Lucene search
+L

398607 matches found

NVD
NVD
•added 2026/09/24 7:17 p.m.•12 views

CVE-2026-13248

An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version...

8.8CVSS0.00439EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 7:17 p.m.•8 views

CVE-2026-13016

ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modif...

9.3CVSS0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:19 p.m.•11 views

CVE-2026-97232

A vulnerability was determined in volotat Anagnorisis up to 0.4.2. Affected by this vulnerability is the function getfilecontent/savefilecontent/movefiles/startstreaming of the file page.html. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been...

6.5CVSS0.00339EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/24 6:19 p.m.•12 views

CVE-2026-97233

A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the file PlaylistManager.js of the component Media Filename Handler. Such manipulation of the argument filepath leads to cross site scripting. The attack can be launched remotely. Th...

5.1CVSS0.00191EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/24 6:19 p.m.•13 views

CVE-2026-95985

The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to...

8.8CVSS0.00135EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 6:19 p.m.•10 views

CVE-2026-93405

Mailspring is a fast, cross-platform, open-source email client. Prior to 1.17.0, attachment quick preview converts Markdown, DOCX, and XLSX attachments with Snarkdown, Mammoth, and SheetJS and inserts the resulting HTML into the preview document through innerHTML without sanitization. A remote...

6.1CVSS0.00225EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/24 6:19 p.m.•13 views

CVE-2026-91119

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

6.4CVSS0.00201EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/24 6:19 p.m.•13 views

CVE-2026-91121

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, attacker-controlled upload filenames used in chat message excerpts were rendered as unescaped HTML. A user able to upload a file and send chat content could place markup in a filename that was th...

5CVSS0.00258EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/24 6:19 p.m.•11 views

CVE-2026-91120

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, provider-controlled video titles in lazy video embeds could be reparsed as HTML when Discourse generated notification emails or chat summaries. A user with standard posting privileges could creat...

5.4CVSS0.00201EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/24 6:19 p.m.•10 views

CVE-2026-85056

ZITADEL is an open source identity management platform. From 4.0.0 until 4.16.1, ZITADEL Login V2 creates a browser session after password verification and can reuse that session for a later authentication request without verifying a user's enrolled TOTP, OTP, or U2F second factor. When the MFA...

8.2CVSS0.00285EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/24 6:19 p.m.•11 views

CVE-2026-85057

ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible require registry without restricting its filesystem source loader. An organization Action author with ORGOWNER, org.action.write, and org.flow.write...

8.7CVSS0.0039EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/24 6:18 p.m.•10 views

CVE-2026-81508

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

4.3CVSS0.00213EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/24 6:18 p.m.•11 views

CVE-2026-71540

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.9.0 until 4.14.7, wazuh-clusterd in framework/wazuh/core/cluster/common.py allocates a payload buffer using the size declared in a 20-byte cluster protocol header before...

7.5CVSS0.0035EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/24 6:17 p.m.•12 views

CVE-2026-63645

OpenObserve is a cloud-native observability platform. Prior to 0.90.3, OpenObserve registers the /config/runtime endpoint without authentication and serializes the complete server configuration after applying the hidesensitivefields keyword filter. The filter does not recognize dsn or creds field...

7.5CVSS0.00333EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/24 6:17 p.m.•10 views

CVE-2026-61815

zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap functions and Pear libraries for reading messages in Internet Message Format RFC 822. Prior to version 3.0.6 and 4.0.2, CRLF carriage-return / line-feed header injection CWE-93 affecting any application that uses this libra...

7.2CVSS0.00178EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•15 views

CVE-2026-61816

zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap functions and Pear libraries for reading messages in Internet Message Format RFC 822. Starting in version 2.0.0 and prior to version 3.0.6 and 4.0.2, an uncontrolled resource consumption / algorithmic complexity vulnerabili...

7.5CVSS0.00393EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•11 views

CVE-2026-61741

http4s-scala-xml provides EntityDecoderF, scala.xml.Elem instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these decoders used a javax.xml.parsers.SAXParserFactory obtained from SAXParserFactory.newInstance without any security configuration. With the JDK's default...

9.3CVSS0.00294EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•15 views

CVE-2026-61788

DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting readonly = true on the executesql tool does not make the connection read-only. The connectors are written to set PostgreSQL defaulttransactionreadonly=on and open SQLite in...

7.4CVSS0.00303EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•13 views

CVE-2026-61782

Rsdoctor is a build analyzer tailored for projects built with Rspack. Prior to version 1.5.16, the default Rsdoctor report HTTP server started by @rsdoctor/rspack-plugin binds to all network interfaces 0.0.0.0 and serves a POST /api/data/key endpoint with no authentication and wildcard CORS...

7.5CVSS0.0036EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•12 views

CVE-2026-61784

xhtml-purifier is a Node.js library to take in raw/unknown/untrusted HTML and output cleaned, purified, trusted HTML. Versions prior to 0.4.3 do not HTML-entity-encode attribute values when serializing its sanitized output. In attributeString XHTMLPurifier.js, around line 148 the attribute value ...

