Lucene search
+L

378786 matches found

CVE
CVE
•added 2026/07/16 5:54 p.m.•25 views

CVE-2026-46378

Dasel (github.com/tomwright/dasel) is affected by CVE-2026-46378 due to a non-terminating loop in the selector lexer when tokenizing an unterminated regex literal (r/). The bug resides in matchRegexPattern inside selector/lexer/tokenize.go, where the loop continues indefinitely if the closing sla...

6.2CVSS6.1AI score0.00112EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 5:49 p.m.•18 views

CVE-2026-44969

dbt-mcp: CVE-2026-44969 involves logging of complete tool call arguments (including sql_query, vars, and node_selection) in plaintext when DBT_MCP_SERVER_FILE_LOGGING is enabled. The issue is present in earlier versions (e.g., v1.15.x) and fixed in v1.17.1. Connected sources confirm that argument...

3.3CVSS6.1AI score0.00148EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/07/16 5:49 p.m.•34 views

CVE-2026-44970

dbt-mcp prior to v1.17.1 serializes and transmits the full MCP tool call arguments (including sql_query from show and vars from run/build/test) to the dbt Labs telemetry service without redaction, by default. This telemetry is enabled by default unless explicitly opted out, and a fix is available...

4.3CVSS6.1AI score0.00236EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/07/16 5:48 p.m.•26 views

CVE-2026-44968

Summary: CVE-2026-44968 affects dbt-mcp (Model Context Protocol server). Prior to v1.17.1, _run_dbt_command() in src/dbt_mcp/dbt_cli/tools.py appended user-supplied MCP parameters to the dbt subprocess argv without validation. This enables argument-list injection via two vectors: (1) node_selecti...

6.3CVSS6.1AI score0.00172EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/07/16 5:36 p.m.•14 views

CVE-2026-15945

CVE-2026-15945 affects Keycloak server’s administrative API with Fine-Grained Admin Permissions (FGAP) v2 enabled. A delegated administrator can bypass access controls by performing a group search for a child group they can view, causing the system to return the full details of the parent group. ...

4.3CVSS6.1AI score0.00193EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 5:4 p.m.•25 views

CVE-2026-46336

CVE-2026-46336 affects Manyfold (0.96.0–0.140.0). Authenticated users can rename uploaded files, and due to unsanitized user-controlled filenames in app/models/model_file.rb used with File.join(model.path, filename), path traversal may move/write files outside the library directory. Impact: poten...

7.1CVSS6.1AI score0.00332EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 5:3 p.m.•29 views

CVE-2026-15737

CVE-2026-15737 affects the AWS Bedrock AgentCore Python SDK. Unintended logging of sensitive user content occurs in the OpenTelemetry instrumentation for SDK versions 1.4.8 and 1.5.0, where raw user prompts and complete agent responses were written into OpenTelemetry span attributes on every invo...

5.7CVSS6.1AI score0.00216EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 5:3 p.m.•18 views

CVE-2026-45336

CVE-2026-45336 affects HireFlow’s web-based interview management system. In 1.2 and earlier, the Flask session handling used a hard-coded secret_key in app.py, allowing unauthenticated attackers who know the public source value to forge cookies containing role=admin and user_id values and bypass ...

10CVSS6.1AI score0.00428EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 5:1 p.m.•21 views

CVE-2026-46687

CVE-2026-46687 affects Emlog prior to or including 2.6.13. The flaw stems from an unvalidated path-traversal template parameter used by api_controller.php and a subsequent include in View::getView($template) after a file_exists check in log_controller.php. This enables an authenticated author to ...

7.7CVSS6.2AI score0.00292EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:59 p.m.•18 views

CVE-2026-46686

Emlog 2.6.13 and earlier is affected by a reflected XSS in the admin backend. The keyword parameter from admin/user.php is added with addslashes but not HTML-escaped when rendered into the value attribute in admin/views/user.php, enabling an administrator’s session to be compromised via crafted i...

8.5CVSS6AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:54 p.m.•30 views

CVE-2026-46341

CVE-2026-46341 affects Apify MCP Server prior to v0.9.21, where fetch-apify-docs.ts validates allowed domains with a startsWith() check instead of proper hostname comparison, enabling attacker-controlled subdomains (e.g., https://docs.apify.com.evil.com/ or https://[email protected]/) to pa...

6.1CVSS6.2AI score0.00191EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 4:52 p.m.•35 views

CVE-2026-45367

CVE-2026-45367 affects HAPI FHIR DSTU2 module (org.hl7.fhir.dstu2) where FHIRPathEngine.matches() still calls String.matches() without a timeout, enabling potential ReDoS via user-supplied FHIRPath expressions. Other modules (DSTU2016MAY, DSTU3, R4, R4B, R5) have RegexTimeout protection and are f...

