Lucene search
+L

12993 matches found

RedHat Linux
RedHat Linux
added 2026/08/10 4:56 p.m.12 views

openjdk: Improve certification checking (Oracle CPU 2026-07)

A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares .foo.com and secret.foo.com literally and returns NAMESAMETYPE, so...

6.5CVSS7.2AI score0.00287EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/10 3:48 p.m.64 views

CVE-2026-72721

Findings: CVE-2026-72721 affects Discourse prior to versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0. The root cause is a case-sensitive comparison in Onebox::DomainChecker.is_blocked?, which compares hostnames and SiteSetting.blocked_onebox_domains entries. This allows an attacker to bypass c...

5.3CVSS5.3AI score0.00429EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/10 1:20 p.m.9 views

UBUNTU-CVE-2026-68267

In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default...

5.2AI score0.00168EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/07 9:17 p.m.14 views

CVE-2026-71381

Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this...

4CVSS0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/07 8:26 p.m.35 views

CVE-2026-71381 Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization

Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this...

4CVSS0.00158EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/07 8:26 p.m.9 views

CVE-2026-71381

Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this...

4CVSS5.5AI score0.00158EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/07 8:26 p.m.92 views

CVE-2026-71381

The CVE-2026-71381 entry concerns the Adobe Genuine Software Integrity Service and an Incorrect Authorization flaw that could bypass security features, enabling an attacker with local access to obtain unauthorized limited write capabilities. The advisory notes no user interaction is required, whi...

4CVSS5.5AI score0.00158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/07 8:26 p.m.18 views

CVE-2026-71381 Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization

Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this...

4CVSS5.5AI score0.00158EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/07 8:26 p.m.15 views

EUVD-2026-54650

Adobe Genuine Software Integrity Service was affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could have leveraged this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue...

4CVSS5.4AI score0.00158EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/08/07 3:10 p.m.58 views

Smarty Security stream restriction bypass through stream: resource

smarty/smarty version 5.8.0 can read local files through PHP stream wrappers even when Smarty Security is enabled and all streams are disabled with Security::$streams = null. The bypass uses Smarty's built-in stream: resource type. A template such as: smarty include...

6.9CVSS5.5AI score0.00419EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
added 2026/08/07 3:10 p.m.10 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through the stream resource type, which allows bypassing intended security checks on PHP stream wrappers. An attacker can read arbitrary local files accessible to the PHP process by including specially crafted templa...

6.9CVSS6.3AI score0.00419EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/07 3:02 p.m.9 views

CVE-2026-62992

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 5.8.2 and 4.5.7 on the 4.x line, Security::checkDir does not fully resolve symbolic links before validating that a requested path lies within a configured secure directory. A...

6.9CVSS5.7AI score0.00364EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/07 8:16 a.m.8 views

undici vulnerable to CRLF Injection via blob-like body 'type' property

...

5.4CVSS6.8AI score0.00193EPSS
SaveExploits0
OSV
OSV
added 2026/08/06 8:45 p.m.14 views

GHSA-265M-7826-WJQM Craft CMS: Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS has an authenticated remote code execution issue in the control panel element-search condition handling. Craft cleans the outer request-controlled condition array with Component::cleanseConfig, but Conditions::createCondition later decodes and merges the JSON string in condition.config...

8.7CVSS6.2AI score0.00447EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/08/05 5:40 p.m.10 views

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

8.8CVSS6AI score0.00374EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/05 4:17 p.m.15 views

keycloak: org.keycloak.protocol.oidc: HTTP Parameter Pollution in OIDC redirect URI allows response parameter duplication - #GHI-604

A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers URIs, a remote attacker can manipulate the authentication process by crafting a special web address. If a user clicks...

4.2CVSS5.5AI score0.00322EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/05 4:17 p.m.22 views

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...

8.1CVSS6.4AI score0.00892EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/08/05 3:43 p.m.11 views

CVE-2026-69192

A flaw was found in the ip-address library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass...

8.6CVSS4.9AI score0.00366EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/05 1:15 p.m.15 views

Apache Tomcat: Apache Tomcat: Incorrect control flow in rewrite valve allows unexpected rule processing

A flaw was found in Apache Tomcat's rewrite valve. This vulnerability involves an incorrect control flow implementation where, during the processing of rewrite rules, if the first condition in an OR chain matched, subsequent non-OR conditions were unexpectedly skipped. This can lead to unintended...

7.3CVSS5.5AI score0.00624EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/05 1:15 p.m.15 views

tomcat: Apache Tomcat: Error condition not handled when configuring CRLs

A flaw was found in Apache Tomcat. When configuring Certificate Revocation Lists CRLs for a FFM presumably a specific type of connector, the system fails to detect and act upon an error condition. This oversight could lead to unexpected behavior or a security bypass, as the intended security...

9.1CVSS5.5AI score0.00545EPSS
SaveExploits0References5
Rows per page
Query Builder