Lucene search
+L

6 matches found

Cvelist
Cvelist
added 2026/07/16 11:44 p.m.46 views

CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...

7.5CVSS0.00255EPSS
SaveExploits1References1
OSV
OSV
added 2026/07/16 11:44 p.m.7 views

CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analysis engine, causing complete loss of SI...

7.5CVSS5.9AI score0.00255EPSS
SaveExploits1References3
Redos
Redos
added 2024/08/28 12:0 a.m.17 views

ROS-20240827-17

Vulnerability in the /api/v1/alerts file of the Prometheus monitoring system component for processing alerts Alertmanager is related to incorrect neutralization of input data during web page generation. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

7.5CVSS7.7AI score0.00568EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/01/30 12:0 a.m.7 views

PT-2020-20144 · Trend Micro · Ossec-Hids

Name of the Vulnerable Software and Affected Versions: OSSEC-HIDS versions 2.7 through 3.5.0 Description: The server component responsible for log analysis, ossec-analysisd, is vulnerable to a use-after-free during processing of ossec-alert formatted messages received from authenticated remote...

9.8CVSS9.3AI score0.02489EPSS
SaveExploits2References7
OSV
OSV
added 2017/11/13 10:29 p.m.4 views

DEBIAN-CVE-2016-8610

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail...

7.5CVSS9.2AI score0.39657EPSS
SaveExploits1References1
OSV
OSV
added 2016/10/24 12:0 a.m.5 views

UBUNTU-CVE-2016-8610

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail...

7.5CVSS6.7AI score0.39657EPSS
SaveExploits1References7
Rows per page
Query Builder