7.5CVSS6.1AI score0.00489EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/16 4:50 p.m.•18 views

CVE-2026-10590

CVE-2026-10590 describes a potential local privilege escalation where an attacker could abuse WMI commands to trigger a System Management Interrupt (SMI) handler due to missing authentication. The CVSS data indicates a LOCAL attack with HIGH privileges required, no user interaction, and potential...

6.7CVSS6.1AI score0.00111EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:50 p.m.•19 views

CVE-2026-10589

Technical details (affected product, component, versions, exploitability) are not publicly available in the provided documents. Monitor for updates.

6.8CVSS6.2AI score0.00109EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:49 p.m.•22 views

CVE-2026-10588

Technical details (affected products/components/root cause/fix) are not provided in the supplied documents. Monitor Lenovo advisories and CVE records for updates.

6.7CVSS6.1AI score0.00107EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:49 p.m.•25 views

CVE-2026-10587

CVE-2026-10587 is described in connected documents as a potential out-of-bounds write vulnerability that could allow a local privileged attacker to modify power management settings in System Management Mode. The root cause is an out-of-bounds write; impact is indicated as high on integrity and av...

6.8CVSS6.1AI score0.001EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:49 p.m.•23 views

CVE-2026-14371

The vulnerability CVE-2026-14371 affects Lenovo XClarity Integrator for Windows Admin Center plugin (WAC Gateway) version 5.1.1 and earlier. The issue is a Powershell Command Injection when establishing remote PowerShell commands, with a CVSS v4.0 base score of 8.8 (HIGH) and impact across confid...

8.8CVSS6.1AI score0.00757EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:49 p.m.•16 views

CVE-2026-13104

Technical details for CVE-2026-13104 are not publicly available in the provided documents. Monitor for updates from Lenovo and security advisories; current entries only note a local authenticated arbitrary-code risk with elevated privileges.

7.3CVSS6.3AI score0.00112EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:49 p.m.•16 views

CVE-2026-13103

Lenovo App Store (Chinese market) contains a path traversal vulnerability allowing a local authenticated user to execute arbitrary code. The issue affects the package/component handling file paths, with impact on confidentiality, integrity, and availability reported as high. CVSS: from the report...

7.3CVSS6.3AI score0.00132EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:48 p.m.•18 views

CVE-2026-9046

CVE-2026-9046 describes an insecure-permissions issue affecting Windows deployments of Legion Zone and Lenovo App Store (Chinese market). When installed on a non-system partition, a local user could potentially execute arbitrary code due to insufficient access controls. The vulnerability is class...

7.3CVSS6.3AI score0.00085EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/16 4:48 p.m.•17 views

CVE-2026-6511

CVE-2026-6511 : Lenovo Smart Connect for Windows is reported to have an improper access control vulnerability that could allow a local authenticated user to access files owned by another user on the same system. The issue is described as local, with low attack complexity and the attack requires l...

6.8CVSS6.1AI score0.00094EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 4:45 p.m.•23 views

CVE-2026-45576

Summary: CVE-2026-45576 affects the zrok tool. From versions 0.4.23 through 2.0.3, the zrok2 copy command stores attacker-controlled WebDAV or zrok drive paths (e.g., /../outside.txt) in the source inventory and passes them to FilesystemTarget.WriteStream, enabling writing files outside the selec...

8.3CVSS6.1AI score0.00341EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/07/16 4:45 p.m.•42 views

CVE-2026-45568

CVE-2026-45568 affects zrok ProxyShare (Python SDK) where the Flask proxy route accepts an absolute URL in the path and passes it to urllib.parse.urljoin, allowing an attacker to replace the configured target host and cause requests to go to an attacker-chosen URL (SSRF). The issue is fixed in ve...

9.9CVSS6.1AI score0.00361EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/07/16 4:41 p.m.•24 views

CVE-2026-45325

The CVE-2026-45325 entry concerns Gestor de Oferta, a web app for mobility service offerings. The vulnerability is a prototype pollution issue in @tmlmobilidade/utils, specifically in setValueAtPath() at packages/utils/src/generic/value-at-path.ts, caused by unsafe path segments not being blocked...

8.2CVSS6.1AI score0.00267EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 4:40 p.m.•11 views

CVE-2026-63088

In StoatChat, CVE-2026-63088 affects stoatchat before 0.14.0 with an SSRF flaw. The vulnerability stems from incomplete address validation in url_is_blacklisted, which only inspects the first resolved address while the HTTP client iterates all cached addresses, enabling unauthenticated, network-a...

8.6CVSS6.1AI score0.00371EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 4:35 p.m.•17 views

CVE-2026-45795

The Janssen Project's Jans-auth-server had a JWE request object signature verification bypass prior to version 2.0.0: unsigned JWE were accepted because JwtAuthorizationRequest skipped inner signature validation when jwe.getSignedJWTPayload() was null, and AuthzRequestService.processRequestObject...

