Lucene search
+L

475499 matches found

Debian CVE
Debian CVE
added 2026/08/01 12:22 p.m.10 views

CVE-2026-67298

FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler railserverhandlemessages in channels/rail/server/railmain.c. When processing a RAIL PDU header, the code subtracts RAILPDUHEADERLENGTH from the peer-controlled orderLength field without firs...

8.7CVSS5.9AI score0.00381EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/08/01 12:22 p.m.11 views

CVE-2026-67303

FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...

5.3CVSS5.5AI score0.00248EPSS
SaveExploits0
OSV
OSV
added 2026/08/01 12:22 p.m.5 views

CVE-2026-67337 better-auth before 1.4.9 Two-Factor Authentication Bypass via session.cookieCache

better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled. Attackers with valid primary credentials can access authenticated routes without completing second-factor verification by exploiting premature session caching...

7.1CVSS5.5AI score
SaveExploits0References4
OSV
OSV
added 2026/08/01 12:22 p.m.5 views

CVE-2026-67315 axios 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 NO_PROXY Bypass via 0.0.0.0

axios versions 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 fail to recognize 0.0.0.0 as a loopback address in shouldBypassProxy.js, allowing requests to 0.0.0.0 to bypass NOPROXY rules. Attackers can supply 0.0.0.0 URLs to route requests through configured proxies, potentially exposing local...

6.9CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/01 12:22 p.m.9 views

EUVD-2026-51830

axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...

6.3CVSS5.5AI score0.00338EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/01 12:22 p.m.6 views

CVE-2026-67332 @better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass

@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attackers can complete an OAuth flow and obtain access tokens whose audience targets resource servers the authorization never...

5.3CVSS5.5AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/01 12:22 p.m.6 views

CVE-2026-67353 guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service

guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and...

6.9CVSS5.5AI score0.00247EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/01 12:22 p.m.10 views

EUVD-2025-210583

better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting XSS vulnerability on the /api/auth/error page, where the value of the 'error' URL parameter is reflected as HTML without proper neutralization. An attacker who coerces a user into visiting a...

5.1CVSS5.5AI score0.00399EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/01 12:22 p.m.10 views

CVE-2026-67310

OpenRemote org.openremote:openremote versions = 1.26.2 contain an insecure direct object reference vulnerability in the setAssetLinks endpoint of AlarmResourceImpl. The realm access check validates only a single realm obtained via realms.stream.findFirst on a HashSet of realms from the request,...

5.4CVSS5.5AI score0.00182EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/01 12:22 p.m.33 views

CVE-2025-71404

Summary: CVE-2025-71404 affects better-auth versions after 0.0.2 and before 1.1.16. The vulnerability is a reflected XSS on the /api/auth/error page where the URL parameter error is echoed into HTML without proper neutralization, enabling arbitrary JavaScript when a user visits a crafted link. Im...

5.1CVSS5.5AI score0.00399EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/01 12:22 p.m.55 views

CVE-2026-67353

Affected software: guzzlehttp/guzzle prior to 7.15.1. Issue: a denial-of-service vulnerability in CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions, enabling an attacker to return many large cookies and cause excessive in-memory data and oversized Cookie headers ...

6.9CVSS5.5AI score0.00247EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/01 12:22 p.m.12 views

CVE-2026-67355

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

8.2CVSS5.5AI score0.00229EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/08/01 12:22 p.m.10 views

CVE-2025-71404

better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting XSS vulnerability on the /api/auth/error page, where the value of the 'error' URL parameter is reflected as HTML without proper neutralization. An attacker who coerces a user into visiting a...

5.1CVSS5.5AI score0.00399EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/01 12:22 p.m.12 views

EUVD-2026-51853

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

10CVSS6.2AI score0.00451EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/01 12:22 p.m.9 views

CVE-2026-67327

better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...

8.7CVSS5.5AI score0.00231EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/01 12:22 p.m.12 views

CVE-2026-67308

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

10CVSS6.2AI score0.00451EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/01 12:22 p.m.37 views

CVE-2026-67308 Wazuh GitHub Actions Shell Injection via Fork Pull Request

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

9.3CVSS0.00451EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/01 12:22 p.m.34 views

CVE-2026-67338 JupyterLab before 4.5.9 Stored XSS via Extension Manager

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...

6.1CVSS0.00175EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/01 12:22 p.m.10 views

CVE-2026-67304

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer...

8.7CVSS5.5AI score0.00354EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/01 12:22 p.m.32 views

CVE-2026-67310

CVE-2026-67310 concerns OpenRemote

5.4CVSS5.5AI score0.00182EPSS
SaveExploits0References2
Rows per page
Query Builder