218 matches found
GO-RPCBOMB
Description: CVE-2017-8779 rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with ...
Astra Linux – vulnerability in Firefox
Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 111...
Astra Linux – Vulnerability in Chromium
Memory access out of bounds in WebHID in Google Chrome prior to version 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption through a malicious HID device. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after-free in WebRTC in Google Chrome before version 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox
When following a redirect to a publicly accessible web extension file, the URL may have been translated into the actual local path, potentially exposing sensitive information. This vulnerability affects Firefox versions earlier than 111...
Astra Linux – Vulnerability in Firefox
Under certain circumstances, the offline cache of a ServiceWorker may have been leaked to the file system when using private browsing mode. This vulnerability affects Firefox versions earlier than 111...
D-Link Routers - Remote Command Injection Detection
D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 device may allow an authenticated attacker to execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for...
VxWorks RPC integer overflow DoS
Exploits CVE-2015-7599, an integer overflow in VxWorks RPC authentication svcauth.c, to crash or disrupt VxWorks 5.5 through 6.9.4.1 systems with RPC enabled on TCP/111. !/usr/bin/env python3 -- coding: utf-8 -- """ VxWorks RPC integer overflow denial of service CVE-2015-7599. Triggers an integer...
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 22, 2026 to June 28, 2026)
Last week, there were 243 vulnerabilities disclosed in 195 WordPress Plugins and 9 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 131 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...
CVE-2026-12246
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes...
Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2026-111 (ALASNITRO-ENCLAVES-2026-111)
The version of containerd installed on the remote host is prior to 2.1.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-111 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-256...
Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2026-111-03)
The version of mozilla-thunderbird installed on the remote host is prior to 140.10.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-111-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...
Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-111-02)
The version of mozilla-firefox installed on the remote host is prior to 140.10.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-111-02 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...
CVE-2026-1354
creationtimestamp| type| source ---|---|--- 2026-04-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-06 2026-04-21 23:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk23qvraqb2r...
CVE-2026-2635
creationtimestamp| type| source ---|---|--- 2026-02-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-111/ 2026-02-21 00:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdcx3zcw32k 2026-03-01 00:01:22+00:00| seen|...
MiracleLinux 7 : rpcbind-0.2.0-38.0.1.el7.AXS7 (AXSA:2017-1656:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-1656:01 advisory. The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a...
MiracleLinux 7 : libtirpc-0.2.4-0.8.0.1.el7.AXS7 (AXSA:2017-1681:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-1681:01 advisory. This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network...
EUVD-1999-0189
Malware in sbrugna...