Lucene search
K

78 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в redis

Redis is an in-memory database that persists data on disk. Redis improperly handles the resizing of memory buffers, which can lead to integer overflow, resulting in heap overflow and potential remote code execution. This issue has been fixed in versions 7.0.15 and 7.2.4...

8.1CVSS7AI score0.07323EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/04/03 11:25 p.m.1 views

SUSE CVE-2026-31933

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.7AI score0.00018EPSS
Exploits0References3
OSV
OSV
added 2026/04/02 3:16 p.m.0 views

UBUNTU-CVE-2026-31935

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.7AI score0.00056EPSS
Exploits0References2
CVE
CVE
added 2026/04/02 2:38 p.m.10 views

CVE-2026-31937

CVE-2026-31937 affects Suricata (network IDS/IPS/NSM). The issue is an inefficiency in DCERPC buffering that degrades performance, occurring before version 7.0.15. The vulnerability is mitigated by upgrading to Suricata 7.0.15 or later, which patches the DCERPC buffering problem. The CVSS vector ...

7.5CVSS5.7AI score0.00018EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/04/02 2:36 p.m.2 views

CVE-2026-31935

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.2AI score0.00056EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/04/02 2:36 p.m.0 views

CVE-2026-31935

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.8AI score0.00056EPSS
Exploits0References2
OSV
OSV
added 2026/04/02 2:16 p.m.1 views

DEBIAN-CVE-2026-31933

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.2AI score0.00018EPSS
Exploits0References1
NVD
NVD
added 2026/04/02 2:16 p.m.2 views

CVE-2026-31932

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS0.00056EPSS
Exploits0References2
OSV
OSV
added 2026/04/02 2:16 p.m.0 views

UBUNTU-CVE-2026-31933

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.7AI score0.00018EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/02 2:3 p.m.3 views

CVE-2026-31933

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.8AI score0.00018EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/04/02 2:3 p.m.1 views

CVE-2026-31933

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.2AI score0.00018EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/04/02 2:3 p.m.1 views

CVE-2026-31933

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.8AI score0.00018EPSS
Exploits0References2
CVE
CVE
added 2026/04/02 2:3 p.m.5 views

CVE-2026-31933

Suricata (network IDS/IPS/NSM) is affected by CVE-2026-31933 due to a quadratic/slowdown condition triggered by specially crafted traffic in IDS mode. The issue impacts versions prior to 7.0.15 and 8.0.4, and has been patched in 7.0.15 and 8.0.4. The vulnerability stems from the stream inspection...

7.5CVSS5.7AI score0.00018EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/02 2:3 p.m.2 views

CVE-2026-31933 Suricata stream: quadratic complexity in stream inspection

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.8AI score0.00018EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/02 2:2 p.m.0 views

EUVD-2026-18239

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4...

7.5CVSS5.8AI score0.00056EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.3 views

Suricata 安全漏洞

Suricata is a network IDS, IPS, and NSM engine developed by the Open Information Security Foundation. Vulnerabilities exist in versions of Suricata prior to 7.0.15 and 8.0.4. These vulnerabilities stem from inefficient KRB5 caching, which can lead to performance degradation...

7.5CVSS5.8AI score0.00056EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/12 12:30 a.m.2 views

EUVD-2025-202935

AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious executables that will be run with high-lev...

6.9CVSS6.5AI score0.00092EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.1 views

PT-2025-50765

Name of the Vulnerable Software and Affected Versions AnyDesk versions 7.0.15 and 9.0.1 Description AnyDesk versions 7.0.15 and 9.0.1 have an unquoted service path configuration. This allows local, non-privileged users to potentially run code with SYSTEM-level privileges. An attacker can exploit...

6.9CVSS6.8AI score0.00092EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-12598

Malware in sbrugna...

7.5CVSS4.8AI score0.00449EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-54790

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00118EPSS
Exploits0References4
Rows per page
Query Builder