|
211
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
coresight: tmc-etr: Fix race condition between sysfs and perf mode
When trying to run perf and sysfs mode simultaneously, the WAR…
New
|
-
|
CVE-2026-46272
|
2026-06-6 05:51 |
2026-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212
|
7.4 |
HIGH
Network
|
-
|
-
|
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Versions on the 2.x branch prior to 2.15.0 and the 3.x branch pri…
New
|
CWE-200
Information Exposure
|
CVE-2026-45300
|
2026-06-6 05:51 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213
|
9.6 |
CRITICAL
Network
|
-
|
-
|
Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` (0.10.1) to PyPI. …
New
|
CWE-506
Embedded Malicious Code
|
CVE-2026-45758
|
2026-06-6 05:51 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214
|
- |
|
-
|
-
|
A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is identical across all installations, an unauthenticated network a…
New
|
CWE-22 CWE-798
Path Traversal Use of Hard-coded Credentials
|
CVE-2026-11414
|
2026-06-6 05:49 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215
|
- |
|
-
|
-
|
A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper validation of a user-controlled path component in image upload requests. An authen…
New
|
CWE-22 CWE-434
Path Traversal Unrestricted Upload of File with Dangerous Type
|
CVE-2026-11419
|
2026-06-6 05:49 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216
|
- |
|
-
|
-
|
Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network attacker to write arbitrary files to any writable location on…
New
|
CWE-22 CWE-306
Path Traversal Missing Authentication for Critical Function
|
CVE-2026-11420
|
2026-06-6 05:49 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
217
|
8.0 |
HIGH
Network
|
-
|
-
|
An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges t…
New
|
CWE-426
Untrusted Search Path
|
CVE-2026-11400
|
2026-06-6 05:49 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218
|
8.0 |
HIGH
Network
|
-
|
-
|
An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to …
New
|
CWE-426
Untrusted Search Path
|
CVE-2026-11401
|
2026-06-6 05:49 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219
|
6.0 |
MEDIUM
Network
|
-
|
-
|
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). This issue uniquely…
New
|
CWE-78
OS Command
|
CVE-2026-25620
|
2026-06-6 05:48 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220
|
6.0 |
MEDIUM
Network
|
-
|
-
|
A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uniquely affects versi…
New
|
CWE-78
OS Command
|
CVE-2026-25621
|
2026-06-6 05:48 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|