Lucene search
+L

10231 matches found

OSV
OSV
added 2026/02/11 3:13 p.m.7 views

GHSA-2C4M-G7RX-63Q7 set-in Affected by Prototype Pollution

Summary A prototype pollution vulnerability exists in the the npm package set-in =2.0.1. Despite a previous fix that attempted to mitigate prototype pollution by checking whether user input contained a forbidden key, it is still possible to pollute Object.prototype via a crafted input using...

9.4CVSS6.1AI score0.00461EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2026/02/11 3:13 p.m.19 views

set-in Affected by Prototype Pollution

Summary A prototype pollution vulnerability exists in the the npm package set-in =2.0.1. Despite a previous fix that attempted to mitigate prototype pollution by checking whether user input contained a forbidden key, it is still possible to pollute Object.prototype via a crafted input using...

9.8CVSS6AI score0.00461EPSS
SaveExploits1References8Affected Software1
SUSE CVE
SUSE CVE
added 2026/02/11 12:23 a.m.9 views

SUSE CVE-2026-25646

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

7CVSS5.6AI score0.00955EPSS
SaveExploits1References26
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.16 views

set-in 安全漏洞

set-in is a JavaScript library developed by Mikey personally. Versions of set-in 2.0.1 to 2.0.5 had security vulnerabilities due to insufficient input validation. These vulnerabilities could allow for attacks through specially crafted input that contaminated the Object.prototype prototype, leadin...

9.8CVSS5.8AI score0.00461EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.11 views

PT-2026-7723

Name of the Vulnerable Software and Affected Versions set-in versions 2.0.1 through 2.0.4 Description set-in is a Node.js package that sets values within nested associative structures given an array of keys. A flaw exists where, despite a previous attempt to prevent prototype pollution by checkin...

9.8CVSS6.4AI score0.00461EPSS
SaveExploits1References16
NVD
NVD
added 2026/02/10 7:15 p.m.13 views

CVE-2026-1847

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...

7.5CVSS0.00243EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/10 7:15 p.m.11 views

UBUNTU-CVE-2026-1847

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...

7.5CVSS5.8AI score0.00243EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/02/10 7:15 p.m.9 views

CVE-2026-1847

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...

7.5CVSS5.9AI score0.00243EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/10 6:16 p.m.15 views

AZL-77460 CVE-2026-25646 affecting package libpng12 1.2.57-16

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6AI score0.00955EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/02/10 6:16 p.m.6 views

CVE-2026-1847 MongoDB Server may crash when inserting large documents

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...

7.1CVSS5.5AI score0.00243EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 6:16 p.m.6 views

CVE-2026-1847

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...

7.1CVSS5.5AI score0.00243EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/02/10 6:16 p.m.47 views

CVE-2026-1847

CVE-2026-1847 concerns MongoDB replica sets: inserting certain large documents can cause secondaries to fail fetching the oplog from the primary, potentially stalling replication and leading to a server crash. The entry provides CVSS 3.1 (base 6.5, MEDIUM) with network attack vector and low compl...

7.5CVSS5.5AI score0.00243EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/02/10 6:16 p.m.6 views

CVE-2026-1847 MongoDB Server may crash when inserting large documents

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...

7.1CVSS6.6AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/10 6:16 p.m.31 views

CVE-2026-1847 MongoDB Server may crash when inserting large documents

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...

7.1CVSS0.00243EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/02/10 6:16 p.m.16 views

MongoDB Server may crash when inserting large documents

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...

7.5CVSS5.5AI score0.00243EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/02/10 5:4 p.m.23 views

CVE-2026-25646

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS5.5AI score0.00955EPSS
SaveExploits1References57
Snyk
Snyk
added 2026/02/10 5:4 p.m.5 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the pngsetquantize function. An attacker can execute arbitrary code or cause a denial of service by providing images with no histogram and the number of colors in the palette is more than twice the maximum support...

8.8CVSS6.2AI score0.00955EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2026/02/10 5:4 p.m.10 views

CVE-2026-25646

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of...

8.3CVSS6.7AI score0.00955EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2026/02/10 4:0 p.m.22 views

Description of the security update for SharePoint Server 2019: February 10, 2026 (KB5002834)

None None...

7.5CVSS7AI score0.03635EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/10 7:33 a.m.11 views

CVE-2026-2218

A vulnerability was determined in D-Link DCS-933L up to 1.14.11. This affects an unknown function of the file /setSystemAdmin of the component alphapd. This manipulation of the argument AdminID causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly...

8.8CVSS5.2AI score0.03796EPSS
SaveExploits1References1
Rows per page
Query Builder