Lucene search
+L

26736 matches found

Vulnrichment
Vulnrichment
•added 2026/07/08 7:36 a.m.•11 views

CVE-2026-57243 Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash...

6.1CVSS5.9AI score0.00153EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/08 7:36 a.m.•27 views

EUVD-2026-42208

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash...

6.1CVSS6AI score0.00153EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•38 views

PT-2026-56342

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description During page opening and form formatting, a JavaScript reentrancy—a situation where a function is interrupted and called again before its first execution completes—leads to an...

6.1CVSS6.2AI score0.00153EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/07/08 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-41521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any...

9.1CVSS7.9AI score0.00671EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/08 12:00 a.m.•29 views

Linux Distros Unpatched Vulnerability : CVE-2026-55191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend...

9.8CVSS7.8AI score0.0083EPSS
SaveExploits1References3
Circl
Circl
•added 2026/07/07 8:43 p.m.•16 views

CVE-2026-58468

creationtimestamp| type| source ---|---|--- 2026-07-07 20:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hsu7ftx2t...

5.5CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Circl
Circl
•added 2026/07/07 6:06 p.m.•21 views

CVE-2026-48062

creationtimestamp| type| source ---|---|--- 2026-07-07 18:06:56+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116880021750277483 2026-07-17 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquojfihof2j 2026-07-18 09:00:47+00:00| seen|...

9.8CVSS5.8AI score0.00775EPSS
SaveExploits0References5
Circl
Circl
•added 2026/07/07 4:45 p.m.•34 views

CVE-2026-21383

creationtimestamp| type| source ---|---|--- 2026-07-07 16:45:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-qualcomm-9 2026-07-16 04:45:55+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260716...

7.1CVSS5.8AI score0.00101EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/07/07 2:34 p.m.•30 views

LNbits improperly handles potential network and payment failures when using Eclair backend

SummaryPaying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. DetailsUsing blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...

8.1CVSS7.4AI score0.00602EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/07/07 2:34 p.m.•26 views

PYSEC-2026-1580 LNbits improperly handles potential network and payment failures when using Eclair backend

Summary Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. Details Using blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...

8.1CVSS7.4AI score0.00602EPSS
SaveExploits0References5
Circl
Circl
•added 2026/07/07 12:01 a.m.•17 views

GHSA-V5WF-J8J4-77H7

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgei5er2s...

5.9AI score
SaveExploits0References1
Circl
Circl
•added 2026/07/07 12:01 a.m.•15 views

GHSA-V64M-XXFW-HRV6

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...

5.9AI score
SaveExploits0References1
Circl
Circl
•added 2026/07/06 8:41 p.m.•13 views

GHSA-X76W-8C62-48MG

creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:52+00:00| seen| https://gist.github.com/alon710/b825af035610849f3142d75d4e2989fc...

5.9AI score
SaveExploits0References1
Circl
Circl
•added 2026/07/06 8:26 p.m.•19 views

CVE-2026-55379

creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...

7.5CVSS7.1AI score0.00421EPSS
SaveExploits1References2
OSV
OSV
•added 2026/07/06 7:27 p.m.•21 views

GHSA-4X34-CHG5-MWJJ chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

In Chmoder::chmod the recursive branch overwrites the running result instead of accumulating it, so the exit code reflects only the last file processed: if self.recursive r = self.walkdirwithcontextfile, true; // overwrites r else r = self.chmodfilefile.andr; PoC: GNU returns 1 when a file fails;...

5.5CVSS6.1AI score0.00157EPSS
SaveExploits0References6
Circl
Circl
•added 2026/07/06 7:14 p.m.•23 views

CVE-2026-24012

creationtimestamp| type| source ---|---|--- 2026-07-06 19:14:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyseyhbm32c...

7.5CVSS5.8AI score0.0074EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/07/06 3:02 p.m.•15 views

rabbitmq-server: RabbitMQ: Information Disclosure via Cross-Site Scripting in Federation Management

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

5.7CVSS5.7AI score0.00252EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
•added 2026/07/06 3:02 p.m.•18 views

rabbitmq-server: RabbitMQ: Information Disclosure via Cross-Site Scripting in Federation Management

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

5.7CVSS5.7AI score0.00252EPSS
SaveExploits1References10
SUSE Linux
SUSE Linux
•added 2026/07/06 2:12 p.m.•11 views

Security update for postfix

This update for postfix fixes the following issue CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

8.2CVSS7.3AI score0.00884EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/06 2:12 p.m.•16 views

SUSE-SU-2026:2781-1 Security update for postfix

This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062...

7.5CVSS7.3AI score0.00884EPSS
SaveExploits0References3
Rows per page
Query Builder