Lucene search
+L

398607 matches found

NVD
NVD
•added 2026/09/16 8:17 p.m.•13 views

CVE-2026-86831

Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod...

8.7CVSS0.00643EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/16 8:17 p.m.•20 views

CVE-2026-86089

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...

7.1CVSS0.00436EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 8:17 p.m.•18 views

CVE-2026-82561

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations. Framework authorization for these methods was...

6.5CVSS0.00477EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 8:17 p.m.•17 views

CVE-2026-81866

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...

4.3CVSS0.00564EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 8:17 p.m.•18 views

CVE-2026-81870

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

2CVSS0.00195EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/16 8:17 p.m.•13 views

CVE-2026-76646

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

7.5CVSS0.00582EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 8:17 p.m.•23 views

CVE-2026-76423

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit...

10CVSS0.00583EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•14 views

CVE-2026-62949

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0, processchannelopen and processchannelopenconfirmation in asyncssh/connection.py accept a peer-supplied sendpktsize value of...

6.5CVSS0.00389EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/16 8:17 p.m.•20 views

CVE-2026-70469

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and d...

7.5CVSS0.00622EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 8:17 p.m.•12 views

CVE-2026-20341

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured deserialization of untrusted data over the sftunnel management connection. An attacker...

9.1CVSS0.00445EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•15 views

CVE-2026-20361

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

8.8CVSS0.00282EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•16 views

CVE-2026-20322

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

9.9CVSS0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•22 views

CVE-2026-20329

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

9.9CVSS0.00446EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•33 views

CVE-2026-20324

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions t...

9.9CVSS0.0045EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•20 views

CVE-2026-20326

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

9.8CVSS0.00387EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•14 views

CVE-2026-20325

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

9.9CVSS0.0034EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•21 views

CVE-2026-20330

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

9.9CVSS0.00336EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•22 views

CVE-2026-20242

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

9.8CVSS0.00639EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•23 views

CVE-2026-20211

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative credentials. This vulnerability is due to...

9.1CVSS0.00558EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•13 views

CVE-2026-20194

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

9.1CVSS0.00446EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•15 views

CVE-2026-20237

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

9.1CVSS0.00328EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•11 views

CVE-2026-20176

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative credentials. This vulnerability is due to...

9.1CVSS0.00781EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•22 views

CVE-2026-20130

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

10CVSS0.00395EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 8:17 p.m.•14 views

CVE-2026-20192

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

10CVSS0.00458EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•12 views

CVE-2026-92418

A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/public/js/customerServe/customer.serve.js of the component Save Endpoint. This manipulation of the argument customerName causes...

5.1CVSS0.00348EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/16 7:18 p.m.•10 views

CVE-2026-92473

A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gfsgcommanddel of the file src/scenegraph/commands.c of the component BIFS Handler. The manipulation leads to use after free. The attack needs to be performed locally. The exploit is publicly available and migh...

4.8CVSS0.00168EPSS
SaveExploits0References9
NVD
NVD
•added 2026/09/16 7:18 p.m.•10 views

CVE-2026-92729

SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to retrieve trace analytics including identifiers, durations, span counts, service topology, and...

8.8CVSS0.00583EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/16 7:18 p.m.•10 views

CVE-2026-92472

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

4.8CVSS0.00168EPSS
SaveExploits0References9
NVD
NVD
•added 2026/09/16 7:18 p.m.•10 views

CVE-2026-92417

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogspfcpparsevolumemeasurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as...

7.1CVSS0.0067EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/16 7:18 p.m.•12 views

CVE-2026-91103

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.00965EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•21 views

CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.01035EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•20 views

CVE-2026-91104

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.01071EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•14 views

CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.00792EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•19 views

CVE-2026-91105

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.01035EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•11 views

CVE-2026-91099

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.00981EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•15 views

CVE-2026-91097

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.0101EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•10 views

CVE-2026-91100

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.00723EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•11 views

CVE-2026-91101

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.00965EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 7:18 p.m.•14 views

CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS0.01005EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 7:17 p.m.•11 views

CVE-2026-86071

Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFolderExtractor.java can create directories outside the intended extraction root when processing a crafted archive entry. LocalFolderExtractor.createFile validat...

3.7CVSS0.00362EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/16 7:17 p.m.•12 views

CVE-2026-86043

Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the opaAuthorizeRequestWithBody filter can authorize an oversized request after Skipper truncates the body presented to Open Policy Agent because the input.truncatedbody signal is derived from...

7.5CVSS0.00451EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/16 7:17 p.m.•14 views

CVE-2026-86003

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go call dns.Msg.Unpack without the dns.DefaultMsgAcceptFunc request policy...

7.5CVSS0.00436EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/16 7:17 p.m.•15 views

CVE-2026-81876

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java can enter an infinite loop while processing attacker-controlled Smart Health Car...

7.5CVSS0.0063EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/16 7:17 p.m.•13 views

CVE-2026-82399

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths in plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go call dns.Msg.Unpack on attacker-controlled DNS section counts before...

7.5CVSS0.00609EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/16 7:17 p.m.•15 views

CVE-2026-81875

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java can consume attacker-controlled Smart Health Card JWT content whose header...

7.5CVSS0.0063EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/16 7:17 p.m.•10 views

CVE-2026-81176

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. Prior to 5.9.2, devalue.parse does not reject out-of-bounds indices that are greater than or equal to values.length in src/parse.js. A specially crafted untrusted payload c...

5.3CVSS0.00507EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/16 7:17 p.m.•10 views

CVE-2026-79298

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...

8.4CVSS0.00192EPSS
SaveExploits1References2
NVD
NVD
•added 2026/09/16 7:17 p.m.•11 views

CVE-2026-77360

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @orpc/server CORS plugin in packages/server/src/plugins/cors.ts copies a client's incoming Vary request header into the response instead of controlling Vary as a response-only...

6.3CVSS0.00543EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/16 7:17 p.m.•16 views

CVE-2026-75516

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start applies Math.minmaxInboundMessageBodySize, frameMax after Connection.Tune negotiation even though AMQP defines frameMax value zero as...

8.7CVSS0.00552EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/16 7:17 p.m.•12 views

CVE-2026-75025

Mattermost Desktop App versions =6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or private network resources. Thanks to game0v3r for contributing to this improvement under the Mattermost responsible disclosure policy...

4.7CVSS0.00155EPSS
SaveExploits0References1
Total number of security vulnerabilities398607