Lucene search
+L

473939 matches found

OSV
OSV
added 3 days ago3 views

CLSA-2026-1776126839 TuxCare security update for io.netty (5 CVEs)

TuxCare rebuilt 40 io.netty packages to address 5 CVEs. Fixed in 4.1.48.Final-tuxcare.1...

7.5CVSS6.9AI score0.99999EPSS
SaveExploits24
OSV
OSV
added 3 days ago3 views

CLSA-2026-1776126830 TuxCare security update for io.netty (16 CVEs)

TuxCare rebuilt 40 io.netty packages to address 16 CVEs. Fixed in 4.1.52.Final-tuxcare.1...

7.5CVSS6.9AI score0.99999EPSS
SaveExploits29
OSV
OSV
added 3 days ago2 views

CLSA-2025-1756253007 TuxCare security update for 38 packages (18 CVEs)

TuxCare rebuilt 38 packages to address 18 CVEs. Fixed in 9.0.75-tuxcare.1...

9.8CVSS6.9AI score0.99999EPSS
SaveExploits41
Github Security Blog
Github Security Blog
added 3 days ago11 views

Flowise RCE via TypeORM DataSource

============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source, low-co...

9CVSS6.2AI score0.00291EPSS
SaveExploits1References2Affected Software2
Patchstack
Patchstack
added 3 days ago7 views

NPM: Flowise RCE via TypeORM DataSource

NPM: Flowise RCE via TypeORM DataSource vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

9CVSS5.4AI score0.00291EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 3 days ago32 views

CVE-2026-69251 Flowise RCE via TypeORM DataSource

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...

9CVSS0.00291EPSS
SaveExploits1References1
CVE
CVE
added 3 days ago40 views

CVE-2026-69250

Summary: CVE-2026-69250 affects Flowise up to version 3.1.2 (pre-3.1.3). The OAuth2 token refresh endpoint POST /api/v1/oauth2-credential/refresh/:credentialId is publicly whitelisted and unauthenticated. The endpoint performs a server-side HTTP request to a credential-controlled accessTokenUrl w...

8.5CVSS5.6AI score0.00342EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago19 views

CVE-2026-18766

CVE-2026-18766 affects the chetans9 core-php-admin-panel (up to the commit 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f). The issue is a SQL injection caused by manipulation of the argument filter_col in customers.php. It can be exploited remotely, and the exploit has been published and may be used. ...

6.5CVSS6.4AI score0.00192EPSS
SaveExploits0References5
Cvelist
Cvelist
added 3 days ago34 views

CVE-2026-18650 Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1...

8.8CVSS0.00232EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 3 days ago4 views

netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

A flaw was found in Netty, a network application framework. A remote attacker can exploit a vulnerability in the HTTP/2 Hypertext Transfer Protocol version 2 maximum header size handling. By sending a specific SETTINGSMAXHEADERLISTSIZE setting, an attacker can cause Netty to produce an exception...

6.9CVSS5.5AI score0.00302EPSS
SaveExploits0References8
CVE
CVE
added 3 days ago22 views

CVE-2026-14337

CVE-2026-14337 affects Pega Platform versions 23.1.0 through 25.1.3, where a stored Cross-site Scripting (XSS) vulnerability exists in a user interface component. The flaw requires a high-privilege developer user and is described with a CVSS 4.0 base score of 4.6 (Medium). The provided data does ...

4.6CVSS5.4AI score0.00247EPSS
SaveExploits0References1
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-52685

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3.1...

8.8CVSS5.4AI score0.00286EPSS
SaveExploits0References1
CVE
CVE
added 3 days ago22 views

CVE-2026-17070

Technical details such as affected product/version, root cause, and remediation are not publicly available in the provided documents; monitor for updates.

8.8CVSS5.4AI score0.00286EPSS
SaveExploits0References1
OSV
OSV
added 3 days ago4 views

MAL-2026-11600 Malicious code in @onereach/get-version-data (npm)

npm/@onereach/get-version-data is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.3AI score
SaveExploits0References8
Patchstack
Patchstack
added 3 days ago6 views

WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Thrive Architect versions = 10.9.3.1...

7.1CVSS5.4AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
added 3 days ago8 views

WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Advanced AJAX Product Filters versions = 3.2.0.3...

7.1CVSS5.4AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
added 3 days ago6 views

WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Total Upkeep versions = 1.17.2...

8.2CVSS5.4AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
added 3 days ago7 views

WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Media LIbrary Assistant versions = 3.38...

7.1CVSS5.4AI score
SaveExploits0Affected Software1
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-52668

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 1.0.4...

7.1CVSS5.5AI score0.00101EPSS
SaveExploits0References1
EUVD
EUVD
added 3 days ago8 views

EUVD-2026-52667

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3...

6.5CVSS5.4AI score0.00211EPSS
SaveExploits0References2
Rows per page
Query Builder