Lucene search
+L

28540 matches found

Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:04 a.m.•3 views

nvme-apple: Prevent shared tags across queues on Apple A11

...

0.00215EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:03 a.m.•3 views

Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)

...

8.7CVSS0.00426EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:03 a.m.•3 views

Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)

...

8.7CVSS0.00263EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:03 a.m.•3 views

Apache Thrift: C++ THttpTransport grows its line buffer without bound

...

9.2CVSS0.00378EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:03 a.m.•4 views

Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)

...

8.2CVSS0.00426EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:02 a.m.•4 views

Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame

...

8.2CVSS0.00413EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:02 a.m.•3 views

Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize

...

6.9CVSS0.00426EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:02 a.m.•3 views

Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language)

...

8.2CVSS0.00263EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:02 a.m.•4 views

Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound

...

8.2CVSS0.00426EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:01 a.m.•4 views

Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception

...

8.7CVSS0.00426EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/04 8:01 a.m.•3 views

Apache Thrift: Perl servers end `serve()` when serving one connection fails

...

8.2CVSS0.00426EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:55 a.m.•9 views

Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages

...

7.1CVSS5.8AI score0.00119EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:54 a.m.•9 views

Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag

...

7.1CVSS5.8AI score0.00119EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:54 a.m.•12 views

Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service

...

7.5CVSS5.8AI score0.00608EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:53 a.m.•4 views

RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata

...

6.9CVSS0.00278EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:53 a.m.•12 views

RabbitMQ: CORS * reflects Origin with Allow-Credentials

...

7.6CVSS5.8AI score0.00413EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:52 a.m.•10 views

RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size

...

7.1CVSS5.8AI score0.00259EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:52 a.m.•10 views

RabbitMQ: Web-MQTT decompression bomb

...

8.2CVSS5.8AI score0.00366EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:52 a.m.•10 views

RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI

...

7.3CVSS5.8AI score0.00296EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:51 a.m.•3 views

RabbitMQ: Stream-protocol frame length never validated against frame_max

...

6.3CVSS0.00324EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:51 a.m.•3 views

RabbitMQ: Atom table exhaustion via stream `chunk_selector`

...

6CVSS0.0033EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:50 a.m.•3 views

RabbitMQ: ReDoS via management API ?name= filter

...

6CVSS0.0033EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:50 a.m.•3 views

RabbitMQ: Monitoring-tag user can DELETE shovels

...

6CVSS0.00303EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:50 a.m.•4 views

RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component

...

6.9CVSS0.00278EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:50 a.m.•7 views

RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics

...

2.3CVSS0.00395EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:49 a.m.•8 views

RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs

...

5.6CVSS0.00119EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:49 a.m.•8 views

RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status

...

4.6CVSS0.00278EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:49 a.m.•3 views

RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list

...

6.9CVSS0.00353EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:48 a.m.•3 views

RabbitMQ: Stream protocol skips per vhost per user connection limits

...

6CVSS0.00351EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:48 a.m.•4 views

RabbitMQ: Consistent-hash exchange unbounded weight

...

6CVSS0.00259EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:48 a.m.•11 views

RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI

...

7.6CVSS5.8AI score0.00267EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:47 a.m.•8 views

RabbitMQ: Monitoring-tag user can restart federation links

...

2.3CVSS0.00238EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:47 a.m.•7 views

RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client

...

5.9CVSS0.0031EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:47 a.m.•9 views

RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)

...

5.3CVSS0.00125EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:46 a.m.•12 views

RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS

...

8.2CVSS5.8AI score0.0032EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:45 a.m.•7 views

RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

...

5.9CVSS0.00353EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:45 a.m.•9 views

RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords

...

5.9CVSS0.00198EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:45 a.m.•9 views

Out-of-bounds write in Das U-Boot

...

9CVSS5.8AI score0.00286EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:44 a.m.•9 views

U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder

...

6CVSS5.8AI score0.00221EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:44 a.m.•70 views

U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation

...

5.2CVSS5.8AI score0.00185EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:43 a.m.•9 views

U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly

...

8.8CVSS5.8AI score0.00375EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:43 a.m.•7 views

U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK

...

8.8CVSS5.8AI score0.00344EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:42 a.m.•9 views

U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply

...

8.8CVSS5.8AI score0.00338EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:42 a.m.•13 views

Use-after-free of a server-side SSLContext when sni_callback switches contexts

...

9.2CVSS5.8AI score0.00429EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:42 a.m.•12 views

SSLContext.wrap_bio() missing validation of server_hostname parameter

...

7.6CVSS5.8AI score0.00401EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:41 a.m.•76 views

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

...

5.9CVSS5.8AI score0.0018EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:40 a.m.•8 views

virtualenv bash and fish activation scripts execute commands embedded in paths

...

7.8CVSS5.8AI score0.00153EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:40 a.m.•8 views

virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

...

5.8CVSS0.0014EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:40 a.m.•9 views

virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

...

7.7CVSS5.8AI score0.0016EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/03 8:39 a.m.•10 views

urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory

...

8.9CVSS5.8AI score0.00292EPSS
SaveExploits0
Total number of security vulnerabilities28540