Cvd - Page 11 of Cvd Most Viewed Vulnerabilities List

CvdMost viewed

2436 matches found

CVD•added 2026/08/13 4:16 p.m.•4 views

Vaultwarden icon endpoint SSRF via IP-literal hrefs

Vaultwarden icon Endpoint Server-Side Request Forgery SSRF Vulnerability Overview Vaultwarden's built-in icon service ICONSERVICE=internal automatically fetches, on the server side, the web pages and icon resources pointed to by vault entry URIs in order to display favicons for entries. The...

5.7AI score

SaveExploits0References4

CVD•added 2026/08/13 4:13 p.m.•4 views

Apache Superset CTAS tmp_table_name SQL injection bypasses the allow_dml restriction

Apache Superset CTAS tmptablename SQL Injection Bypasses the allowdml Database Security Restriction ZAI-2026-IIRAQ1 Vulnerability Overview In Apache Superset's SQL Lab "save query result as table" CTAS/CVAS feature, the tmptablename parameter used to specify the target table name is neither...

6.5AI score

SaveExploits0References1

CVD•added 2026/08/03 2:46 a.m.•4 views

FTP parser: recoverable RETR error escalated to APP_LAYER_ERROR disables FTP application-layer inspection on the same flow

FTP parser: recoverable RETR error escalated to APPLAYERERROR disables FTP application-layer inspection on the same flow Vulnerability Overview Suricata's FTP application-layer parser escalates a protocol-recoverable command-ordering error — a client sending RETR/STOR before negotiating a data po...

5.7AI score

SaveExploits0References3

CVD•added 2026/08/03 2:46 a.m.•4 views

SMTP MIME message/rfc822: encapsulation parser state not reset, bypassing attachment filename and decoded-content inspection

SMTP MIME message/rfc822: encapsulation parser state not reset, bypassing attachment filename and decoded-content inspection Vulnerability Overview Suricata's SMTP MIME parser incompletely resets state when processing message/rfc822 encapsulated messages: after entering the inner message, the...

5.4AI score

SaveExploits0References3

CVD•added 2026/08/03 2:46 a.m.•4 views

Linux kernel garp: unsigned integer underflow in garp_pdu_parse_attr

In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garppduparseattr The receive-side GARP attribute parser computes dlen with reversed operands: dlen = sizeofga - ga-len; ga-len is the on-wire attribute length and includes the GARP...

5.4AI score0.00165EPSS

SaveExploits0References9

CVD•added 2026/08/03 2:46 a.m.•4 views

Linux kernel 9p: oldfid erroneously released in p9_client_walk() error path

In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9clientwalk error path When p9clientwalk is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunkfid, which...

10CVSS4.8AI score0.00477EPSS

SaveExploits0References7

CVD•added 2026/06/24 7:27 a.m.•4 views

[FreeBSD] thr_kill2 permission check bypass: cross-UID signal delivery

Summary thrkill2 does not check pcansignal return value before tdksignal, allowing cross-UID signal delivery by local unprivileged users. Fixed in commit bf1e2c07. CVE-2026-45256, FreeBSD-SA-26:25.thr...

5.5CVSS5.2AI score0.00092EPSS

SaveExploits0References1

CVD•added 2026/06/23 8:26 a.m.•4 views

Apache Superset Flask Debugger Exposure Leading to Remote Code Execution (CTAS SQL Injection to Unlock Werkzeug PIN)

CV26: Flask Debugger Exposure Leading to Remote Code Execution Vulnerability Overview | Item | Details | |------|------| | Type | Remote Code Execution RCE | | Severity | Critical when conditions are met / Medium standalone | | Affected Versions | = 6.0.1 | | Who can do what with what impact |...

7.3AI score

SaveExploits0References1