Lucene search
+L

751 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•11 views

Astra Linux – Vulnerability in libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Starting from version 1.6.0 until 1.6.51, there was a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread, when processing...

7.1CVSS6.7AI score0.00259EPSS
SaveExploits4References2
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•20 views

Astra Linux – Vulnerability in qt4-x11, qtbase-opensource-src

A issue was discovered in Qt before version 5.15.15, in versions 6.x before 6.2.9, and in versions 6.3.x through 6.5.x before 6.5.1. When an SVG file containing an image is rendered, a QTextLayout buffer overflow can occur...

7.5CVSS7.4AI score0.01287EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/30 3:35 a.m.•22 views

ROOT-OS-DEBIAN-13-CVE-2026-53106 CVE-2026-53106 in linux - Patched by Root

Root has patched CVE-2026-53106 in the linux package for Root:Debian:13. Multiple fixed versions available...

5.5CVSS5.6AI score0.00143EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/07 12:00 a.m.•21 views

Fedora 43 : abrt (2026-cccf5985b5)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cccf5985b5 advisory. Update to 2.17.9 Resolves: 2484614 Resolves: CVE-2026-54230 Resolves: CVE-2026-54231 Resolves: CVE-2026-54228 Resolves: CVE-2026-54229 Tenable has...

7.8CVSS6AI score0.00228EPSS
SaveExploits0References5
Chainguard
Chainguard
•added 2026/08/05 8:23 p.m.•22 views

CVE-2026-17656 vulnerabilities

Vulnerabilities for packages: chromium...

9.6CVSS8AI score0.00345EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/08/04 9:27 p.m.•13 views

CVE-2026-70590 Ghost: Blind Password Hash Disclosure in Ghost Admin API

Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the Ghost Admin API. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification...

4.8CVSS5.6AI score0.00323EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/04 2:52 p.m.•16 views

CLSA-2026-1785291220 TuxCare security update for request (1 CVE)

TuxCare rebuilt request to address 1 CVE. Fixed in 2.65.0-tuxcare.1...

7.1CVSS6.3AI score0.02603EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/08/04 12:00 a.m.•15 views

Amazon Linux 2023 : python3-tornado (ALAS2023-2026-2016)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2016 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving...

7.7CVSS6AI score0.00609EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/08/02 11:32 p.m.•14 views

CVE-2026-3245

A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...

7.7CVSS6AI score0.00711EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/31 4:39 p.m.•15 views

CVE-2026-51249

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/07/29 6:00 p.m.•17 views

EUVD-2026-50443

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controll...

6.9CVSS5.8AI score0.00609EPSS
SaveExploits0References3
Circl
Circl
•added 2026/07/23 3:00 p.m.•19 views

CVE-2026-65606

creationtimestamp| type| source ---|---|--- 2026-07-23 15:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd43i7i3i2a...

9.6CVSS5.8AI score0.0079EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/23 11:18 a.m.•19 views

EUVD-2026-48096

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

5.3CVSS5.3AI score0.00313EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/23 11:18 a.m.•14 views

CVE-2026-65485

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

5.3CVSS5.2AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•21 views

PT-2026-63906

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

5.3CVSS5.2AI score0.00313EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/21 10:18 p.m.•16 views

CVE-2026-60712

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications...

6.5CVSS0.00154EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/21 10:17 p.m.•15 views

CVE-2026-60584

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: CSV Management. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation...

7.6CVSS0.00321EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/21 10:17 p.m.•18 views

CVE-2026-60433

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Integration. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Transportation Managemen...

6.5CVSS0.00407EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/20 10:04 p.m.•26 views

EUVD-2026-42311

protobufjs: Text Format string map parsing can mutate returned map object prototype...

4.8CVSS6.7AI score0.00349EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/07/20 6:57 p.m.•13 views

EUVD-2025-203029

Tornado: Quadratic DoS via Crafted Multipart Parameters...

7.5CVSS7.3AI score0.00535EPSS
SaveExploits0References5
Rows per page
Query Builder