5.3CVSS6.1AI score0.00159EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 4:34 p.m.•15 views

CVE-2026-45612

The CVE-2026-45612 issue affects the rz-libdemangle library used by Rizin. A vulnerability exists in the Rust demangler implemented in src/rust/rust_v0.c where an out-of-bounds read can occur if the demangler structure is not yet initialized. This is resolved by the commit 6bf56d3. Impact is desc...

5.5CVSS6.1AI score0.00122EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 4:22 p.m.•15 views

CVE-2026-3031

CVE-2026-3031 concerns Image::EPEG for Perl, which bundles an outdated Epeg library (Epeg 0.9.0, last updated 2004) and includes through version 0.15. Root cause is embedding an unsupported version of Epeg; affected component is Image::EPEG (Perl). CVSS3.1 base score is 9.8 with CRITICAL impact (...

9.8CVSS6.1AI score0.00402EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 4:15 p.m.•17 views

CVE-2026-57074

XML::Bare for Perl (versions up to 0.53) is affected by an unbounded character lookahead in the parserc_parse routine. The code checks for multicharacter strings like without ensuring the buffer offsets are within bounds, allowing truncated strings such as

9.1CVSS6.1AI score0.00403EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 4:15 p.m.•18 views

CVE-2026-57073

HTML::Bare for Perl versions up to 0.04 is vulnerable to an unbounded character lookahead in parserc_parse, enabling out-of-bounds reads (truncated strings like

9.1CVSS6.1AI score0.00422EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 4:14 p.m.•15 views

CVE-2026-13401

CVE-2026-13401 affects Perl’s XML::Bare up to version 0.53. The vulnerability is a hang/infinite loop in the attribute parser: the parserc_parse state cursor does not advance for certain malformed attribute forms (e.g., nameless attributes like ), causing looping. Impact is a potential denial-of-...

7.5CVSS6.1AI score0.00388EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 4:14 p.m.•18 views

CVE-2026-13397

CVE-2026-13397 affects HTML::Bare up to version 0.04 for Perl. The vulnerability is an infinite loop in the parser when encountering certain malformed attributes, because parserc_parse does not advance the attribute-parse state cursor for those forms (e.g., nameless attributes like and unbalance...

7.5CVSS6.1AI score0.00393EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 4:13 p.m.•108 views

CVE-2026-47729

CVE-2026-47729 affects Squid, a web caching proxy. Before 7.6, the FTP gateway (src/clients/FtpGateway.cc) could perform an out-of-bounds read when a directory listing entry date in TypeA/TypeB formats wasn’t followed by a filename, allowing memory disclosure from unrelated transactions. The issu...

6.5CVSS6.6AI score0.01503EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/07/16 4:11 p.m.•264 views

CVE-2026-50012

CVE-2026-50012 describes a heap-based buffer overflow in Squid’s cache_digest reply handling (peerDigestSwapInMask in src/peer_digest.cc). The issue arises from improper input validation where a cache digest’s on-the-wire size can exceed the mask_size declared in the digest, exploitable by a trus...

5.5CVSS6.2AI score0.01364EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/07/16 4:9 p.m.•12 views

CVE-2026-55548

In Yamcs, CVE-2026-55548 affects the PacketsApi.exportPackets endpoint. The root cause was failure to enforce per-packet ReadPacket privileges when a request supplied an empty packet-name list, causing no WHERE pname IN filter and the onTuple handler to stream packets without per-row authorizatio...

4.3CVSS6.1AI score0.00247EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/07/16 4:7 p.m.•53 views

CVE-2026-46621

Summary of CVE-2026-46621 (Yamcs) : The issue arises in Yamcs’ script evaluation engine for Python algorithms, where user-controlled code is dynamically compiled and executed via Jython (JSR-223) without a secure sandbox. An authenticated user with the ChangeMissionDatabase privilege can override...

9.1CVSS6.6AI score0.00998EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/07/16 4:6 p.m.•52 views

CVE-2026-46562

Summary : CVE-2026-46562 affects Yamcs releases from 4.7.3 through 5.12.6. The vulnerability stems from constructing the Nashorn ScriptEngine without a ClassFilter, allowing a user with ChangeMissionDatabase privilege (or unauthenticated in default config) to execute arbitrary Java via Java.type,...

9.8CVSS6.3AI score0.0078EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/07/16 4:5 p.m.•44 views

CVE-2026-44632

CVE-2026-44632 affects Yamcs: the server-side evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory) can compile and execute user-supplied algorithm text via Janino without sandboxing. An authenticated user with ChangeMissionDatabase privilege could override an algorithm throug...

