Lucene search
+L

24840 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/10 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-0398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor. CVE-2026-0398 Note that Nessus relies on th...

5.3CVSS6.1AI score0.00303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:00 a.m.13 views

Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-38345)

In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I found an ACPI cache leak in ACPI early termination and boot continuing case. When early termination occurs due to maliciou...

5.5CVSS6.4AI score0.00167EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:00 a.m.8 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcs (UTSA-2026-005306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005306 advisory. Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/09 8:15 p.m.12 views

PYSEC-2026-2197

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6.1AI score0.00412EPSS
SaveExploits1References4
NVD
NVD
added 2026/02/09 8:15 p.m.10 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS0.00412EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/02/09 6:49 p.m.39 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS0.00412EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/09 6:49 p.m.5 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.6AI score0.00412EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/02/09 6:49 p.m.11 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.7AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/02/09 6:49 p.m.6 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.6AI score0.00412EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/09 6:49 p.m.49 views

CVE-2026-25480

Litestar prior to 2.20.0 uses FileStore cache keys derived from Unicode NFKD normalization and ord() substitution without separators, enabling cache key collisions when used as a response-cache backend. An unauthenticated remote attacker can craft paths to trigger collisions, causing one URL to s...

6.5CVSS5.6AI score0.00412EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/02/09 5:19 p.m.14 views

Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Summary FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remote attacker can trigger cache key collisions via crafted paths, causing one UR...

6.5CVSS5.7AI score0.00412EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/02/09 5:19 p.m.7 views

GHSA-VXQX-RH46-Q2PG Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Summary FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remote attacker can trigger cache key collisions via crafted paths, causing one UR...

6.5CVSS5.7AI score0.00412EPSS
SaveExploits1References6
NVD
NVD
added 2026/02/09 3:16 p.m.17 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/09 3:16 p.m.8 views

CVE-2025-59024

Crafted delegations or IP fragments can poison cached delegations in Recursor...

6.5CVSS0.00122EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/02/09 3:16 p.m.10 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS5.9AI score0.00303EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/09 3:16 p.m.9 views

UBUNTU-CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/09 3:16 p.m.12 views

UBUNTU-CVE-2025-59023

Crafted delegations or IP fragments can poison cached delegations in Recursor...

8.2CVSS5.8AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/09 2:20 p.m.38 views

CVE-2026-0398

PowerDNS Recursor is affected by CVE-2026-0398. The issue involves crafted DNS zones that can cause increased resource usage and crafted CNAME chains that can lead to cache poisoning in the Recursor. The available documents do not specify affected versions, exact root cause in code paths, or offi...

5.3CVSS5.5AI score0.00303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/09 2:20 p.m.51 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/09 2:20 p.m.6 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS5.5AI score0.00303EPSS
SaveExploits0References1
Rows per page
Query Builder