Lucene search
+L

171719 matches found

Cvelist
Cvelist
added 2026/08/18 12:00 a.m.22 views

CVE-2026-57826

An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored...

0.00308EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.12 views

PT-2026-78153

Fix already patched since July! A critical vote-validation vulnerability affecting Atto node versions older than 1.33 has been fixed. The flaw could allow a connected peer to claim another representative’s voting weight before the received vote’s signature was validated. It is rated CVSS 9.3. If...

5.4AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.17 views

PT-2026-76927

Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the error log function through a data directive...

9.3CVSS6AI score0.00589EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.10 views

PT-2026-77312

fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a root primitive value. When the schema validates a top-level primitive such as an integer, Ajv can coerce a JSON string in...

5.4CVSS5.4AI score0.00312EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.5 views

PT-2026-78230

Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens. Successf...

8.7CVSS5.5AI score0.00241EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-68455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to...

5.5AI score0.00155EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-72303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULENOTIFICATION payload length before reading bytes/channel data in control update...

7.8CVSS5.4AI score0.00154EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.9 views

PT-2026-78231

An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the...

7.1CVSS5.3AI score0.00188EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-74293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: fsl: fslaudmix: Validate written enum values fslaudmixputmixclksrc and fslaudmixputoutsrc convert the user-provided enum item with sndsocenumitemtoval...

7.8CVSS5.4AI score0.00129EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-72160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: reject dinodes with non-canonical imode type Patch series ocfs2: harden inode validators against forged metadata, v2. This series adds three structural...

8.8CVSS5.5AI score0.00632EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-72297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after...

7.1CVSS5.4AI score0.00159EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.9 views

PT-2026-77192

Joomla! Core - 20260802 - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests...

6.9CVSS5.2AI score0.00336EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.7 views

PT-2026-77170

MyBB is free and open source forum software. Prior to 1.8.40, the user datahandler does not properly validate checkbox and multiselect profile field types, resulting in stored JavaScript code injection. UserDataHandler::verify profile fields only performs the specialized validation when is...

8.7CVSS5.4AI score0.00302EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.10 views

PT-2026-77180

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers to enable or disable registration challenge questions with a specially crafted URL. The controller processes GET...

3.5CVSS5.3AI score0.00132EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.10 views

PT-2026-77162

CodeWhale versions before 0.8.64 fail to properly validate the allow shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the...

8.5CVSS5.8AI score0.00174EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.4 views

Amazon Linux 2 : perl-Date-Manip, --advisory ALAS2-2026-3856 (ALAS-2026-3856)

The version of perl-Date-Manip installed on the remote host is prior to 6.41-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3856 advisory. Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeri...

7.5CVSS5.7AI score0.00387EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-72351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is...

9.8CVSS5.5AI score0.00755EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.6 views

PT-2026-77335

The Zephyr kernel validates the k thread join and k thread abort system calls declared syscall in include/zephyr/kernel.h through thread obj validate in kernel/thread.c. Its default switch branch is the access-denied path, taken when k object validate returns -EPERM the calling user thread was...

6.5CVSS5.8AI score0.00148EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-72417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: Validate iph-ihl in nfflowip4tunnelproto Add sanity check for iph-ihl field in nfflowip4tunnelproto before using it to compute the header...

9.8CVSS5.5AI score0.00553EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.10 views

PT-2026-77275

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs...

8.1CVSS5.3AI score0.00155EPSS
SaveExploits0References3
Rows per page
Query Builder