Lucene search
+L

2104782 matches found

OSV
OSV
•added 2026/09/21 8:59 a.m.•4 views

CVE-2025-12999

UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Prefix request headers, with no check on whether the sender was a trusted proxy, falling back to the client-supplied Host header...

9.1CVSS5.8AI score
SaveExploits0References5
OSV
OSV
•added 2026/09/21 8:55 a.m.•5 views

BIT-ENVOY-GATEWAY-2026-53719 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

6.5CVSS5.8AI score0.00715EPSS
SaveExploits0References10
OSV
OSV
•added 2026/09/21 8:54 a.m.•4 views

BIT-ENVOY-GATEWAY-2026-53718 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API...

6.4CVSS5.8AI score0.00413EPSS
SaveExploits0References10
OSV
OSV
•added 2026/09/21 8:54 a.m.•7 views

BIT-ENVOY-GATEWAY-2026-53717 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm.code.image.url values to Docker or OCI Wasm layers, and...

6.5CVSS5.7AI score0.00715EPSS
SaveExploits0References10
OSV
OSV
•added 2026/09/21 8:54 a.m.•7 views

BIT-ENVOY-GATEWAY-2026-53716 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled...

6.5CVSS5.8AI score0.00715EPSS
SaveExploits0References10
OSV
OSV
•added 2026/09/21 8:54 a.m.•6 views

BIT-ENVOY-GATEWAY-2026-53715 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the sam...

5.3CVSS5.8AI score0.00467EPSS
SaveExploits0References10
OSV
OSV
•added 2026/09/21 8:54 a.m.•7 views

BIT-ENVOY-GATEWAY-2026-53714 Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor bu...

7.4CVSS5.8AI score0.00348EPSS
SaveExploits0References10
OSV
OSV
•added 2026/09/21 8:54 a.m.•5 views

BIT-ENVOY-GATEWAY-2026-53713 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, toabsolutenormalizedpath in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before iscriticalpath evaluates Lua...

9.1CVSS6AI score0.00433EPSS
SaveExploits0References10
OSV
OSV
•added 2026/09/21 8:31 a.m.•14 views

SUSE-SU-2026:23459-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...

7.2CVSS5.8AI score0.0011EPSS
SaveExploits0References13
OSV
OSV
•added 2026/09/21 8:30 a.m.•12 views

SUSE-SU-2026:21461-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory OOM termination bsc1248093. - CVE-2026-35206: specially crafted Chart will have contents extracted to immediate output...

6.5CVSS6.3AI score0.00334EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/21 8:16 a.m.•17 views

DEBIAN-CVE-2026-47321

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...

7.5CVSS6AI score0.00488EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/21 8:16 a.m.•16 views

UBUNTU-CVE-2026-47321

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...

7.5CVSS6AI score0.00488EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/21 8:07 a.m.•11 views

ROOT-OS-DEBIAN-13-CVE-2026-6653 CVE-2026-6653 in libxml2 - Patched by Root

Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...

9.8CVSS5.2AI score0.00355EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 8:07 a.m.•7 views

ROOT-OS-DEBIAN-13-CVE-2025-12863 CVE-2025-12863 in libxml2 - Patched by Root

Root has patched CVE-2025-12863 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...

5.2AI score0.00068EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 8:07 a.m.•6 views

ROOT-OS-DEBIAN-13-CVE-2026-86140 CVE-2026-86140 in libxml2 - Patched by Root

Root has patched CVE-2026-86140 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...

8CVSS5.6AI score0.0021EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 8:07 a.m.•6 views

ROOT-OS-DEBIAN-13-CVE-2026-74860 CVE-2026-74860 in libxml2 - Patched by Root

Root has patched CVE-2026-74860 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...

8.5CVSS5.7AI score0.00606EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 7:33 a.m.•2 views

SUSE-SU-2026:4275-1 Security update for jq

This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd function bsc976992. - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in decNumberToString bsc1218034. - CVE-2023-50268: stack-based buffer overflow ...

10CVSS6.8AI score0.07268EPSS
SaveExploits14References36
OSV
OSV
•added 2026/09/21 7:31 a.m.•4 views

SUSE-SU-2026:4274-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

7.6CVSS6.5AI score0.00533EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/21 7:30 a.m.•4 views

SUSE-SU-2026:4273-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

7.6CVSS6.5AI score0.00533EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/21 7:30 a.m.•3 views

SUSE-SU-2026:4272-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118....

9.1CVSS5.9AI score0.01625EPSS
SaveExploits1References15
OSV
OSV
•added 2026/09/21 7:30 a.m.•3 views

SUSE-SU-2026:4271-1 Security update for dovecot22

This update for dovecot22 fixes the following issue: - CVE-2026-40016: Sieve :contains/:matches ONxM substring match bypasses sievemaxcputime limit bsc1265148...

6.5CVSS6.3AI score0.00427EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/21 7:29 a.m.•3 views

SUSE-SU-2026:4270-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260264. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input...

9.1CVSS5.9AI score0.01625EPSS
SaveExploits1References16
OSV
OSV
•added 2026/09/21 7:15 a.m.•5 views

CVE-2026-94148 ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure

A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of the file /ScadaBR/exportproject.htm of the component Export Project Endpoint. This manipulation causes information disclosure. The attack can be initiated remotely. The exploit has been...

