Lucene search
+L

2158 matches found

EUVD
EUVD
added 2026/08/06 8:01 p.m.9 views

EUVD-2026-54249

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid Radar Diagrams allow arbitrary large values for the ticks parameter, which can cause high CPU usage and freeze the rendering webpage or JavaScript...

5.3CVSS5.6AI score0.00391EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/06 4:38 p.m.15 views

CVE-2026-71327 Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and...

7.6CVSS5.3AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/06 4:34 p.m.29 views

CVE-2026-71326 Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

2.1CVSS0.00356EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/05 7:26 p.m.11 views

EUVD-2026-53582

PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.webcrawltools.webcrawl function is vulnerable to server-side request forgery. While it validates the initially supplied URL and blocks direct loopback and private destinations, its default httpx...

7.7CVSS5.4AI score0.00342EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/08/05 5:49 p.m.10 views

EUVD-2026-53545

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3, the DevTools reveal in file manager action could launch the target file rather than reveal it. An attacker with a separate means of running...

6.9CVSS5.8AI score0.00134EPSS
SaveExploits0References13
OSV
OSV
added 2026/08/04 9:53 p.m.13 views

CVE-2026-70594 Ghost: Session Fixation in Ghost Admin

Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation attacks. Successful exploitation would have required another vulnerability on the same domain where Ghost Admin was hosted...

6.7CVSS5.4AI score
SaveExploits0References6
OSV
OSV
added 2026/08/04 9:23 p.m.9 views

CVE-2026-45084 OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...

8.7CVSS5.5AI score
SaveExploits0References3
NVD
NVD
added 2026/08/04 9:16 p.m.12 views

CVE-2026-70488

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file ids supplied in the request body without checking that those objec...

4.3CVSS0.00213EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/04 8:44 p.m.69 views

CVE-2026-70490

Open WebUI (self-hosted AI platform) versions 0.8.8–0.11.0 contain a flaw where the terminal WebSocket route in backend/open_webui/routers/terminals.py authenticates its own first-message JWT and omits the verified-user role gate enforced on HTTP terminal routes. As a result, accounts with pendin...

6.3CVSS5.5AI score0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/04 8:16 p.m.7 views

CVE-2026-70487 Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attachments without filtering them against the caller's read access. Any authenticated user who knew another user's file i...

5.3CVSS5.4AI score
SaveExploits0References5
OSV
OSV
added 2026/08/04 2:52 p.m.5 views

CLSA-2026-1780274968 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.46-tuxcare.7...

7.5CVSS7.5AI score0.01909EPSS
SaveExploits0
NVD
NVD
added 2026/08/03 10:16 p.m.10 views

CVE-2026-46713

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and compaction process that allows spoofed activities to be accepted as valid. This issue has been fixed in version 2026.5.4...

9.2CVSS0.00174EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/03 9:37 p.m.50 views

CVE-2026-46713

Misskey VM Misskey: CVE-2026-46713 affects Misskey 12.37.0 and later (before 2026.5.4). The issue lies in the JSON-LD signature validation and compaction process, allowing spoofed activities to be accepted as valid. The vulnerability is addressed in version 2026.5.4. Remediation: update to 2026.5...

9.2CVSS5.3AI score0.00174EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/03 9:05 p.m.61 views

CVE-2026-69245

Guzzle (PHP HTTP client) prior to versions 7.15.2 and 8.0.1 is affected by a cookie-domain handling issue in SetCookie::matchesDomain(). Noncanonical domains and certain spellings (e.g., 0x7f000001, 0177.0.0.0x1, and percent-escaped forms) can cause a cookie for a given Domain to be mis-scoped to...

6.5CVSS5.5AI score0.00137EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/03 7:52 p.m.14 views

EUVD-2026-49375

ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks...

6.9CVSS5.4AI score0.00254EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/03 5:16 p.m.12 views

CVE-2026-69152

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...

7.5CVSS0.00411EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/08/03 4:14 p.m.8 views

CVE-2026-69149 Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting XSS vulnerability exists in @angular/platform-server's DOM emulation dependency domino when serializing...

8.6CVSS5.5AI score0.00195EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/31 10:17 p.m.11 views

CVE-2026-45086

Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a participant can directly load /admin/demographics/questions/editquestions and reach the demographics questionnaire editor without the required administrator authorization. The...

5.4CVSS0.00171EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/30 7:59 p.m.44 views

CVE-2026-67550 re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UTF-16 code-unit offset in exec, test, match, replace, and split, allowing an attacker-influenced lastIndex on a non-ASCII...

5.7CVSS0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 4:43 p.m.11 views

SUSE CVE-2026-49339

gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit 6dd71e6a3c966867ef8c900d359a7df75789f410 added an ownership check based on playlist.UserID. However, playlist.UserID is derived from the first path segment of the attacker-controll...

7.1CVSS7.8AI score0.00388EPSS
SaveExploits0References2
Rows per page
Query Builder