Lucene search
+L

20844 matches found

vulnersOsv
vulnersOsv
•added 2026/05/07 1:49 a.m.•2 views

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.3), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.3) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.3)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.3 ...

7CVSS6AI score0.00937EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/05/07 12:00 a.m.•29 views

Stego Battlefield: Evaluating Image Steganography Attacks and Steganalysis Defenses

Image steganography is widely used to protect user privacy and enable covert communication. However, it can also be abused by the adversary as a covert channel to bypass content moderation, disseminate harmful semantics, and even hide malicious instructions in images to elicit dangerous outputs...

5.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2026/05/07 12:00 a.m.•33 views

VMware Spring Cloud Config 日志信息泄露漏洞

VMware Spring Cloud Config is a configuration management solution for distributed systems developed by VMware, Inc. This product provides server and client support for external configurations in distributed systems. VMware Spring Cloud Config has a vulnerability related to log information leakage...

4.4CVSS5.7AI score0.00162EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•4 views

CVE-2026-41004: Insertion of Sensitive Information into Log File

When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 inclusive; upgrade to 3.1.14 or greater Enterprise Support Only. Spring Cloud Config 4.1.x: affected from 4.1.0 throu...

4.4CVSS5.8AI score0.00162EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/05/06 8:22 p.m.•17 views

CVE-2026-35453

PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.3 and earlier, 2.0.0 through 2.1.15, 2.2.0 through 2.4.4, 3.3.0 through 3.10.4, and 4.0.0 through 5.6.0, the HTML Writer skips htmlspecialchars output escaping when a cell uses a custom number format containin...

5.4CVSS5.9AI score0.00239EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2026/05/06 7:20 p.m.•41 views

firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, integer overflow in the Graphics: Text component...

8.8CVSS7.7AI score0.00665EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/05/06 4:58 p.m.•25 views

firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, integer overflow in the Graphics: Text component...

8.8CVSS7.7AI score0.00665EPSS
SaveExploits0References6
Wolfi
Wolfi
•added 2026/05/06 1:48 p.m.•42 views

CVE-2026-41481 vulnerabilities

Vulnerabilities for packages: open-webui...

6.5CVSS5.8AI score0.00436EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/05/06 1:18 p.m.•35 views

CVE-2026-41481 vulnerabilities

Vulnerabilities for packages: open-webui, py3-langchain-text-splitters...

6.5CVSS5.8AI score0.00436EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/05/06 11:49 a.m.•55 views

CVE-2025-62345 HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability

HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability . A component contains a security weakness in its input handling implementation, increasing the risk of misconfiguration and operational errors...

2.7CVSS0.00218EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/06 11:49 a.m.•18 views

CVE-2025-62345

HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability . A component contains a security weakness in its input handling implementation, increasing the risk of misconfiguration and operational errors...

2.7CVSS5.8AI score0.00218EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/05/06 11:49 a.m.•35 views

CVE-2025-62345

Technical details for CVE-2025-62345 are not publicly provided in the supplied documents; no affected versions, exploit information, or remediation details are included. Monitor for updates.

2.7CVSS5.8AI score0.00218EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/06 11:49 a.m.•18 views

CVE-2025-62345 HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability

HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability . A component contains a security weakness in its input handling implementation, increasing the risk of misconfiguration and operational errors...

2.7CVSS5.8AI score0.00218EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/05/06 11:41 a.m.•18 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

9.8CVSS7.4AI score0.01052EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
•added 2026/05/06 11:41 a.m.•24 views

firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, integer overflow in the Graphics: Text component...

8.8CVSS7.7AI score0.00665EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2026/05/06 8:16 a.m.•34 views

DEBIAN-CVE-2026-23928

The Item history widget in Zabbix 7.0+ or the Plain text widget in Zabbix 6.0 can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would...

6.8CVSS7.7AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/06 8:16 a.m.•25 views

CVE-2026-23928

The Item history widget in Zabbix 7.0+ or the Plain text widget in Zabbix 6.0 can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would...

7.3CVSS0.00263EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/05/06 8:16 a.m.•21 views

UBUNTU-CVE-2026-23928

The Item history widget in Zabbix 7.0+ or the Plain text widget in Zabbix 6.0 can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would...

7.3CVSS7.7AI score0.00263EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/05/06 8:16 a.m.•22 views

CVE-2026-23928

The Item history widget in Zabbix 7.0+ or the Plain text widget in Zabbix 6.0 can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would...

7.3CVSS7.7AI score0.00263EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/05/06 8:01 a.m.•22 views

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

...

7.5CVSS7.3AI score0.00884EPSS
SaveExploits0
Rows per page
Query Builder