6.1CVSS0.00168EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 6:17 p.m.•13 views

CVE-2026-61742

DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to 0.22.5 expose an unauthenticated HTTP MCP endpoint when started with the documented HTTP transport mode, for example --transport http --port 8080. The HTTP server attempts to protect...

9.3CVSS0.00201EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•12 views

CVE-2026-61811

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the getattributes function in src/osxml/osxml.c recursively processes every XML attribute without a depth limit while allocating two large local buffers ...

6.5CVSS0.0037EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/24 6:17 p.m.•13 views

CVE-2026-57179

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted partialtoken as a bearer credential without binding it to the browser session that created it. Applications using resumable partial pipeline steps could all...

4.2CVSS0.00158EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•12 views

CVE-2026-61604

The ixo Blockchain is a Layer 1 blockchain that runs on both Testnet and Mainnet. Prior to version 8.0.0, the x/bonds module moved funds from an address that was resolved from a DID verification method, without verifying that the resolved address belonged to the transaction signer. Affected...

9.3CVSS0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•12 views

CVE-2026-61732

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

10CVSS0.01221EPSS
SaveExploits1References2
NVD
NVD
•added 2026/09/24 6:17 p.m.•16 views

CVE-2026-57176

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend userid as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Ven...

6.8CVSS0.00219EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•13 views

CVE-2026-57177

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state during the authentication flow. Applications using this backend were vulnerable to login CSRF. An attacker could cause a victim's browser session to...

4.3CVSS0.00108EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•13 views

CVE-2026-57178

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the vk-app backend accepted VK application callback data without verifying the callback signature when the authkey parameter was omitted. Applications using this backend could treat unsigned...

7.4CVSS0.0016EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•12 views

CVE-2026-57175

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued AuthnRequest. Applications using SAML account association could...

6.4CVSS0.00228EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 6:17 p.m.•11 views

CVE-2026-54461

Habitica is a habit tracker application that treats goals like a role-playing game. From 4.172.1 until 5.48.2, a query parameter on Habitica's /api/v3/groups/:groupId/members route is not sanitized before being interpreted as a regular expression. An authenticated caller can supply a...

6.5CVSS0.00295EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•11 views

CVE-2026-97520

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...

7.1CVSS0.00121EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•8 views

CVE-2026-97521

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used gfs2qdsearchbucket, which takes a lockref reference via...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•9 views

CVE-2026-97519

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix null pointer dereference in devcoredump cleanup In xedevcoredumpsnapshotfree, ss-gt may be NULL when the snapshot was never fully populated e.g., when cleanup is triggered without a prior capture. Guard the...

0.00145EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 5:17 p.m.•8 views

CVE-2026-97513

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...

7.8CVSS0.00115EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 5:17 p.m.•11 views

CVE-2026-97514

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the lockdepassertheld. However, the handledynamicresolutionchange call in...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•9 views

CVE-2026-97518

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject duplicate wiphy cipher suite entries Duplicate entries in wiphy-ciphersuites do not describe any additional capability, but cfg80211 currently accepts them and leaves individual consumers to deal with them...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•11 views

CVE-2026-97516

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edccath without a NULL check. The issue is that devices with the 8821CE ch...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•10 views

CVE-2026-97515

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a false Master Request MR in-band interrupt event. The driver handles...

0.00145EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 5:17 p.m.•9 views

CVE-2026-97517

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs to be longer than the fixed part, but also have an appropriate size for the variable part inside of it. Check this...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•10 views

CVE-2026-97512

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•10 views

CVE-2026-97503

In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...

0.00145EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 5:17 p.m.•11 views

CVE-2026-97507

In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dmaalloccoherent The return value of dm1105dmamap, which handles DMA memory allocation, is ignored in dm1105hwinit. If dmaalloccoherent fails, the driver will proceed using a NULL pointe...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•10 views

CVE-2026-97506

In the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainupbuffers builds a linked list of buffer descriptors for a scatterlist. If dmapoolalloc fails while constructing the list, the current code sets buf to NULL and...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•9 views

CVE-2026-97510

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Release request if tbcfgrequest fails in tbxdomainresponse If tbcfgrequest fails setting up the request for example the control channel is shut down already it returns an error without calling the callback. To avoid...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•9 views

CVE-2026-97504

In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovose10wdt: Fix use-after-free and resource leak risk Review by sashiko.dev highlighted potential use after free and resource leak instances. Set se10pdev to null to prevent use after free Remove DMI call back and...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•12 views

CVE-2026-97505

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...

0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•14 views

CVE-2026-97509

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

8.8CVSS0.00236EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/24 5:17 p.m.•9 views

CVE-2026-97508

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return error to the remote host. However, we need to make sure we keep the uui...

7.5CVSS0.0021EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 5:17 p.m.•11 views

CVE-2026-97511

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds access in monitor In NAN, we don't know on what band the frame will be sent. Therefore we set info-band to NUMNL80211BANDS. However, this leads to out-of-bound access in...

0.00145EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 5:17 p.m.•10 views

CVE-2026-97496

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

7.1CVSS0.00124EPSS
SaveExploits0References3
Total number of security vulnerabilities398607