Lucene search
+L

378768 matches found

CVE
CVE
added 2026/07/16 4:49 p.m.16 views

CVE-2026-13104

Technical details for CVE-2026-13104 are not publicly available in the provided documents. Monitor for updates from Lenovo and security advisories; current entries only note a local authenticated arbitrary-code risk with elevated privileges.

7.3CVSS6.3AI score0.00112EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/16 4:49 p.m.16 views

CVE-2026-13103

Lenovo App Store (Chinese market) contains a path traversal vulnerability allowing a local authenticated user to execute arbitrary code. The issue affects the package/component handling file paths, with impact on confidentiality, integrity, and availability reported as high. CVSS: from the report...

7.3CVSS6.3AI score0.00132EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/16 4:48 p.m.18 views

CVE-2026-9046

CVE-2026-9046 describes an insecure-permissions issue affecting Windows deployments of Legion Zone and Lenovo App Store (Chinese market). When installed on a non-system partition, a local user could potentially execute arbitrary code due to insufficient access controls. The vulnerability is class...

7.3CVSS6.3AI score0.00085EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/16 4:48 p.m.17 views

CVE-2026-6511

CVE-2026-6511 : Lenovo Smart Connect for Windows is reported to have an improper access control vulnerability that could allow a local authenticated user to access files owned by another user on the same system. The issue is described as local, with low attack complexity and the attack requires l...

6.8CVSS6.1AI score0.00094EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 4:45 p.m.23 views

CVE-2026-45576

Summary: CVE-2026-45576 affects the zrok tool. From versions 0.4.23 through 2.0.3, the zrok2 copy command stores attacker-controlled WebDAV or zrok drive paths (e.g., /../outside.txt) in the source inventory and passes them to FilesystemTarget.WriteStream, enabling writing files outside the selec...

8.3CVSS6.1AI score0.00341EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/07/16 4:45 p.m.42 views

CVE-2026-45568

CVE-2026-45568 affects zrok ProxyShare (Python SDK) where the Flask proxy route accepts an absolute URL in the path and passes it to urllib.parse.urljoin, allowing an attacker to replace the configured target host and cause requests to go to an attacker-chosen URL (SSRF). The issue is fixed in ve...

9.9CVSS6.1AI score0.00361EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/07/16 4:41 p.m.24 views

CVE-2026-45325

The CVE-2026-45325 entry concerns Gestor de Oferta, a web app for mobility service offerings. The vulnerability is a prototype pollution issue in @tmlmobilidade/utils, specifically in setValueAtPath() at packages/utils/src/generic/value-at-path.ts, caused by unsafe path segments not being blocked...

8.2CVSS6.1AI score0.00267EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 4:40 p.m.11 views

CVE-2026-63088

In StoatChat, CVE-2026-63088 affects stoatchat before 0.14.0 with an SSRF flaw. The vulnerability stems from incomplete address validation in url_is_blacklisted, which only inspects the first resolved address while the HTTP client iterates all cached addresses, enabling unauthenticated, network-a...

8.6CVSS6.1AI score0.00371EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 4:35 p.m.17 views

CVE-2026-45795

The Janssen Project's Jans-auth-server had a JWE request object signature verification bypass prior to version 2.0.0: unsigned JWE were accepted because JwtAuthorizationRequest skipped inner signature validation when jwe.getSignedJWTPayload() was null, and AuthzRequestService.processRequestObject...

5.3CVSS6.1AI score0.00159EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 4:34 p.m.15 views

CVE-2026-45612

The CVE-2026-45612 issue affects the rz-libdemangle library used by Rizin. A vulnerability exists in the Rust demangler implemented in src/rust/rust_v0.c where an out-of-bounds read can occur if the demangler structure is not yet initialized. This is resolved by the commit 6bf56d3. Impact is desc...