6.9CVSS5AI score
SaveExploits0References9
OSV
OSV
•added 2026/09/21 6:43 a.m.•15 views

ROOT-APP-NPM-CVE-2026-62680 CVE-2026-62680 in orval - Patched by Root

Root has patched CVE-2026-62680 in the orval package for Root:npm. Multiple fixed versions available...

7.1CVSS5.5AI score0.00403EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•9 views

ROOT-APP-NPM-CVE-2026-72716 CVE-2026-72716 in orval - Patched by Root

Root has patched CVE-2026-72716 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•10 views

ROOT-APP-NPM-CVE-2026-71864 CVE-2026-71864 in orval - Patched by Root

Root has patched CVE-2026-71864 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•9 views

ROOT-APP-NPM-AIKIDO-2026-939997 AIKIDO-2026-939997 in orval - Patched by Root

Root has patched AIKIDO-2026-939997 in the orval package for Root:npm. Multiple fixed versions available...

5.5AI score
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•8 views

ROOT-APP-NPM-CVE-2026-71865 CVE-2026-71865 in orval - Patched by Root

Root has patched CVE-2026-71865 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•12 views

ROOT-APP-NPM-CVE-2026-71867 CVE-2026-71867 in orval - Patched by Root

Root has patched CVE-2026-71867 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•11 views

ROOT-APP-NPM-CVE-2026-62681 CVE-2026-62681 in orval - Patched by Root

Root has patched CVE-2026-62681 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•7 views

ROOT-APP-NPM-CVE-2026-71868 CVE-2026-71868 in orval - Patched by Root

Root has patched CVE-2026-71868 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•9 views

ROOT-APP-NPM-CVE-2026-72717 CVE-2026-72717 in orval - Patched by Root

Root has patched CVE-2026-72717 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•11 views

ROOT-APP-NPM-CVE-2026-62682 CVE-2026-62682 in orval - Patched by Root

Root has patched CVE-2026-62682 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•8 views

ROOT-APP-NPM-CVE-2026-71866 CVE-2026-71866 in orval - Patched by Root

Root has patched CVE-2026-71866 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•12 views

ROOT-APP-NPM-CVE-2026-71869 CVE-2026-71869 in orval - Patched by Root

Root has patched CVE-2026-71869 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:43 a.m.•11 views

ROOT-APP-NPM-CVE-2026-71871 CVE-2026-71871 in orval - Patched by Root

Root has patched CVE-2026-71871 in the orval package for Root:npm. Multiple fixed versions available...

9.3CVSS5.5AI score0.00653EPSS
SaveExploits0
OSV
OSV
•added 2026/09/21 6:37 a.m.•8 views

ROOT-OS-DEBIAN-13-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root

Root has patched CVE-2026-8924 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.8AI score0.00661EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•6 views

ROOT-OS-DEBIAN-13-CVE-2026-80229 CVE-2026-80229 in curl - Patched by Root

Root has patched CVE-2026-80229 in the curl package for Root:Debian:13. Multiple fixed versions available...

5.6AI score0.00873EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•14 views

ROOT-OS-DEBIAN-13-CVE-2026-9080 CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.8AI score0.00494EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•16 views

ROOT-OS-DEBIAN-13-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root

Root has patched CVE-2026-9545 in the curl package for Root:Debian:13. Multiple fixed versions available...

5.2AI score0.00408EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•13 views

ROOT-OS-DEBIAN-13-CVE-2026-9079 CVE-2026-9079 in curl - Patched by Root

Root has patched CVE-2026-9079 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.8AI score0.00584EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•6 views

ROOT-OS-DEBIAN-13-CVE-2026-13608 CVE-2026-13608 in curl - Patched by Root

Root has patched CVE-2026-13608 in the curl package for Root:Debian:13. Multiple fixed versions available...

5.6AI score0.00479EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•6 views

ROOT-OS-DEBIAN-13-CVE-2026-82209 CVE-2026-82209 in curl - Patched by Root

Root has patched CVE-2026-82209 in the curl package for Root:Debian:13. Multiple fixed versions available...

5.6AI score0.00517EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•15 views

ROOT-OS-DEBIAN-13-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root

Root has patched CVE-2026-11856 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.8AI score0.00688EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•7 views

ROOT-OS-DEBIAN-13-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root

Root has patched CVE-2026-10536 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.7AI score0.00598EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•7 views

ROOT-OS-DEBIAN-13-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root

Root has patched CVE-2026-8926 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.8AI score0.00444EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•14 views

ROOT-OS-DEBIAN-13-CVE-2026-8458 CVE-2026-8458 in curl - Patched by Root

Root has patched CVE-2026-8458 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.8AI score0.00371EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•16 views

ROOT-OS-DEBIAN-13-CVE-2025-15079 CVE-2025-15079 in curl - Patched by Root

Root has patched CVE-2025-15079 in the curl package for Root:Debian:13. Multiple fixed versions available...

5.3CVSS6.2AI score0.00537EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•12 views

ROOT-OS-DEBIAN-13-CVE-2026-12064 CVE-2026-12064 in curl - Patched by Root

Root has patched CVE-2026-12064 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.8AI score0.00399EPSS
SaveExploits1
OSV
OSV
•added 2026/09/21 6:37 a.m.•10 views

ROOT-OS-DEBIAN-13-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root

Root has patched CVE-2026-8927 in the curl package for Root:Debian:13. Multiple fixed versions available...

4.8AI score0.005EPSS
SaveExploits1
Total number of security vulnerabilities2104782