Lucene search
+L

2109644 matches found

OSV
OSV
•added 2026/09/23 12:52 p.m.•4 views

CGA-8H5P-XFM7-8842

Bulletin has no description...

5.7AI score
SaveExploits0
OSV
OSV
•added 2026/09/23 12:52 p.m.•3 views

CGA-QP5H-77VW-XVMC

Bulletin has no description...

5.7AI score
SaveExploits0
OSV
OSV
•added 2026/09/23 12:37 p.m.•4 views

ECHO-088C-1462-CA4C

Bulletin has no description...

6.9CVSS5.7AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:37 p.m.•6 views

ECHO-0E64-158A-542B

Bulletin has no description...

6.7CVSS5.7AI score0.0015EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:37 p.m.•5 views

CGA-Q4CX-MR93-QC6H

Bulletin has no description...

5.7AI score
SaveExploits0
OSV
OSV
•added 2026/09/23 12:37 p.m.•5 views

CGA-7FXG-8XV5-FR26

Bulletin has no description...

5.7AI score
SaveExploits0
OSV
OSV
•added 2026/09/23 12:37 p.m.•4 views

ECHO-5352-3F6E-0C72

Bulletin has no description...

6.9CVSS5.7AI score0.00167EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:37 p.m.•4 views

ECHO-0C4C-8C22-BE6A

Bulletin has no description...

6.9CVSS5.7AI score0.00167EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:36 p.m.•6 views

ECHO-8494-A0DC-6B0C

Bulletin has no description...

6.9CVSS5.7AI score0.00167EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:36 p.m.•6 views

ECHO-EF2E-7BA4-F184

Bulletin has no description...

6.9CVSS5.7AI score0.00108EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:36 p.m.•6 views

ECHO-94B9-8EC3-458F

Bulletin has no description...

6.9CVSS5.7AI score0.00167EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:29 p.m.•17 views

ROOT-APP-NPM-CVE-2026-59940 CVE-2026-59940 in seroval - Patched by Root

Root has patched CVE-2026-59940 in the seroval package for Root:npm. Multiple fixed versions available...

9.8CVSS5.7AI score0.00812EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 12:25 p.m.•5 views

CLSA-2026-1790166345 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.2...

7.5CVSS5.7AI score0.00609EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 12:21 p.m.•4 views

CGA-4QRX-39WV-224R

Bulletin has no description...

6.5CVSS5.7AI score0.00466EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/23 12:17 p.m.•6 views

DEBIAN-CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS5.8AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•7 views

DEBIAN-CVE-2026-86248

CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.25, from 10.1.22 through 10.1.59, from 9.0.92 through 9.0.121. Users are recommended to upgrade to versi...

9.8CVSS5.8AI score0.00386EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•6 views

DEBIAN-CVE-2026-86350

Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...

9.1CVSS5.8AI score0.00313EPSS
SaveExploits1References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•8 views

DEBIAN-CVE-2026-79677

Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through...

7.5CVSS5.8AI score0.00322EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•7 views

DEBIAN-CVE-2026-78437

Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially depends on timing cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121. Users are...

7.3CVSS5.9AI score0.0026EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•4 views

DEBIAN-CVE-2026-78383

Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1...

7.5CVSS5.8AI score0.00376EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•8 views

DEBIAN-CVE-2026-76183

Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following version...

9.8CVSS5.8AI score0.0039EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•6 views

DEBIAN-CVE-2026-75973

Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to authenticate a request would be used for all web...

7.3CVSS5.8AI score0.00238EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•6 views

DEBIAN-CVE-2026-77791

Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack. This issue affects Apache Tomcat: from 11.0.0-M5 through 11.0.25, from 10.1.8 through 10.1.59, from 9.0.74 through 9.0.121. The following versions were EOL at the time...

7.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•7 views

DEBIAN-CVE-2026-77756

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse prox...

3.7CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•6 views

DEBIAN-CVE-2026-73581

Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from 9.0.0-M1 through...

6.5CVSS5.8AI score0.00117EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:17 p.m.•7 views

DEBIAN-CVE-2026-77762

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from...

8.1CVSS5.8AI score0.00361EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 12:04 p.m.•5 views

CLSA-2026-1790165044 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.12-tuxcare.1...

7.5CVSS5.7AI score0.00841EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 12:01 p.m.•76 views

ROOT-APP-MAVEN-CVE-2026-40972 CVE-2026-40972 in org.springframework.boot:spring-boot-devtools - Patched by Root

Root has patched CVE-2026-40972 in the org.springframework.boot:spring-boot-devtools package for Root:Maven. Multiple fixed versions available...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 12:01 p.m.•24 views

ROOT-APP-MAVEN-CVE-2026-40976 CVE-2026-40976 in org.springframework.boot:spring-boot - Patched by Root

Root has patched CVE-2026-40976 in the org.springframework.boot:spring-boot package for Root:Maven. Multiple fixed versions available...