5.5CVSS6.1AI score0.00122EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 4:22 p.m.15 views

CVE-2026-3031

CVE-2026-3031 concerns Image::EPEG for Perl, which bundles an outdated Epeg library (Epeg 0.9.0, last updated 2004) and includes through version 0.15. Root cause is embedding an unsupported version of Epeg; affected component is Image::EPEG (Perl). CVSS3.1 base score is 9.8 with CRITICAL impact (...

9.8CVSS6.1AI score0.00402EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 4:15 p.m.17 views

CVE-2026-57074

XML::Bare for Perl (versions up to 0.53) is affected by an unbounded character lookahead in the parserc_parse routine. The code checks for multicharacter strings like without ensuring the buffer offsets are within bounds, allowing truncated strings such as

9.1CVSS6.1AI score0.00403EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 4:15 p.m.18 views

CVE-2026-57073

HTML::Bare for Perl versions up to 0.04 is vulnerable to an unbounded character lookahead in parserc_parse, enabling out-of-bounds reads (truncated strings like

9.1CVSS6.1AI score0.00422EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 4:14 p.m.15 views

CVE-2026-13401

CVE-2026-13401 affects Perl’s XML::Bare up to version 0.53. The vulnerability is a hang/infinite loop in the attribute parser: the parserc_parse state cursor does not advance for certain malformed attribute forms (e.g., nameless attributes like ), causing looping. Impact is a potential denial-of-...

7.5CVSS6.1AI score0.00388EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 4:14 p.m.18 views

CVE-2026-13397

CVE-2026-13397 affects HTML::Bare up to version 0.04 for Perl. The vulnerability is an infinite loop in the parser when encountering certain malformed attributes, because parserc_parse does not advance the attribute-parse state cursor for those forms (e.g., nameless attributes like and unbalance...

7.5CVSS6.1AI score0.00393EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 4:13 p.m.108 views

CVE-2026-47729

CVE-2026-47729 affects Squid, a web caching proxy. Before 7.6, the FTP gateway (src/clients/FtpGateway.cc) could perform an out-of-bounds read when a directory listing entry date in TypeA/TypeB formats wasn’t followed by a filename, allowing memory disclosure from unrelated transactions. The issu...

6.5CVSS6.6AI score0.01503EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/16 4:11 p.m.264 views

CVE-2026-50012

CVE-2026-50012 describes a heap-based buffer overflow in Squid’s cache_digest reply handling (peerDigestSwapInMask in src/peer_digest.cc). The issue arises from improper input validation where a cache digest’s on-the-wire size can exceed the mask_size declared in the digest, exploitable by a trus...

5.5CVSS6.2AI score0.01364EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/07/16 4:9 p.m.12 views

CVE-2026-55548

In Yamcs, CVE-2026-55548 affects the PacketsApi.exportPackets endpoint. The root cause was failure to enforce per-packet ReadPacket privileges when a request supplied an empty packet-name list, causing no WHERE pname IN filter and the onTuple handler to stream packets without per-row authorizatio...

4.3CVSS6.1AI score0.00247EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/16 4:7 p.m.53 views

CVE-2026-46621

Summary of CVE-2026-46621 (Yamcs) : The issue arises in Yamcs’ script evaluation engine for Python algorithms, where user-controlled code is dynamically compiled and executed via Jython (JSR-223) without a secure sandbox. An authenticated user with the ChangeMissionDatabase privilege can override...

9.1CVSS6.6AI score0.00998EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/16 4:6 p.m.52 views

CVE-2026-46562

Summary : CVE-2026-46562 affects Yamcs releases from 4.7.3 through 5.12.6. The vulnerability stems from constructing the Nashorn ScriptEngine without a ClassFilter, allowing a user with ChangeMissionDatabase privilege (or unauthenticated in default config) to execute arbitrary Java via Java.type,...

9.8CVSS6.3AI score0.0078EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/16 4:5 p.m.44 views

CVE-2026-44632

CVE-2026-44632 affects Yamcs: the server-side evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory) can compile and execute user-supplied algorithm text via Janino without sandboxing. An authenticated user with ChangeMissionDatabase privilege could override an algorithm throug...

9.1CVSS6.5AI score0.0117EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/16 4:4 p.m.60 views

CVE-2026-44596

Summary (CVE-2026-44596) Yamcs’ authentication endpoint POST /auth/token (in yamcs-core) lacked rate limiting, account lockout, and throttling for failed attempts prior to v5.12.7. An unauthenticated remote attacker could perform unlimited password-guessing against any user account, enabling brut...

9.8CVSS6.2AI score0.01729EPSS
SaveExploits3References5Affected Software1
CVE
CVE
added 2026/07/16 4:3 p.m.34 views

CVE-2026-63087

Grafana OnCall 1.16.11 is affected by an unauthenticated token-hijack vulnerability via the internal plugin install endpoint. An attacker can POST to the endpoint using hardcoded default stack_id and org_id values to obtain a valid PluginAuthToken, which can be used to authenticate against intern...

9.8CVSS6.2AI score0.00427EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 4:2 p.m.61 views

CVE-2026-44595

CVE-2026-44595 affects Yamcs’ core IAM API endpoints: GET /api/iam/users, GET /api/iam/users/{name}, GET /api/iam/groups, and GET /api/iam/groups/{name}. The root cause is missing enforcement of SystemPrivilege.ControlAccess in Yamcs’ IAM API (IamApi.java), enabling any authenticated user—even wi...

4.3CVSS6.1AI score0.00984EPSS
SaveExploits3References5Affected Software1
CVE
CVE
added 2026/07/16 3:59 p.m.20 views

CVE-2026-63086

The CVE-2026-63086 entry concerns text-generation-inference 3.3.7, with an SSRF flaw in the OpenAI-compatible multimodal chat completions endpoint. The fetch_image function in router/src/validation.rs does not validate addresses (private, loopback, link-local, or cloud metadata). The HTTP client ...

8.6CVSS6.2AI score0.00323EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 3:59 p.m.31 views

CVE-2026-47751

CVE-2026-47751 affects Claude Code Action prior to version 1.0.74. Due to the action checking out attacker-controlled PR head branches, reading .mcp.json from the working directory, and unconditionally enabling all MCP servers via enableAllProjectMcpServers, an attacker could trigger arbitrary co...

5.3CVSS6.5AI score0.00561EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 3:57 p.m.29 views

CVE-2026-55407

CVE-2026-55407 affects Buffa, a pure-Rust Protocol Buffers implementation. Before v0.8.0, decode_unknown_field could allocate unbounded heap in response to untrusted input, causing memory amplification (e.g., a 64 MiB input could trigger ~1.4 GB). This impacts messages decoded with preserve_unkno...

6.3CVSS6.1AI score0.00423EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 3:56 p.m.11 views

CVE-2026-63085

Axelor Open Platform 8.x prior to 8.2.2 contains an authorization bypass vulnerability. Authenticated non-admins can escalate privileges by exploiting unenforced field restrictions on nested relational save operations, enabling modification of sensitive User fields (roles, groups) through a relat...

8.8CVSS6.1AI score0.00371EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 3:54 p.m.20 views

CVE-2026-55406

Buffa (Rust Protocol Buffers) prior to 0.7.0 contained a soundness flaw in OwnedView where OwnedView::decode transmuted a borrowed slice to &'static [u8] and the Deref promoted the static lifetime to borrowed view fields. This could let references outlive the OwnedView and, after drop, the backin...

5.9CVSS6.2AI score0.00128EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 3:42 p.m.104 views

CVE-2026-45695

Kopia prior to version 0.23.0 is vulnerable to unauthenticated remote command execution via SSH ProxyCommand Injection when the HTTP server runs with --without-password. An attacker can send requests to /api/v1/repo/exists, causing the server to forward attacker-supplied SFTP storage configuratio...

9.8CVSS6.1AI score0.00348EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 3:35 p.m.18 views

CVE-2026-55440

The CVE-2026-55440 flaw affects the Microsoft UFO open-source framework prior to version 3.0.7. In ufo/server/ws/handler.py, the COMMAND_RESULTS handler calls get_or_create_session in ufo/server/services/session_manager.py without owner_client_id, allowing an authenticated client to create an uno...

6.5CVSS6.1AI score0.0066EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 3:35 p.m.29 views

CVE-2026-63082

The CVE-2026-63082 entry applies to Perfect Support Ticketing & Document Management System up to version 1.7, where a broken access control flaw in the Support Agent assignment field lets an authenticated Agent-level user bypass authorization and modify ticket assignments. Attackers can add or re...

5.4CVSS6.1AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 3:33 p.m.16 views

CVE-2026-63081

The CVE-2026-63081 entry describes a stored XSS in the Perfect Support Ticketing & Document Management System (v1.7). Authenticated attackers with Agent-level privileges can inject scripts into the Notes field of assigned tickets, causing the script to run in the browser context of any viewer (in...

5.4CVSS6.1AI score0.00138EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 3:32 p.m.17 views

CVE-2026-12379

CVE-2026-12379 is an open redirect vulnerability in the Axivion Dashboard’s OAuth/OIDC login flow. The post-authentication redirect is not restricted to the application’s own origin, allowing an attacker to craft a login link that, after authentication, redirects the user to an untrusted external...

6.8CVSS6AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/16 3:32 p.m.24 views

CVE-2026-54568

CVE-2026-54568 affects Microsoft UFO (open‑source framework). From 3.0.0 through 3.0.6, a client connected as a DEVICE to the UFO WebSocket server could call DEVICE_INFO_REQUEST with another device’s target_id and receive that device’s server‑side system_info due to missing constellat ion/ object...

4.3CVSS6.1AI score0.00536EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 3:17 p.m.18 views

CVE-2026-57206

CVE-2026-57206 affects SimpleChat prior to version 0.241.206, where multiple plugin validation endpoints in application/single_app/plugin_validation_endpoint.py—specifically POST /api/admin/plugins/test-instantiation, GET /api/admin/plugins/health-check/, POST /api/admin/plugins/repair/, and POST...

8.6CVSS6.1AI score0.00891EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 3:12 p.m.13 views

CVE-2026-57205

CVE-2026-57205 affects SimpleChat prior to version 0.241.203. An authenticated low-privilege user could exploit IDOR on two endpoints (GET /api/user/info/ and GET /api/user/profile-image/) by supplying a caller-controlled user_id to read another user’s email address, display name, and profile ima...

4.3CVSS6.1AI score0.005EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 2:59 p.m.27 views

CVE-2026-53598

The CVE-2026-53598 issue affects Prompty (.prompty) loaders that expanded ${file:...} references in frontmatter before 2.0.0-beta.2, allowing an attacker-controlled prompt to read local files via absolute paths, .. traversal, or symlink escapes. Root cause: path confinement was not enforced durin...

7.5CVSS6.1AI score0.01057EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 2:54 p.m.15 views

CVE-2026-53597

CVE-2026-53597 affects the Prompty markdown format loader: for versions 2.0.0-alpha.1 through 2.0.0-beta.3, the @prompty/core TypeScript loader in runtime/typescript/packages/core/src/core/loader.ts did not override executable engines for js/frontmatter, allowing attacker-controlled .prompty file...

8.7CVSS6.3AI score0.00931EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 2:52 p.m.20 views

CVE-2026-54733

The Moodle integration for Microsoft 365/Entra ID (local_o365) is vulnerable prior to 4.5.6, 5.0.5, and 5.1.1. The Teams SSO endpoint sso_login.php base64-decodes a JWT payload and authenticates users based on the upn claim without verifying the JWT signature, enabling an unauthenticated attacker...

9.3CVSS6.1AI score0.00915EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/16 2:48 p.m.13 views

CVE-2026-59867

CVE-2026-59867 affects Kiota, an OpenAPI-based HTTP client code generator. Before 1.32.5, Kiota’s OpenAPI $ref resolution could fetch remote http(s) URLs or read local absolute/out-of-tree file paths, enabling build‑time SSRF, remote file inclusion, and local file inclusion when generating client...

7.1CVSS6.2AI score0.01921EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 2:46 p.m.15 views

CVE-2026-59866

Kiota (OpenAPI-based HTTP client generator) is affected by CVE-2026-59866 due to unsafe generation of x-ms-kiota-info clientClassName and clientNamespaceName, which can cause arbitrary file writes and code-injection when kiota generate runs without -c/--class-name. The issue allows attacker-contr...

9.3CVSS6.2AI score0.01355EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 2:45 p.m.32 views

CVE-2026-59864

Kiota (OpenAPI-based HTTP client code generator) prior to v1.32.5 allowed path traversal/out-of-package file inclusion in generated Microsoft 365 Copilot and Teams plugin manifests through attacker-controlled static_template.file values derived from x-ai-adaptive-card and x-ai-capabilities during...

9.3CVSS6.1AI score0.01275EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 2:43 p.m.46 views

CVE-2026-14890

SGLang is vulnerable to unauthenticated remote code execution via its expert-parallel backup subsystem. The issue centers on a ZeroMQ PULL socket exposed on a routable network interface with no authentication or deserialization safeguards, allowing an attacker to send a malicious pickle payload t...

9.1CVSS6.5AI score0.00909EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 2:43 p.m.20 views

CVE-2026-59865

Kiota (OpenAPI-based HTTP Client code generator) prior to version 1.32.5 is vulnerable. The issue arises in kiota info where x-ms-kiota-info.languagesInformation..dependencyInstallCommand, along with dependency name/version, could be used to present a spec-supplied command as Kiota’s recommended ...

9.3CVSS6.2AI score0.0319EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 2:42 p.m.17 views

CVE-2026-59863

Kiota (OpenAPI-based HTTP client code generator) prior to version 1.32.5 mishandled the poisoned .kiota/workspace.json workspace configuration by not validating per-client or per-plugin outputPath values during kiota client generate and kiota plugin generate. This could allow an attacker (e.g., v...

7CVSS6.2AI score0.01123EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 2:40 p.m.20 views

CVE-2026-59859

Kiota’s PHP generator (prior to 1.32.4) embeds OpenAPI-derived strings directly into PHP double-quoted literals via SanitizeDoubleQuote(), without escaping $. This permits attacker-controlled interpolation constructs like ${…}, $var, or {$obj->prop} to inject arbitrary PHP code into generated ...

8.7CVSS6.2AI score0.01016EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 2:38 p.m.20 views

CVE-2026-59862

Kiota Python generator vulnerability (CVE-2026-59862): before version 1.32.0, attacker-controlled x-ms-enum.values[].description could flow into KiotaBuilder.SetEnumOptions and PythonConventionService.RemoveInvalidDescriptionCharacters without newline sanitization, enabling generated inline comme...

7.5CVSS6.2AI score0.0102EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 2:36 p.m.19 views

CVE-2026-59861

Kiota Ruby generator vulnerability (CVE-2026-59861): Before version 1.32.0, the Ruby code generator embedded OpenAPI-derived strings into Ruby double-quoted literals without escaping interpolation markers (# {expr}, #$var, #@var). This allowed attacker-controlled interpolations to inject arbitrar...

7.5CVSS6.2AI score0.01471EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 2:35 p.m.18 views

CVE-2026-59237

Roskus Prospero Flow CRM prior to 5.5.3 is affected by an IDOR (CWE-639) vulnerability in the Order and OrderItem REST API controllers. The issue arises because Order::find($id) / Item::find($id) are not scoped to the authenticated user’s company, enabling a remote, authenticated user to read, mo...

6.9CVSS6.1AI score0.00369EPSS
SaveExploits0References3
Total number of security vulnerabilities378768