Lucene search
+L

20833 matches found

Cvelist
Cvelist
added 5 days ago40 views

CVE-2026-18186 A stored format string vulnerability was found in the FTP Backup on the ADM

A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...

7.1CVSS0.00226EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago14 views

CVE-2026-18186

CVE-2026-18186 affects the ADM platform’s FTP Backup component. The issue is a stored format-string vulnerability where user-controlled backup configuration data may be written into a task log and later processed via an unsafe format-string operation. Exploitation can lead to memory information d...

7.1CVSS5.8AI score0.00226EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 5 days ago8 views

json: Ruby JSON: Denial of service via heap buffer overflow with oversized streamed objects

A flaw was found in Ruby JSON. A remote attacker could exploit a heap buffer overflow vulnerability by providing an oversized streamed object containing a specially crafted string. This could lead to a reliable process crash, resulting in a denial of service DoS for the affected system...

3.7CVSS6.1AI score0.00301EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 5 days ago8 views

PT-2026-66605

Name of the Vulnerable Software and Affected Versions re2 versions prior to 1.25.2 Description The String.prototype.match implementation fails to advance its native matching cursor in lib/match.cc when using a global RE2 pattern that can match an empty string. This behavior results in an infinite...

6.2CVSS5.4AI score0.00129EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 6 days ago11 views

swagger-typescript-api vulnerable to code injection via unescaped enum string values

Summary swagger-typescript-api interpolates components.schemas..enumi string values into the body of generated TypeScript enum declarations without escaping. A malicious enum value can close the enclosing string literal, terminate the enum body, and inject a bare-block IIFE that executes at modul...

8.3CVSS6.4AI score0.0027EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 6 days ago7 views

CVE-2026-12895

SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2. The application constructs SQL queries through direct string interpolation using str.format without employing parameterized queries, allowing the name docname of a Supplier record containing SQL metacharacters to be...

7.1CVSS0.00216EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 6 days ago8 views

CVE-2026-12895

SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2. The application constructs SQL queries through direct string interpolation using str.format without employing parameterized queries, allowing the name docname of a Supplier record containing SQL metacharacters to be...

7.1CVSS6.2AI score0.00216EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 6 days ago4 views

CVE-2026-24033 Apache Traffic Server: Request smuggling via chunked extension quoted-string parsing

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3, from 9.0.0 through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the iss...

7.2CVSS5.8AI score0.00168EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added last week7 views

hono: Hono - Timing Attack in basicAuth and bearerAuth Middleware

A flaw was found in Hono. This vulnerability, a timing attack, exists in the basicAuth and bearerAuth middlewares due to a non-constant-time string comparison. A remote attacker could exploit the early termination of string equality checks to infer valid credentials by precisely measuring respons...

6.3CVSS5.8AI score0.00229EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added last week7 views

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

8.7CVSS6AI score0.00348EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added last week7 views

CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

7.6CVSS6.1AI score0.00244EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added last week5 views

CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

7.6CVSS6.2AI score0.00244EPSS
SaveExploits0References4
NVD
NVD
added last week8 views

CVE-2026-51267

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

0.00542EPSS
SaveExploits0
SUSE Linux
SUSE Linux
added last week6 views

Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn

This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: Add SystemProperties.getPathString, Supplier Add JavaVersion.JAVA25 Add JavaVersion.JAVA26 Add SystemUtils.ISJAVA25 Add...

5.7CVSS6.9AI score0.02164EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added last week7 views

CVE-2026-66749

Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server by supplying a valid 24-character hex string room parameter that matches no document in the database. Attackers can send a crafted GET /messages request causing an...

7.1CVSS5.9AI score0.00311EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added last week4 views

CVE-2026-54696

A flaw was found in Ruby JSON. A remote attacker could exploit a heap buffer overflow vulnerability by providing an oversized streamed object containing a specially crafted string. This could lead to a reliable process crash, resulting in a denial of service DoS for the affected system...

3.7CVSS6.1AI score0.00301EPSS
SaveExploits0References5
OSV
OSV
added last week4 views

CVE-2026-67174 DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element resolution and icon-rendering utilities. The tryResolveHTMLElement function treated any resolved string as HTML markup by assigning it to a element through innerHTML. Strings derived from untrusted graph...

9.2CVSS6AI score
SaveExploits0References4
CVE
CVE
added last week19 views

CVE-2026-67174

Pivotick is affected by a DOM-based XSS in its generic UI element resolution and icon rendering utilities. The tryResolveHTMLElement function assigns resolved strings to a template via innerHTML, allowing untrusted graph properties or rendering callbacks to inject arbitrary HTML/SVG into the live...

9.2CVSS6AI score0.00385EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added last week8 views

Security update for glib2

This update for glib2 fixes the following issues: CVE-2026-58010: error during gvstupleisnormal alignment validation could cause a 1-byte out-of-bounds read bsc1270009. CVE-2026-58011: invalid GDateTime in gdatetimegetymd could trigger a 2-byte out-of-bounds read bsc1270010. CVE-2026-58012: raw...

7.5CVSS7.2AI score0.00511EPSS
SaveExploits6References24
OSV
OSV
added 2026/07/28 9:8 a.m.4 views

BIT-THRIFT-2026-58389 Apache Thrift: Rust binary protocol non-strict path missing string size limit

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.01097EPSS
SaveExploits0References4
Rows per page
Query Builder