Lucene search
+L

168958 matches found

EUVD
EUVD
added 4 days ago13 views

EUVD-2026-50568

undici vulnerable to CRLF Injection via blob-like body 'type' property...

4.2CVSS7.2AI score0.00154EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 4 days ago6 views

CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in lib/oaskit/errorhandler/default.ex...

5.1CVSS5.3AI score0.0031EPSS
SaveExploits0References4
Cvelist
Cvelist
added 4 days ago43 views

CVE-2026-67598 Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary TLS certificates, as CURLOPTSSLVERIFYPEER and...

9.1CVSS0.00162EPSS
SaveExploits1References2
OSV
OSV
added 4 days ago8 views

CVE-2026-67598 Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary TLS certificates, as CURLOPTSSLVERIFYPEER and...

9.1CVSS5.8AI score
SaveExploits0References5
NVD
NVD
added 4 days ago8 views

CVE-2025-9291

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validati...

7.7CVSS0.00181EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 4 days ago6 views

Security Bulletin: IBM QRadar SIEM is vulnerable to remote code execution by privileged users

Summary An authenticated QRadar SIEM administrator can execute arbitrary commands on the QRadar host due to improper validation of user supplied input. Vulnerability Details CVEID:CVE-2026-13477 DESCRIPTION: QRadar could allow an authenticated privileged user to execute arbitrary commands with...

4.7CVSS5.9AI score0.00222EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 4 days ago6 views

EUVD-2025-210607

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validati...

7.7CVSS5.5AI score0.00181EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 4 days ago5 views

CVE-2025-9291 Improper Certificate Validation in TP-Link Omada Cloud Communications

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validati...

7.7CVSS5.5AI score0.00181EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago46 views

CVE-2025-9291

The CVE-2025-9291 entry documents a certificate validation weakness in Omada devices communicating with cloud controllers. Specifically, certificate identity verification does not adequately confirm that a presented certificate matches the expected cloud controller hostname, potentially allowing ...

7.7CVSS5.5AI score0.00181EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 4 days ago57 views

CVE-2025-9291 Improper Certificate Validation in TP-Link Omada Cloud Communications

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validati...

7.7CVSS0.00181EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 4 days ago5 views

Security update for bind

This update for bind fixes the following issues CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

9.2CVSS5.5AI score0.00509EPSS
SaveExploits0References24
OSV
OSV
added 4 days ago3 views

SUSE-SU-2026:3477-1 Security update for bind

This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: Potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: Cache...

8.6CVSS5.5AI score0.00509EPSS
SaveExploits0References13
OSV
OSV
added 4 days ago4 views

SUSE-SU-2026:3476-1 Security update for bind

This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: Potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: Cache...

8.6CVSS5.5AI score0.00509EPSS
SaveExploits0References13
OSV
OSV
added 4 days ago4 views

SUSE-SU-2026:3472-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....

9.6CVSS5.5AI score0.00655EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 4 days ago6 views

netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

10CVSS7.4AI score0.00248EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 4 days ago9 views

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...

10CVSS7.3AI score0.00318EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 4 days ago13 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

10CVSS7.3AI score0.01025EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
added 4 days ago6 views

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...

10CVSS5.4AI score0.00318EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 4 days ago5 views

netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

10CVSS5.5AI score0.00248EPSS
SaveExploits0References7
NVD
NVD
added 4 days ago8 views

CVE-2026-69093

Admidio before 5.0.11 does not validate the admcsrftoken in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters delete and copy. An attacker can trick an authenticated administrator into visiting a crafted URL to delete ...

7.1CVSS0.0011EPSS
SaveExploits0References3
Rows per page
Query Builder