Lucene search
+L

17825 matches found

EUVD
EUVD
added 6 days ago13 views

EUVD-2026-51278

Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...

9.8CVSS6.7AI score0.01097EPSS
SaveExploits0References2
CVE
CVE
added 6 days ago15 views

CVE-2026-18140

CVE-2026-18140 concerns the aws-smithy-json runtime before 0.62.7, where uncontrolled recursion in the unknown-key skip path is invoked by smithy-rs code generators from every generated struct deserializer. This may allow remote, unauthenticated actors to trigger a denial-of-service (process abor...

8.7CVSS6AI score0.00436EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 6 days ago5 views

SUSE CVE-2026-45728

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and debugMode is forcibly enabled. debugMode activates the PrettyError renderer, which on any Lua or template error respon...

7.5CVSS7.6AI score0.00303EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 6 days ago6 views

SUSE CVE-2026-46617

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, Fission runtime pods were created with ServiceAccountName: fission-fetcher, and the fission-fetcher ServiceAccount was granted...

8.7CVSS7.6AI score0.00346EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 6 days ago6 views

SUSE CVE-2026-54322

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request path, but resolved and mutated the targe...

7.7CVSS8.2AI score0.00186EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 6 days ago5 views

SUSE CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

8.2CVSS5.6AI score0.00318EPSS
SaveExploits0References3
OSV
OSV
added 6 days ago4 views

CLEANSTART-2026-RH87819 Security fixes in modelmesh-runtime-adapter 0.12.0-r1

Package modelmesh-runtime-adapter version 0.12.0-r1 fixes 18 vulnerabilities: CVE-2025-58187, CVE-2025-58188, CVE-2025-61723, CVE-2025-61725, CVE-2025-47912...

7.5CVSS5.4AI score0.00617EPSS
SaveExploits0References1
OSV
OSV
added 6 days ago5 views

ALPINE-CVE-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...

6.3CVSS6.3AI score0.00272EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 6 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-56846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects...

7.5CVSS7.2AI score0.00548EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added last week7 views

golang: cmd/compile: possible memory corruption after bound check elimination

A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially...

9.8CVSS7.1AI score0.00536EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added last week9 views

golang: cmd/compile: no-op interface conversion bypasses overlap checking

A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data...

7.1CVSS7AI score0.00261EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/28 8:36 p.m.35 views

CVE-2026-14893 IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image

IBM Observability with Instana Agent Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API...

7.3CVSS0.00334EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/28 7:23 p.m.4 views

Security Bulletin: Security Vulnerability in the IBM Java Runtime Environment (JRE) affect the 3592 Enterprise Tape Controller

Summary Vulnerabilities in in the IBM Java Runtime Environment JRE , affect the 3592 Enterprise Tape Controller. These vulnerabilities were disclosed in the Java Critical Patch Updates for July and October 2015 Vulnerability Details CVEID: CVE-2015-2613 DESCRIPTION: An unspecified vulnerability a...

5.5CVSS6.3AI score0.0381EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/07/28 1:43 p.m.9 views

CVE-2026-64646

A flaw was found in Next.js. An attacker sending specially crafted requests to a Next.js application utilizing the App Router with Server Actions configured to use the Edge runtime can cause excessive memory consumption. This can lead to a denial of service DoS due to resource exhaustion...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/28 1:39 p.m.4 views

MAL-2026-11145 Malicious code in rollup-runtime-core-polyfills (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868d4b253cfa762cd40d8064b3a99cbed00203fbed19402d5033551720690199 The package presents itself as a rollup polyfill plugin and copies the source of rollup-plugin-polyfill-node repository field points to...

5.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-55953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered ...

9.1CVSS5.5AI score0.00245EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-55737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term...

5.1CVSS5.5AI score0.00126EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:0 a.m.3 views

FreeBSD : Erlang/OTP -- TLS denial of service using invalid certificate chains (445d3f14-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445d3f14-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-r5jr-mq46-vmhw reports: A TLS/DTLS peer can cras...

8.7CVSS5.6AI score0.0035EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/27 7:17 p.m.11 views

CVE-2026-64646

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...

6.3CVSS0.00531EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/27 6:54 p.m.12 views

EUVD-2026-49401

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...

6.3CVSS5.8AI score0.00531EPSS
SaveExploits0References5
Rows per page
Query Builder