18 matches found
Oracle Linux 9 : openssl (ELSA-2026-50379)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50379 advisory. 3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: ad...
Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities
Summary Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445,...
Oracle Linux 9 : openssl (ELSA-2026-22312)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22312 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...
CVE-2026-34183 affecting package openssl for versions less than 3.3.7-3
CVE-2026-34183 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...
SUSE-SU-2026:22251-1 Security update for openssl-3
This update for openssl-3 fixes the following issues - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion bsc1266340. - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based...
CVE-2026-34183 vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2026-34183 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
CVE-2026-34183
creationtimestamp| type| source ---|---|--- 2026-06-10 00:01:48+00:00| seen| https://bsky.app/profile/slackers.it/post/3mnvftkqgtb2f 2026-06-10 00:01:53+00:00| seen| https://bsky.app/profile/slackers.it/post/3mnvftlx3qx2t 2026-06-10 20:00:00+00:00| seen|...
UBUNTU-CVE-2026-34183
Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATHCHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnormal termination of the application acting as a QU...
CVE-2025-34183
creationtimestamp| type| source ---|---|--- 2025-09-16 23:12:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyyh2lb7ii2j 2025-09-17 04:32:12+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyyyw7ljza2m 2025-09-17 21:02:28+00:00| seen|...
CVE-2023-34183
CVE-2023-34183 affects Unite Gallery Lite (WordPress plugin) versions 1.7.61 (i.e., 1.7.62 or later) or apply vendor-provided patch when available. Technical details in connected records corroborate the vulnerability type, affected version range, and remediation path.
WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)
Software Unite Gallery Lite Type Plugin Vulnerable versions = 1.7.61 Fixed in 1.7.62 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34183 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a4816cf27480 Credits yuyudhn Required...
CVE-2022-34183
Jenkins Agent Server Parameter Plugin 1.1 and earlier does not escape the name and description of Agent Server parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-34183
CVE-2022-34183 : Jenkins Agent Server Parameter Plugin (versions ≤1.1) is vulnerable to a stored cross-site scripting (XSS) flaw. The name and description of Agent Server parameters are not escaped on parameter-display views, allowing attackers with Item/Configure permission to inject script via ...
CVE-2021-34183
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2021-34183
CVE-2021-34183 has been withdrawn by its CNA; multiple sources (Red Hat, SUSE, Ubuntu, Alpine, NVD) state “DO NOT USE THIS CANDIDATE NUMBER” and that it was not a security issue. A CNVD entry discusses a memory-leak vulnerability in ImageMagick 7.0.11-14 (AcquireSemaphoreMemory, AcquireMagickMemo...