Lucene search
+L

4667 matches found

RedHat Linux
RedHat Linux
added 16 hours ago6 views

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature...

8.4CVSS5.9AI score0.00137EPSS
SaveExploits0References6
OSV
OSV
added 19 hours ago3 views

UBUNTU-CVE-2026-72006

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5stidxdata on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak one struct mlx5stidxdata per cycle; kmemleak flags it as unreferenced...

5.4AI score0.00198EPSS
SaveExploits0References6
CVE
CVE
added 2 days ago15 views

CVE-2026-72006

The CVE-2026-72006 entry relates to the Linux kernel (net/mlx5) where the backing mlx5_st_idx_data was not freed on final deallocation, causing a memory leak in workloads that repeatedly allocate/release mkeys with TPH steering-tag hints. The root cause is that mlx5_st_dealloc_index() erases the ...

5.4AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2 days ago5 views

PT-2026-72195

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5 st idx data on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak one struct mlx5 st idx data per cycle; kmemleak flags it as...

5.4AI score0.00198EPSS
SaveExploits0References4
EUVD
EUVD
added 4 days ago6 views

EUVD-2026-58226

NodeBB before 4.15.0 contains a stored cross-site scripting vulnerability in the renderEmoji function that fails to escape tag.icon.url and tag.name attributes. Attackers can deliver malicious ActivityPub Create/Note objects with crafted emoji tags to inject arbitrary HTML and JavaScript into...

6.1CVSS5.1AI score0.00194EPSS
SaveExploits0References4
CVE
CVE
added 5 days ago36 views

CVE-2026-16770

PDF::WebKit for Perl up to version 1.2 exposes an argument-injection risk in wkhtmltopdf via meta tags (meta name="pdf-webkit-KEY"), where KEY is normalized to a --option and VALUE is passed as the argument; BUILD merges these options last, letting untrusted HTML override defaults, including opti...

9.8CVSS5.3AI score0.00393EPSS
SaveExploits0References4
NVD
NVD
added 5 days ago5 views

CVE-2026-73262

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...

5.4CVSS0.00215EPSS
SaveExploits0References4
CVE
CVE
added 5 days ago24 views

CVE-2026-73262

CVE-2026-73262 – Prowler : Stored XSS in HTML reports due to unescaped cloud resource tags in the HTML output formatter (prowler/lib/outputs/html/html.py). Before 5.37.0, finding.resource_tags was inserted into reports without HTML escaping, allowing a privileged cloud principal who can modify a ...

5.4CVSS5.3AI score0.00215EPSS
SaveExploits0References4
OSV
OSV
added 5 days ago3 views

CVE-2026-73262 Prowler: Stored XSS in HTML reports through unescaped cloud resource tags

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...

5.4CVSS5.4AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-73262

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...

5.4CVSS5.3AI score0.00215EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 5 days ago30 views

CVE-2026-73262 Prowler: Stored XSS in HTML reports through unescaped cloud resource tags

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...

5.4CVSS0.00215EPSS
SaveExploits0References4
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-57222

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...

5.4CVSS5.3AI score0.00215EPSS
SaveExploits0References4
CVE
CVE
added 5 days ago23 views

CVE-2026-73374

CVE-2026-73374 describes a stored XSS in Vulnerability-Lookup’s render_tag_badges Jinja filter. Values from containers.cna.references[].tags[] were interpolated into HTML badge markup and wrapped with MarkupSafe.Markup, bypassing Jinja escaping. An authenticated user with vulnerability:create/mod...

6.1CVSS5.4AI score0.00359EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 5 days ago3 views

PT-2026-71081

Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource tags, assembled by unroll dict and parse html string, into generated reports without HTML escaping, allowing a cloud principal who can modify a...

5.4CVSS5.3AI score0.00215EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/10 6:18 p.m.6 views

CVE-2026-72732

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discoursetemplates endpoint exposed hidden tag names because DiscourseTemplates::TemplatesSerializer in plugins/discourse-templates/app/serializers/discoursetemplates/templatesserializer.rb d...

4.3CVSS0.00251EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/07 7:18 p.m.14 views

CVE-2026-71848

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...

5.3CVSS0.00291EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/07 6:36 p.m.8 views

GHSA-54FX-42GC-7VW4 Hono: Algorithmic Complexity DoS in Language Middleware

Summary The languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags. Details To implement progressive language-tag truncation, normalizeLanguage repeatedly calls parts.slice0...

5.3CVSS5.3AI score0.00291EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/08/07 6:36 p.m.14 views

Hono: Algorithmic Complexity DoS in Language Middleware

Summary The languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags. Details To implement progressive language-tag truncation, normalizeLanguage repeatedly calls parts.slice0...

5.3CVSS5.3AI score0.00291EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/08/07 6:36 p.m.27 views

CVE-2026-71848 Hono: Algorithmic Complexity DoS in Language Middleware

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...

5.3CVSS0.00291EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/07 6:36 p.m.9 views

CVE-2026-71848

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...

5.3CVSS5.3AI score0.00291EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder