Lucene search
+L

8328 matches found

CVE
CVE
added 2026/08/05 8:58 p.m.95 views

CVE-2026-71314

Nuxt (Vue.js framework) is affected by CVE-2026-71314 in versions 3.1.0 through 3.21.10 and 4.5.1. An unauthenticated attacker can trigger unbounded server-side rendering memory growth via a server island v-for prop (including vforToArray and related usage), leading to memory exhaustion and a Nux...

7.5CVSS5.5AI score0.004EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/05 8:58 p.m.16 views

EUVD-2026-53644

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until MAXVFORLENGTH = 100000 and crash the Nuxt process. This iss...

7.5CVSS5.5AI score0.004EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/05 8:58 p.m.56 views

CVE-2026-71314 Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until MAXVFORLENGTH = 100000 and crash the Nuxt process. This iss...

7.5CVSS0.004EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/04 3:25 p.m.13 views

MAL-2026-11663 Malicious code in @onereach/v-event-calendar (npm)

npm/@onereach/v-event-calendar is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.5AI score
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/04 3:25 p.m.13 views

Malicious code in @onereach/v-event-calendar (npm)

npm/@onereach/v-event-calendar is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.5AI score
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/04 3:55 a.m.15 views

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

7.8CVSS5.4AI score0.00157EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/03 5:54 a.m.13 views

Security Bulletin: IBM Storage Protect Data Protection for Virtual Environments' WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVE-2026-4410)

Summary IBM Storage Protect Data Protection for Virtual Environments uses IBM WebSphere Application Server Liberty as part of its web application runtime. The WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service. This issue has been addressed i...

7.5CVSS5.4AI score0.005EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/08/01 12:00 p.m.20 views

NIP-44 v2 decryption permits resource exhaustion

The NIP-44 decryption entry point Base64-decoded the complete attacker-controlled payload before determining its version or enforcing any size limit. For v2 payloads, the decoded buffer was then authenticated with HMAC even when it was much larger than the maximum payload supported by the crate's...

5.7AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/01 8:23 a.m.14 views

Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to privilege escalation due to IBM WebSphere Application Server Liberty (CVE-2025-14915)

Summary IBM Storage Protect Client and Virtual Environments use IBM WebSphere Application Server Liberty as part of its web application runtime. A privilege escalation vulnerability in IBM WebSphere Application Server Liberty, when the restConnector-1.0 or restConnector-2.0 feature is enabled,...

7.2CVSS5.5AI score0.00498EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/07/30 1:16 a.m.13 views

CVE-2026-17952

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

7.5CVSS0.00187EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.18 views

PT-2026-65984

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.3AI score0.00572EPSS
SaveExploits0References376
Ubuntu
Ubuntu
added 2026/07/28 6:37 a.m.26 views

USN-8547-2: Linux kernel (Azure FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - Cryptographic API; - InfiniBand drivers; - IOMMU subsystem; - Network drivers; -...

9.8CVSS6.7AI score0.20744EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
added 2026/07/26 8:02 a.m.9 views

KVM: x86: hyper-v: Bound the bank index when querying sparse banks

...

8.4CVSS5.2AI score0.00114EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/07/25 3:57 p.m.9 views

SUSE CVE-2026-64527

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receive callback hypervreceivesub reads msg-vidhdr.type and dispatches into one of four message-type branches without knowing how many bytes the host wrote into hv-recvbuf. The completion...

5.5CVSS5.7AI score0.00161EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/25 9:20 a.m.12 views

CVE-2026-64527 drm/hyperv: validate VMBus packet size in receive callback

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receive callback hypervreceivesub reads msg-vidhdr.type and dispatches into one of four message-type branches without knowing how many bytes the host wrote into hv-recvbuf. The completion...

5.7AI score
SaveExploits0References10
Debian CVE
Debian CVE
added 2026/07/25 9:20 a.m.19 views

CVE-2026-64527

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receive callback hypervreceivesub reads msg-vidhdr.type and dispatches into one of four message-type branches without knowing how many bytes the host wrote into hv-recvbuf. The completion...

5.6AI score0.00161EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 9:20 a.m.25 views

CVE-2026-64524

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolutioncount and fix WIN8 fallback A SYNTHVIDRESOLUTIONRESPONSE with resolutioncount 64 walks past the supportedresolutionSYNTHVIDMAXRESOLUTIONCOUNT array in the parse loop. Bound resolutioncount against t...

7.7CVSS5.7AI score0.00142EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/25 9:20 a.m.39 views

CVE-2026-64524 drm/hyperv: validate resolution_count and fix WIN8 fallback

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolutioncount and fix WIN8 fallback A SYNTHVIDRESOLUTIONRESPONSE with resolutioncount 64 walks past the supportedresolutionSYNTHVIDMAXRESOLUTIONCOUNT array in the parse loop. Bound resolutioncount against t...

7.7CVSS0.00142EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/25 9:20 a.m.42 views

CVE-2026-64524

The CVE-2026-64524 issue affects the Linux kernel's DRM Hyper-V driver. A SYNTHVID_RESOLUTION_RESPONSE with resolution_count > 64 could bypass the bound check on the supported_resolution array, potentially leading to out-of-bounds behavior during parsing. The fix binds resolution_count to the ...

7.7CVSS5.8AI score0.00142EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 9:20 a.m.12 views

CVE-2026-64524 drm/hyperv: validate resolution_count and fix WIN8 fallback

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolutioncount and fix WIN8 fallback A SYNTHVIDRESOLUTIONRESPONSE with resolutioncount 64 walks past the supportedresolutionSYNTHVIDMAXRESOLUTIONCOUNT array in the parse loop. Bound resolutioncount against t...

7.7CVSS5.8AI score
SaveExploits0References10
Rows per page
Query Builder