Lucene search
+L

2153 matches found

OSV
OSV
added 2026/08/04 9:53 p.m.13 views

CVE-2026-70594 Ghost: Session Fixation in Ghost Admin

Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation attacks. Successful exploitation would have required another vulnerability on the same domain where Ghost Admin was hosted...

6.7CVSS5.4AI score
SaveExploits0References6
OSV
OSV
added 2026/08/04 9:23 p.m.9 views

CVE-2026-45084 OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...

8.7CVSS5.5AI score
SaveExploits0References3
NVD
NVD
added 2026/08/04 9:16 p.m.12 views

CVE-2026-70488

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file ids supplied in the request body without checking that those objec...

4.3CVSS0.00213EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/04 8:44 p.m.69 views

CVE-2026-70490

Open WebUI (self-hosted AI platform) versions 0.8.8–0.11.0 contain a flaw where the terminal WebSocket route in backend/open_webui/routers/terminals.py authenticates its own first-message JWT and omits the verified-user role gate enforced on HTTP terminal routes. As a result, accounts with pendin...

6.3CVSS5.5AI score0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/04 8:16 p.m.7 views

CVE-2026-70487 Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attachments without filtering them against the caller's read access. Any authenticated user who knew another user's file i...

5.3CVSS5.4AI score
SaveExploits0References5
OSV
OSV
added 2026/08/04 2:52 p.m.5 views

CLSA-2026-1780274968 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.46-tuxcare.7...

7.5CVSS7.5AI score0.01909EPSS
SaveExploits0
NVD
NVD
added 2026/08/03 10:16 p.m.10 views

CVE-2026-46713

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and compaction process that allows spoofed activities to be accepted as valid. This issue has been fixed in version 2026.5.4...

9.2CVSS0.00174EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/03 9:37 p.m.50 views

CVE-2026-46713

Misskey VM Misskey: CVE-2026-46713 affects Misskey 12.37.0 and later (before 2026.5.4). The issue lies in the JSON-LD signature validation and compaction process, allowing spoofed activities to be accepted as valid. The vulnerability is addressed in version 2026.5.4. Remediation: update to 2026.5...

9.2CVSS5.3AI score0.00174EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/03 9:05 p.m.61 views

CVE-2026-69245

Guzzle (PHP HTTP client) prior to versions 7.15.2 and 8.0.1 is affected by a cookie-domain handling issue in SetCookie::matchesDomain(). Noncanonical domains and certain spellings (e.g., 0x7f000001, 0177.0.0.0x1, and percent-escaped forms) can cause a cookie for a given Domain to be mis-scoped to...

6.5CVSS5.5AI score0.00137EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/03 7:52 p.m.14 views

EUVD-2026-49375

ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks...

6.9CVSS5.4AI score0.00254EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/03 5:16 p.m.12 views

CVE-2026-69152

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...

7.5CVSS0.00411EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/08/03 4:14 p.m.8 views

CVE-2026-69149 Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting XSS vulnerability exists in @angular/platform-server's DOM emulation dependency domino when serializing...

8.6CVSS5.5AI score0.00195EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/31 10:17 p.m.11 views

CVE-2026-45086

Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a participant can directly load /admin/demographics/questions/editquestions and reach the demographics questionnaire editor without the required administrator authorization. The...

5.4CVSS0.00171EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/30 7:59 p.m.44 views

CVE-2026-67550 re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UTF-16 code-unit offset in exec, test, match, replace, and split, allowing an attacker-influenced lastIndex on a non-ASCII...

5.7CVSS0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 4:43 p.m.10 views

SUSE CVE-2026-49339

gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit 6dd71e6a3c966867ef8c900d359a7df75789f410 added an ownership check based on playlist.UserID. However, playlist.UserID is derived from the first path segment of the attacker-controll...

7.1CVSS7.8AI score0.00388EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/30 4:02 p.m.6 views

JLSEC-2026-981 ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

8.1CVSS7.2AI score0.00334EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/30 2:46 p.m.15 views

EUVD-2026-50473

Flyto2 Core: Arbitrary file write via image.download and other file-writing modules...

10CVSS5.8AI score0.00494EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/30 2:25 p.m.17 views

EUVD-2026-50565

OliveTin: StartActionAndWait Endpoints Bypass logs Permission and Return Action Output...

4.3CVSS5.8AI score0.00252EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/30 12:06 a.m.10 views

CVE-2026-62946 ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. This issue has been fixed...

5.1CVSS5.9AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/29 8:59 p.m.10 views

CVE-2026-16728

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a malicious or faulty...

4.8CVSS5.8AI score0.00176EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder