Lucene search
+L

260025 matches found

Nuclei
Nuclei
added 2 days ago97 views

Jellyfin <10.7.0 - Local File Inclusion

Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...

7.7CVSS6.6AI score0.79855EPSS
SaveExploits4References5
Wolfi
Wolfi
added 2 days ago4 views

GHSA-8R6M-32JQ-JX6Q vulnerabilities

Vulnerabilities for packages: tileserver-gl...

5.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2 days ago3 views

SUSE CVE-2026-64236

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCII2CDEFAULTBUSFREQ. However, this macro was defined in kHz 100,...

5.8AI score0.00155EPSS
SaveExploits0References2
Circl
Circl
added 3 days ago7 views

CVE-2025-71408

creationtimestamp| type| source ---|---|--- 2026-07-24 23:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrghf4fvnp2q 2026-07-25 03:29:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrgwgrya5i23...

8.5CVSS5.8AI score0.00158EPSS
SaveExploits0References2
Circl
Circl
added 3 days ago5 views

CVE-2026-66139

creationtimestamp| type| source ---|---|--- 2026-07-24 22:55:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgh4sbdvf2n...

4.8CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 3 days ago32 views

CVE-2025-71408 NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

8.5CVSS0.00158EPSS
SaveExploits0References5
Wolfi
Wolfi
added 3 days ago3 views

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: langfuse...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 3 days ago3 views

GHSA-P63J-VCC4-9VMV vulnerabilities

Vulnerabilities for packages: langfuse...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 3 days ago6 views

GHSA-C2J3-45GR-MQC4 vulnerabilities

Vulnerabilities for packages: langfuse...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 3 days ago3 views

GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: langfuse...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 3 days ago7 views

CVE-2026-64641 vulnerabilities

Vulnerabilities for packages: langfuse...

5.8AI score
SaveExploits0
Circl
Circl
added 3 days ago6 views

CVE-2026-62835

creationtimestamp| type| source ---|---|--- 2026-07-24 20:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg6gmeec42a 2026-07-24 20:45:57+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116976907530516421 2026-07-24 22:01:36+00:00| seen|...

9.3CVSS5.8AI score0.01035EPSS
SaveExploits0References7
OSV
OSV
added 3 days ago4 views

GO-2026-5208 Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown

Go Markdown has an out-of-bounds read in SmartypantsRenderer in github.com/gomarkdown/markdown...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits1References2
OSV
OSV
added 3 days ago4 views

GO-2026-5585 Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber

Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber...

6.1CVSS5.8AI score0.00212EPSS
SaveExploits1References1
Circl
Circl
added 3 days ago7 views

CVE-2026-66027

creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...

8.7CVSS5.8AI score0.00255EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 3 days ago7 views

CVE-2026-66034

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...

7.7CVSS5.9AI score0.00254EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 3 days ago4 views

SUSE CVE-2026-16805

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.00344EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago4 views

CVE-2026-64237

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

0.00165EPSS
SaveExploits0References8
EUVD
EUVD
added 3 days ago10 views

EUVD-2026-44929

Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF...

7CVSS5.8AI score0.01123EPSS
SaveExploits0References5
CVE
CVE
added 3 days ago9 views

CVE-2026-65709

CVE-2026-65709 concerns sysPass up to version 3.2.11, with a missing object-level authorization vulnerability in the JSON-RPC API. The issue allows API token holders to enumerate account metadata, overwrite passwords, and delete accounts across the entire vault without per-account access checks. ...

8.7CVSS5.9AI score0.00223EPSS
SaveExploits0References2
Rows per page
Query Builder