Lucene search
K

13 matches found

NVD
NVD
added 2026/05/08 11:16 p.m.5 views

CVE-2026-42302

FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...

9.8CVSS0.00513EPSS
Exploits0References4
OSV
OSV
added 2026/05/08 3:16 p.m.2 views

UBUNTU-CVE-2026-43378

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2open The opinfo pointer obtained via rcudereferencefp-fopinfo is dereferenced after rcureadunlock, creating a use-after-free window...

9.8CVSS5.7AI score0.00028EPSS
Exploits0References9
vulnersOsv
vulnersOsv
added 2026/03/24 4:34 p.m.5 views

@openinc/parse-server-opendash (>=4.0.0 <=4.0.4) potentially affected by CVE-2026-33527 via parse-server (>=9.6.0-alpha.37 <=9.6.0-alpha.43)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.4 Source cves: CVE-2026-33527 Source advisory: SNYK:JS-PARSESERVER-15763383...

5.3CVSS5.8AI score0.00014EPSS
Exploits0
Cvelist
Cvelist
added 2026/03/05 3:49 p.m.30 views

CVE-2026-30790 RustDesk Server Controls All Handshake Entropy (Salt/Challenge), Enabling Offline Brute-Force

Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux Peer authentication, API login modules, rustdesk-server RustDesk Server OSS...

9.3CVSS0.0016EPSS
Exploits1References3
OSV
OSV
added 2026/01/13 4:16 p.m.0 views

UBUNTU-CVE-2025-68821

In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 "fuse: allocate ff-releaseargs only if release is needed" skips allocating ff-releaseargs if the server does not implement open. However in doing so, fusepreparerelease now...

5.9AI score0.00047EPSS
Exploits0References32
CVE
CVE
added 2026/01/13 3:29 p.m.6 views

CVE-2025-68821

CVE-2025-68821 – Linux kernel fuse deadlock fix Affected component: fuse subsystem in the Linux kernel (FUSE inode/file handling).Root cause: a kernel commit altered release preparation to avoid allocating ff-&gt;release_args when the server does not implement open, which led fuse_prepare_release...

5.7AI score0.00047EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-39968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause...

6.1CVSS6.5AI score0.0048EPSS
Exploits0References3
CNVD
CNVD
added 2022/03/31 12:0 a.m.20 views

Jenkins Proxmox Plugin Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Proxmox Plugin 0.7.0 and earlier...

6.5CVSS2.2AI score0.00047EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/07/11 12:0 a.m.8 views

CVE-2018-8326

A cross-site-scripting XSS vulnerability exists when an open source customization for Microsoft Active Directory Federation Services AD FS does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Service...

5.4AI score0.0067EPSS
Exploits0References3
OSV
OSV
added 2018/04/03 10:29 p.m.2 views

ALPINE-CVE-2018-8779

In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket...

7.5CVSS6.9AI score0.01284EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/07/17 1:18 p.m.26 views

CVE-2017-1000029

Oracle, GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication...

7.5CVSS7.1AI score0.68992EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2017/07/17 1:18 p.m.26 views

CVE-2017-1000030

Oracle, GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface...

9.8CVSS7.2AI score0.04204EPSS
Exploits0References2
exploitpack
exploitpack
added 2015/08/27 12:0 a.m.45 views

Oracle GlassFish Server 4.1 - Directory Traversal

Oracle GlassFish Server 4.1 - Directory Traversal Trustwave SpiderLabs Security Advisory TWSL2015-016: Path Traversal in Oracle GlassFish Server Open Source Edition Published: 08/27/2015 Version: 1.0 Vendor: Oracle Corporation Project sponsored by Oracle Product: GlassFish Server Open Source...

0.3AI score
Exploits0
Rows per page
Query Builder