9.1CVSS6.5AI score0.0117EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/07/16 4:4 p.m.•60 views

CVE-2026-44596

Summary (CVE-2026-44596) Yamcs’ authentication endpoint POST /auth/token (in yamcs-core) lacked rate limiting, account lockout, and throttling for failed attempts prior to v5.12.7. An unauthenticated remote attacker could perform unlimited password-guessing against any user account, enabling brut...

9.8CVSS6.2AI score0.01729EPSS
SaveExploits3References5Affected Software1
CVE
CVE
•added 2026/07/16 4:3 p.m.•34 views

CVE-2026-63087

Grafana OnCall 1.16.11 is affected by an unauthenticated token-hijack vulnerability via the internal plugin install endpoint. An attacker can POST to the endpoint using hardcoded default stack_id and org_id values to obtain a valid PluginAuthToken, which can be used to authenticate against intern...

9.8CVSS6.2AI score0.00427EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 4:2 p.m.•61 views

CVE-2026-44595

CVE-2026-44595 affects Yamcs’ core IAM API endpoints: GET /api/iam/users, GET /api/iam/users/{name}, GET /api/iam/groups, and GET /api/iam/groups/{name}. The root cause is missing enforcement of SystemPrivilege.ControlAccess in Yamcs’ IAM API (IamApi.java), enabling any authenticated user—even wi...

4.3CVSS6.1AI score0.00984EPSS
SaveExploits3References5Affected Software1
CVE
CVE
•added 2026/07/16 3:59 p.m.•20 views

CVE-2026-63086

The CVE-2026-63086 entry concerns text-generation-inference 3.3.7, with an SSRF flaw in the OpenAI-compatible multimodal chat completions endpoint. The fetch_image function in router/src/validation.rs does not validate addresses (private, loopback, link-local, or cloud metadata). The HTTP client ...

8.6CVSS6.2AI score0.00323EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 3:59 p.m.•31 views

CVE-2026-47751

CVE-2026-47751 affects Claude Code Action prior to version 1.0.74. Due to the action checking out attacker-controlled PR head branches, reading .mcp.json from the working directory, and unconditionally enabling all MCP servers via enableAllProjectMcpServers, an attacker could trigger arbitrary co...

5.3CVSS6.5AI score0.00561EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 3:57 p.m.•29 views

CVE-2026-55407

CVE-2026-55407 affects Buffa, a pure-Rust Protocol Buffers implementation. Before v0.8.0, decode_unknown_field could allocate unbounded heap in response to untrusted input, causing memory amplification (e.g., a 64 MiB input could trigger ~1.4 GB). This impacts messages decoded with preserve_unkno...

6.3CVSS6.1AI score0.00423EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 3:56 p.m.•11 views

CVE-2026-63085

Axelor Open Platform 8.x prior to 8.2.2 contains an authorization bypass vulnerability. Authenticated non-admins can escalate privileges by exploiting unenforced field restrictions on nested relational save operations, enabling modification of sensitive User fields (roles, groups) through a relat...

8.8CVSS6.1AI score0.00371EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 3:54 p.m.•20 views

CVE-2026-55406

Buffa (Rust Protocol Buffers) prior to 0.7.0 contained a soundness flaw in OwnedView where OwnedView::decode transmuted a borrowed slice to &'static [u8] and the Deref promoted the static lifetime to borrowed view fields. This could let references outlive the OwnedView and, after drop, the backin...

5.9CVSS6.2AI score0.00128EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 3:42 p.m.•104 views

CVE-2026-45695

Kopia prior to version 0.23.0 is vulnerable to unauthenticated remote command execution via SSH ProxyCommand Injection when the HTTP server runs with --without-password. An attacker can send requests to /api/v1/repo/exists, causing the server to forward attacker-supplied SFTP storage configuratio...

9.8CVSS6.1AI score0.00348EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/16 3:35 p.m.•18 views

CVE-2026-55440

The CVE-2026-55440 flaw affects the Microsoft UFO open-source framework prior to version 3.0.7. In ufo/server/ws/handler.py, the COMMAND_RESULTS handler calls get_or_create_session in ufo/server/services/session_manager.py without owner_client_id, allowing an authenticated client to create an uno...

6.5CVSS6.1AI score0.0066EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 3:35 p.m.•29 views

CVE-2026-63082

The CVE-2026-63082 entry applies to Perfect Support Ticketing & Document Management System up to version 1.7, where a broken access control flaw in the Support Agent assignment field lets an authenticated Agent-level user bypass authorization and modify ticket assignments. Attackers can add or re...

5.4CVSS6.1AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 3:33 p.m.•16 views

CVE-2026-63081

The CVE-2026-63081 entry describes a stored XSS in the Perfect Support Ticketing & Document Management System (v1.7). Authenticated attackers with Agent-level privileges can inject scripts into the Notes field of assigned tickets, causing the script to run in the browser context of any viewer (in...

5.4CVSS6.1AI score0.00138EPSS
SaveExploits0References2
Total number of security vulnerabilities378786