ROOT-OS-DEBIAN-13-CVE-2023-6238 CVE-2023-6238 in rootio-linux - Patched by Root

Root has patched CVE-2023-6238 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-55370 Logto: TOTP code can be replayed within the RFC 6238 validity window (one-time use violation)

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's existing TOTP verification accepted a successfully used TOTP code again while the code remained inside the RFC 6238 acceptance window because the verifier used otplib's stateless check with window ...

ROOT-OS-UBUNTU-2404-CVE-2026-6238 CVE-2026-6238 in rootio-glibc - Patched by Root

Root has patched CVE-2026-6238 in the rootio-glibc package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-6238 CVE-2026-6238 in rootio-glibc - Patched by Root

Root has patched CVE-2026-6238 in the rootio-glibc package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-6238 CVE-2026-6238 in rootio-glibc - Patched by Root

Root has patched CVE-2026-6238 in the rootio-glibc package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-6238 CVE-2026-6238 in rootio-glibc - Patched by Root

Root has patched CVE-2026-6238 in the rootio-glibc package for Root:Debian:13. Multiple fixed versions available...

MINI-PJ79-6238-287H

Bulletin has no description...

BELL-CVE-2026-6238

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-6238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the...

CVE-2026-6238

creationtimestamp| type| source ---|---|--- 2026-04-28 20:22:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklfyc2yf52v 2026-07-11 17:20:42+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqf6dud3zz25...

UBUNTU-CVE-2026-6238

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

CVE-2026-6238

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

MiracleLinux 8 : thunderbird-102.13.0-2.el8.ML.1 (AXSA:2023-6238:20)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6238:20 advisory. Mozilla: Use-after-free in WebRTC certificate generation CVE-2023-37201 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey...

CVE-2023-6238 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...

WordPress AI Engine plugin <= 2.8.4 - Insecure OAuth Implementation vulnerability

Insecure OAuth Implementation vulnerability discovered by István Márton - Wordfence in WordPress Plugin AI Engine versions = 2.8.4...

pgadmin4-9.2-1.1 on GA media (moderate)

pgadmin4-9.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14983-1 Rating: moderate Cross-References: CVE-2024-6238 CVE-2024-9014 CVE-2025-2945 CVE-2025-2946 CVSS scores: CVE-2024-6238 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-9014 SUSE : 8...

Linux Distros Unpatched Vulnerability : CVE-2023-6238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability was found in the NVM Express NVMe driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the...

GHSA-WMX7-PW49-88JX Craft CMS Allows TOTP Token To Stay Valid After Use

Craft CMS 5 allows reuse of TOTP tokens multiple times within the validity period. Impact An attacker is able to re-submit a valid TOTP token to establish an authenticated session. This requires that the attacker has knowledge of the victim's credentials. A TOTP token can be used multiple times t...

Craft CMS Allows TOTP Token To Stay Valid After Use

Craft CMS 5 allows reuse of TOTP tokens multiple times within the validity period. Impact An attacker is able to re-submit a valid TOTP token to establish an authenticated session. This requires that the attacker has knowledge of the victim's credentials. A TOTP token can be used multiple times t...

CVE-2024-6238

pgAdmin = 8.8 has an installation Directory permission issue. Because of this issue, attackers can gain unauthorised access to the installation directory on the Debian or RHEL 8 platforms...