Lucene search
+L

6471 matches found

Positive Technologies
Positive Technologies
added 2026/05/01 12:00 a.m.44 views

PT-2026-36543

Name of the Vulnerable Software and Affected Versions bandit versions 0.5.0 through 1.10.x Description An allocation of resources without limits or throttling allows unauthenticated remote denial of service via memory exhaustion. The fragment reassembly path in the handle frame/3 function within...

8.7CVSS5.8AI score0.00549EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.18 views

Bandit 安全漏洞

Bandit is a high-performance HTTP and WebSocket server from the individual developer Mat Trudel. A security vulnerability exists in Bandit version 0.3.6 through versions prior to 1.11.0, which stems from HTTP/2 frame deserialization that buffers the entire body of a frame before checking the size...

6.9CVSS5.8AI score0.0051EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.15 views

Bandit 安全漏洞

Bandit is a high-performance HTTP and WebSocket server from the individual developer Mat Trudel. A security vulnerability exists in Bandit versions 0.5.9 through 1.11.0 and earlier, which stems from an unrestricted resource allocation when WebSocket permessage-deflate compression is enabled, whic...

8.2CVSS5.8AI score0.00625EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/30 5:16 p.m.18 views

CVE-2025-51846

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2...

8.7CVSS0.00578EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/04/30 4:35 p.m.8 views

CVE-2025-51846

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2...

8.7CVSS5.2AI score0.00578EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/04/30 4:35 p.m.47 views

CVE-2025-51846 CryptPad unbounded WebSocket frame flood

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2...

8.7CVSS0.00578EPSS
SaveExploits1References4
OSV
OSV
added 2026/04/30 4:35 p.m.8 views

CVE-2025-51846 CryptPad unbounded WebSocket frame flood

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2...

8.7CVSS5.9AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/04/30 4:35 p.m.7 views

CVE-2025-51846 CryptPad unbounded WebSocket frame flood

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2...

8.7CVSS5.2AI score0.00578EPSS
SaveExploits1References4
CVE
CVE
added 2026/04/30 4:35 p.m.26 views

CVE-2025-51846

CVE-2025-51846 affects CryptPad 2025.3.1, where an unbounded WebSocket frame flood allows a remote, unauthenticated attacker to significantly degrade or deny service for all users of a CryptPad instance. The advisory states the issue is fixed in 2026.2.2. CVSS metrics from the connected CVE recor...

8.7CVSS5.2AI score0.00578EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2026/04/30 7:16 a.m.12 views

CVE-2026-6869

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS0.00125EPSS
SaveExploits1References2
OSV
OSV
added 2026/04/30 7:16 a.m.9 views

UBUNTU-CVE-2026-6869

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/04/30 5:33 a.m.7 views

CVE-2026-6869 Improperly Controlled Sequential Memory Allocation in Wireshark

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00125EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/30 5:33 a.m.15 views

EUVD-2026-26347

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00125EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/30 5:33 a.m.10 views

CVE-2026-6869

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00125EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2026/04/30 5:33 a.m.51 views

CVE-2026-6869

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00125EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2026/04/30 5:33 a.m.23 views

CVE-2026-6869

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/30 5:33 a.m.51 views

CVE-2026-6869

The CVE-2026-6869 affects the WebSocket protocol dissector in Wireshark, specifically versions 4.6.0–4.6.4 and 4.4.0–4.4.14, where an improper control of sequential memory allocation leads to a denial-of-service crash. The vulnerability is tied to the WebSocket dissector component and results in ...

5.5CVSS5.2AI score0.00125EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/04/30 5:33 a.m.8 views

CVE-2026-6869 Improperly Controlled Sequential Memory Allocation in Wireshark

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/30 12:00 a.m.18 views

PT-2026-36127

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2...

8.7CVSS5.2AI score0.00578EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2026/04/30 12:00 a.m.11 views

CVE-2026-6869

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits1References3
Rows per page
Query Builder