9.1CVSS7.1AI score0.00538EPSS
SaveExploits1
OSV
OSV
•added 2026/09/23 12:00 p.m.•7 views

RUSTSEC-2026-0305 Use-after-free when XML includes have duplicated entities

Librsvg uses libxml2, a C library, to parse XML. When librsvg parses an SVG document which has a nested Xinclude, an XML entity declaration with a duplicate name as an existing one can cause a use-after-free error. While libxml2 is expanding an internal entity, a recursive XInclude can parse...

7.8CVSS6.1AI score0.00129EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/23 12:00 p.m.•3 views

RUSTSEC-2026-0307 `uncbv`: archive extraction is vulnerable to path traversal (zip-slip)

Summary uncbv extract writes each archive entry to outputdir.joinentryfilename using the filename stored in the archive with no check for .. components or absolute paths. A malicious .cbv / .cbz archive whose entry name contains ../ or an absolute path can therefore cause files to be written...

7.1CVSS5.9AI score
SaveExploits0References3
OSV
OSV
•added 2026/09/23 11:59 a.m.•5 views

CGA-929F-MV84-H64W

Bulletin has no description...

6.2CVSS5.7AI score0.00192EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 11:59 a.m.•5 views

CGA-X2W3-H4G7-53J8

Bulletin has no description...

6.2CVSS5.7AI score0.0013EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 11:58 a.m.•21 views

ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in com.google.guava:guava - Patched by Root

Root has patched CVE-2023-2976 in the com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

5.5CVSS6.5AI score0.00248EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 11:56 a.m.•3 views

OPENSUSE-SU-2026:21953-1 Security update for python-asyncssh

This update for python-asyncssh fixes the following issues: Changes in python-asyncssh: - CVE-2026-62949: denial of service via infinite loop when processing zero-sized SSH packets bsc1280972...

6.5CVSS5.8AI score0.00548EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/23 11:54 a.m.•3 views

CGA-GHCF-3XPM-GPRR

Bulletin has no description...

6.5CVSS5.7AI score0.00466EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/23 11:52 a.m.•3 views

OPENSUSE-SU-2026:21935-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write bsc1248078...

8.8CVSS7.9AI score0.00961EPSS
SaveExploits1References2
OSV
OSV
•added 2026/09/23 11:49 a.m.•7 views

CLSA-2026-1790164156 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 6.2.2-tuxcare.1...

7.5CVSS5.7AI score0.01346EPSS
SaveExploits2
OSV
OSV
•added 2026/09/23 11:48 a.m.•3 views

CLSA-2026-1790164081 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.5.0-tuxcare.1...

7.5CVSS5.7AI score0.01346EPSS
SaveExploits2
OSV
OSV
•added 2026/09/23 11:37 a.m.•4 views

SUSE-SU-2026:4302-1 Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/23 11:36 a.m.•1 views

OPENSUSE-SU-2026:21954-1 Security update for osmo-iuh

This update for osmo-iuh fixes the following issues: Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607...

7.5CVSS5.8AI score0.00549EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/23 11:29 a.m.•6 views

ECHO-B652-472D-4B8D

Bulletin has no description...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 11:29 a.m.•6 views

ECHO-AC54-A599-3035

Bulletin has no description...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 11:29 a.m.•6 views

ECHO-60E6-3169-A982

Bulletin has no description...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 11:27 a.m.•6 views

ECHO-2D66-2137-D02B

Bulletin has no description...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 11:25 a.m.•6 views

ECHO-8095-238B-F99C

Bulletin has no description...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/23 11:25 a.m.•3 views

CLSA-2026-1790162728 TuxCare security update for 14 packages (1 CVE)

TuxCare rebuilt 14 packages to address 1 CVE. Fixed in 3.2.4-tuxcare.3...

9.4CVSS5.7AI score0.0079EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 11:24 a.m.•6 views

CLSA-2026-1790162696 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.16-tuxcare.1...

7.5CVSS5.7AI score0.00841EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 11:23 a.m.•5 views

CLSA-2026-1790162622 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.2...

7.5CVSS5.7AI score0.00609EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 11:20 a.m.•5 views

ECHO-9D8D-CA96-2A24

Bulletin has no description...

5.7AI score
SaveExploits0References2
Total number of security vulnerabilities2109644