Lucene search
+L

3316 matches found

Microsoft Security Update
Microsoft Security Update
added 2026/06/22 7:00 p.m.16 views

Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)

Azure File Sync Agent v22.4 Release – June 2026 KB5104852...

5.8AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2026/06/22 7:00 p.m.20 views

Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)

Azure File Sync Agent v22.4 Release – June 2026 KB5104852...

5.8AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/06/22 6:59 p.m.11 views

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

3.7CVSS5.9AI score0.00345EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/06/22 6:59 p.m.87 views

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

3.7CVSS0.00345EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2026/06/22 6:59 p.m.19 views

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

3.7CVSS5.8AI score0.00345EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/06/22 3:39 p.m.50 views

CVE-2026-50168 Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/platform-server package allows remote attackers to bypass host allowlist constraints an...

8.8CVSS0.00237EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/06/20 2:29 a.m.29 views

SUSE CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

2.9CVSS5.9AI score0.00317EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/18 7:16 p.m.15 views

ALPINE-CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...

7.5CVSS6.1AI score0.00573EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/18 7:16 p.m.28 views

CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...

7.5CVSS0.00573EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/18 7:16 p.m.9 views

CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...

7.5CVSS6.5AI score0.00573EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/06/18 6:01 p.m.25 views

CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...

7.5CVSS5.8AI score0.00573EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/06/18 6:01 p.m.14 views

CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...

5.3CVSS5.4AI score0.00573EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/06/18 6:01 p.m.27 views

EUVD-2026-37928

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...

5.3CVSS5.4AI score0.00573EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/18 6:01 p.m.230 views

CVE-2026-48937

Node.js 22 and 24 HTTP/2 server implementations fail to stop accepting data after sending a GOAWAY frame, enabling unauthenticated remote denial of service (CVSS 7.5). CBL-Mariner flags versions below 24.17.0-1 as vulnerable; Amazon Linux patches to nodejs22-22.23.1-1 and nodejs24-24.18.0-1. No i...

7.5CVSS5.2AI score0.00573EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/06/18 5:16 p.m.24 views

CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

8.2CVSS0.00317EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/18 5:16 p.m.18 views

ALPINE-CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

8.2CVSS5.9AI score0.00317EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/18 4:21 p.m.78 views

CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

1.8CVSS0.00317EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/18 4:21 p.m.24 views

EUVD-2026-37914

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

1.8CVSS4.7AI score0.00317EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/18 12:00 a.m.36 views

PT-2026-50776

Name of the Vulnerable Software and Affected Versions Node.js version 22 Node.js version 24 Description A flaw in the HTTP/2 server API allows servers to continue accepting data after a GOAWAY frame has been sent. A GOAWAY frame is a mechanism used in the HTTP/2 protocol to notify the peer that t...

5.3CVSS5.9AI score0.00573EPSS
SaveExploits0References86
NVD
NVD
added 2026/06/17 1:20 p.m.21 views

CVE-2026-22328

Unauthenticated Cross Site Scripting XSS in Auto Repair = 22.6 versions...

7.1CVSS0.00244EPSS
SaveExploits0References1
Rows per page
Query Builder