Lucene search
K

148 matches found

OpenVAS
OpenVAS
added 2026/03/16 12:0 a.m.2 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2026-1386)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS5.8AI score0.00064EPSS
Exploits3References2
Circl
Circl
added 2026/01/23 9:14 p.m.3 views

CVE-2026-1386

creationtimestamp| type| source ---|---|--- 2026-01-23 21:14:50+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3md4mmlbdl7y2 2026-01-23 23:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4uatnwsf2m 2026-01-24 10:05:35+00:0...

6CVSS5.1AI score0.00011EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:18 a.m.20 views

CVE-2025-1386

When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream...

5.9CVSS6.8AI score0.00048EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-53369

Malicious code in bioql PyPI...

7.1CVSS7.3AI score0.0001EPSS
Exploits0References3
Rockylinux
Rockylinux
added 2025/10/03 7:56 p.m.2 views

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

7.8CVSS6.8AI score0.00092EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/05/02 2:3 a.m.1 views

SUSE CVE-2025-37751

In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL array terminator at the end of erratum1386microcode was removed during the switch from x86cpudesc to x86cpuid. This causes readers to run off the end of the arra...

5.5CVSS6.5AI score0.00074EPSS
Exploits0References10
Wolfi
Wolfi
added 2025/04/14 7:44 p.m.24 views

CVE-2025-1386 vulnerabilities

Vulnerabilities for packages: telegraf...

5.9CVSS7.2AI score0.00048EPSS
Exploits0
Chainguard
Chainguard
added 2025/04/14 7:23 p.m.21 views

CVE-2025-1386 vulnerabilities

Vulnerabilities for packages: telegraf...

5.9CVSS7.2AI score0.00048EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2025/04/12 3:41 a.m.166 views

CVE-2025-1386- Query smuggling in ch-go library

Impact When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream. Patches If you are using ch-go library, we...

5.9CVSS6.9AI score0.00048EPSS
Exploits0References5Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2025/04/12 12:0 a.m.143 views

CVE-2025-1386- Query smuggling in ch-go library

When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream...

5.9CVSS6.8AI score0.00048EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2025/04/11 5:15 a.m.12 views

CVE-2025-1386

When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream...

5.9CVSS0.00048EPSS
Exploits0References1
Circl
Circl
added 2025/04/11 4:49 a.m.5 views

CVE-2025-1386

creationtimestamp| type| source ---|---|--- 2025-04-11 04:49:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11384 2025-04-11 05:43:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmjcrdawyz2i 2025-04-11 09:45:34+00:00| seen|...

5.9CVSS3.8AI score0.00048EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/04/11 4:27 a.m.6 views

CVE-2025-1386 Query smuggling in ch-go library

When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream...

5.9CVSS6.5AI score0.00048EPSS
Exploits0References1
CVE
CVE
added 2025/04/11 4:27 a.m.1885 views

CVE-2025-1386

CVE-2025-1386 concerns the ch-go library from github.com/ClickHouse/ch-go. The issue is a vulnerability in which, under a specific condition where a query includes large, uncompressed external data, an attacker who controls that data can smuggle another query packet into the same connection strea...

5.9CVSS6.6AI score0.00048EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2014-1386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory...

6.8CVSS7.8AI score0.01202EPSS
Exploits0References3
NVD
NVD
added 2024/12/29 12:15 p.m.8 views

CVE-2024-56721

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...

7.1CVSS0.0001EPSS
Exploits0References3
OSV
OSV
added 2024/12/29 12:15 p.m.1 views

DEBIAN-CVE-2024-56721

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...

7.1CVSS5.6AI score0.0001EPSS
Exploits0References1
OSV
OSV
added 2024/12/29 12:15 p.m.1 views

UBUNTU-CVE-2024-56721

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...

7.1CVSS6.2AI score0.0001EPSS
Exploits0References32
Vulnrichment
Vulnrichment
added 2024/12/29 11:29 a.m.1 views

CVE-2024-56721 x86/CPU/AMD: Terminate the erratum_1386_microcode array

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...

7.5AI score0.0001EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/12/29 11:29 a.m.9 views

CVE-2024-56721

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...

7.1CVSS5.6AI score0.0001EPSS
Exploits0
Rows per page
Query Builder