROOT-APP-MAVEN-CVE-2026-54517 CVE-2026-54517 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54517 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

5.3CVSS6.1AI score0.00384EPSS
SaveExploits0
osv_root
osv_root
•added 2026/10/16 7:51 a.m.•41 views

ROOT-APP-MAVEN-CVE-2026-54514 CVE-2026-54514 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54514 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

5.3CVSS5.6AI score0.00368EPSS
SaveExploits0
osv_root
osv_root
•added 2026/10/16 7:31 a.m.•27 views

ROOT-APP-PYPI-CVE-2026-22702 CVE-2026-22702 in virtualenv - Patched by Root

Root has patched CVE-2026-22702 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

4.5CVSS6AI score0.001EPSS
SaveExploits0
osv_debian
osv_debian
•added 2026/10/16 7:17 a.m.•17 views

DEBIAN-CVE-2026-104715

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

7.8CVSS7.1AI score0.00265EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/10/16 7:00 a.m.•17 views

Exploit for Use After Free in Linux Linux_Kernel

Research on KernelSU Root during the Operation of Honor MagicP...

7.8CVSS7.2AI score0.00891EPSS
SaveExploits144
EUVD
EUVD
•added 2026/10/16 6:47 a.m.•12 views

EUVD-2026-102803

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

7.8CVSS7.2AI score0.00265EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2026/10/16 6:47 a.m.•12 views

CVE-2026-104715

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

7.8CVSS7.1AI score0.00265EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/10/16 6:47 a.m.•10 views

CVE-2026-104715

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

7.8CVSS7.2AI score0.00265EPSS
SaveExploits1References3
NCSC
NCSC
•added 2026/10/16 6:11 a.m.•32 views

Vulnerabilities in Juniper Networks Junos OS

Juniper has identified several vulnerabilities in Junos OS. These vulnerabilities exist in various components of Junos OS, including the VXLAN Gateway Daemon vgd, kmd on MX Series routers, the SDK service with JDAF routing, the TWAMP client rmopd service, the gRPC library, the ipfd daemon on SRX...

9.8CVSS8.7AI score0.0075EPSS
SaveExploits0References3
osv_root
osv_root
•added 2026/10/16 6:07 a.m.•19 views

ROOT-OS-DEBIAN-12-CVE-2026-46470 CVE-2026-46470 in gst-plugins-good1.0 - Patched by Root

Root has patched CVE-2026-46470 in the gst-plugins-good1.0 package for Root:Debian:12. Multiple fixed versions available...

9.1CVSS7.2AI score0.00208EPSS
SaveExploits0
NVD
NVD
•added 2026/10/16 4:18 a.m.•16 views

CVE-2026-111448

Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct...

3.7CVSS0.00208EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/16 3:41 a.m.•4 views

CVE-2026-111448

Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct...

3.7CVSS5.9AI score
SaveExploits0References4
GithubExploit
GithubExploit
•added 2026/10/16 2:09 a.m.•35 views

Exploit for Use After Free in Linux Linux_Kernel

Samsung Root Kit — Offline Version Android App DF Chain Prefe...

7.8CVSS7.2AI score0.00891EPSS
SaveExploits144
EUVD
EUVD
•added 2026/10/16 12:31 a.m.•9 views

EUVD-2026-102472

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

9.8CVSS6.5AI score0.00561EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•5 views

CVE-2026-96425: Incorrect Permission Assignment for Critical Resource

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...

5.5CVSS6AI score0.00105EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•4 views

CVE-2026-111448: Improper Handling of Case Sensitivity

Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct...

3.7CVSS5.9AI score0.00208EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2026/10/16 12:00 a.m.•27 views

VulnCheck KEV: CVE-2026-111357

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026...

7CVSS5.8AI score0.00247EPSS
SaveIn wildExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•10 views

PT-2026-115483

Name of the Vulnerable Software and Affected Versions cifs-utils affected versions not specified Description A flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file...

7.8CVSS7.3AI score0.00265EPSS
SaveExploits1References24
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•16 views

Wazuh check_remote_commands() Code Execution Root Privileges

The vulnerability of the checkremotecommands function on the security monitoring and threat detection platform Wazuh is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute...

9.1CVSS7.6AI score0.00458EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•8 views

Nginx UI Code Execution

The vulnerabilities in the api/config/add.go, api/config/modify.go, and mcp/config/configmodify.go scripts of the Nginx UI user interface are related to insufficient validation of input data. Exploiting these vulnerabilities allows an attacker who operates remotely to execute arbitrary code,...

9CVSS6.9AI score0.00478EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder