Lucene search
+L

434400 matches found

EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58386

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write...

8.8CVSS5.7AI score0.00122EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58385

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable...

8.8CVSS5.3AI score0.00112EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58384

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...

8.8CVSS6.2AI score0.00527EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58383

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser in apps/webapp/app/models/user.server.ts without requiring Google'...

7.4CVSS5.3AI score0.00362EPSS
SaveExploits0References4
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58382

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to system objects due to a time-of-check to time-of-use TOCTOU race condition involving symbolic links...

8.5CVSS5.3AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58381

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

7.6CVSS5.7AI score0.00309EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58380

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...

8.5CVSS5.4AI score0.00405EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58379

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...

7.8CVSS5.4AI score0.00112EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58378

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...

7.1CVSS5.2AI score0.00073EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58377

IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

7.5CVSS5.3AI score0.00386EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58376

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...

5.4CVSS5.2AI score0.00298EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58375

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow...

4.3CVSS5.6AI score0.00271EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58374

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...

8.1CVSS5.3AI score0.00353EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•5 views

EUVD-2026-58373

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

8.1CVSS5.4AI score0.00411EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58372

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

5.3CVSS5.3AI score0.00357EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58371

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

5.3CVSS5.2AI score0.00293EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•10 views

EUVD-2026-58370

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...

10CVSS8.2AI score0.02364EPSS
SaveExploits0References6
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58369

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

6.5CVSS5.2AI score0.00327EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58368

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...

8.6CVSS5.8AI score0.00265EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58367

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management...

8.8CVSS5.3AI score0.00277EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58366

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

4.3CVSS5.3AI score0.00252EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58365

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...

6.5CVSS5.8AI score0.00291EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58364

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an untrusted search path...

8.8CVSS5.8AI score0.00415EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58363

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

7.3CVSS6AI score0.00115EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58362

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...

9.4CVSS5.3AI score0.00551EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58361

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...

7.5CVSS5.3AI score0.00282EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58360

IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

7.1CVSS5.2AI score0.00112EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58359

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled...

5.7CVSS5.3AI score0.00529EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•11 views

EUVD-2026-58358

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPathoperation.key.setnewMetadata, value in...

8.5CVSS5.3AI score0.00334EPSS
SaveExploits0References4
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58357

compliance-trestle is a tooling platform for managing compliance as code. Prior to versiions 3.12.2 and 4.0.3, the compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary...

6.9CVSS5.5AI score0.00371EPSS
SaveExploits0References4
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58356

compliance-trestle is a tooling platform for managing compliance as code. Prior to versiions 3.12.2 and 4.0.3, the compliance-trestle library's remote fetching cache mechanism HTTPSFetcher and SFTPFetcher constructs the local cache file path from the URL path component without sanitizing path...

7.1CVSS5.4AI score0.00268EPSS
SaveExploits0References4
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58225

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

5.3CVSS4.9AI score0.00345EPSS
SaveExploits0References4
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58224

WsgiDAV is a generic and extendable WebDAV server based on WSGI. WsgiDAV 4.3.3 and prior can allow a WebDAV request path containing an encoded parent-directory segment to escape the configured filesystem share root in a specific path layout. The issue is fixed with version 4.3.4...

7.1CVSS5.3AI score0.00331EPSS
SaveExploits0References3
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58223

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

4.3CVSS5.3AI score0.00262EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58222

Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130. The matcher used to resolve wildcard patterns against names is implemented recursively and had no bound on recursion depth or on the total number of mat...

6.5CVSS5.4AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58221

Observable Discrepancy CWE-203 in Kibana Fleet can lead to information disclosure via Excavation CAPEC-116. Fleet removes the Elasticsearch API key value of an enrolled Elastic Agent from the responses of its agent listing capability, but that capability accepted caller-supplied filter expression...

7.1CVSS5.3AI score0.00234EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58220

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

6.5CVSS5.3AI score0.00212EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58290

Incorrect Authorization CWE-863 in Kibana Fleet can lead to privilege escalation via Privilege Abuse CAPEC-122. Fleet restricts some callers to managing integration policies for one specific integration. When an existing integration policy was updated, that restriction was evaluated against the...

7.1CVSS5.3AI score0.00211EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58289

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized cross-space access via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. The result is disclosure of inference output from a trained model in a different space that the user is not authoriz...

7.1CVSS5.5AI score0.00292EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58288

Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a comparison of the username when it is not. A username is not unique across Elasticsearch authentication realms, so two distinct principals that...

7.1CVSS5.3AI score0.00253EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58287

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...

8.8CVSS6.2AI score0.00328EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58286

The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...

6.5CVSS5.3AI score0.00248EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58285

Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker. An authenticated user holding only read privileges on a single searchable index can submit one...

6.5CVSS5.4AI score0.00289EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58284

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

6.5CVSS5.3AI score0.00289EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58283

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230. An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without...

6.5CVSS5.3AI score0.00289EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58282

Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user holding only read privileges on a single index can submit one small, specially crafted search request that causes an excessively large memor...

6.5CVSS5.3AI score0.00289EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58281

Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve Embedded Sensitive Data CAPEC-37. When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account...

6.5CVSS5.3AI score0.00275EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•6 views

EUVD-2026-58280

Authorization Bypass Through User-Controlled Key CWE-639 in Fleet Server can lead to information disclosure via Manipulating User-Controlled Variables CAPEC-77. The authorization decision for artifact downloads relied on a client-supplied value that was persisted without being validated against t...

6.5CVSS5.3AI score0.00268EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•8 views

EUVD-2026-58279

Memory Allocation with Excessive Size Value CWE-789 in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user able to submit ES|QL queries could send a specially crafted query whose evaluation allocates an unbounded amou...

6.5CVSS5.3AI score0.00289EPSS
SaveExploits0References1
EUVD
EUVD
•added 6 days ago•7 views

EUVD-2026-58278

Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-915 in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has not been granted case editing privileges, via Manipulating...

4.3CVSS5.3AI score0.00218EPSS
SaveExploits0References1
Total number of security vulnerabilities434400