Lucene search
+L

2668 matches found

ATTACKERKB
ATTACKERKB
added 2025/04/14 3:15 p.m.3 views

CVE-2025-32910

A flaw was found in libsoup, where soupauthdigestauthenticate is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash...

6.5CVSS6.7AI score0.00428EPSS
SaveExploits0References5
OSV
OSV
added 2025/04/14 3:15 p.m.2 views

DEBIAN-CVE-2025-32910

A flaw was found in libsoup, where soupauthdigestauthenticate is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash...

6.5CVSS6.7AI score0.00428EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/14 3:15 p.m.6 views

AZL-60424 CVE-2025-32910 affecting package libsoup for versions less than 3.4.4-4

A flaw was found in libsoup, where soupauthdigestauthenticate is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash...

6.5CVSS7.3AI score0.00428EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/14 3:15 p.m.14 views

UBUNTU-CVE-2025-32912

A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2025/04/14 2:44 p.m.8 views

CVE-2025-32912 Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash...

6.5CVSS6.7AI score0.00424EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/04/14 2:44 p.m.34 views

CVE-2025-32912 Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash...

6.5CVSS0.00424EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/04/14 2:43 p.m.20 views

CVE-2025-32910 Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication

A flaw was found in libsoup, where soupauthdigestauthenticate is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash...

6.5CVSS6.8AI score0.00428EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/04/14 2:43 p.m.45 views

CVE-2025-32910 Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication

A flaw was found in libsoup, where soupauthdigestauthenticate is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash...

6.5CVSS0.00428EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/14 12:0 a.m.5 views

libsoup 代码问题漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A code issue vulnerability exists in libsoup, which stems from the presence of a null pointer dereference in SoupAuthDigest, which could lead to a client-side crash...

6.5CVSS6.5AI score0.00424EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/14 12:0 a.m.3 views

libsoup 代码问题漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A code issue vulnerability exists in libsoup, which stems from the presence of a null pointer dereference in the function soupauthdigestauthenticate, which could lead to a client-side crash...

6.5CVSS6.8AI score0.00428EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/01 4:15 p.m.7 views

AZL-59952 CVE-2025-21927 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvmetcprecvpdu nvmetcprecvpdu doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length e.g. 255,...

7.8CVSS6.4AI score0.00462EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/01 4:15 p.m.14 views

UBUNTU-CVE-2025-21927

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvmetcprecvpdu nvmetcprecvpdu doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length e.g. 255,...

9.8CVSS6.2AI score0.00462EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
added 2025/03/28 12:0 a.m.9 views

Azure Linux 3.0 Security Update: libssh (CVE-2023-6918)

The version of libssh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6918 advisory. - A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by...

5.3CVSS6.3AI score0.01409EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/28 12:0 a.m.7 views

CBL Mariner 2.0 Security Update: libssh (CVE-2023-6918)

The version of libssh installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6918 advisory. - A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by...

5.3CVSS6.2AI score0.01409EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/27 12:0 a.m.7 views

PT-2025-16687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically related to the x86/microcode/AMD component. The issue concerned the apply microcode amd function, which incorrectly...

5.5CVSS7.3AI score0.002EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/03/27 12:0 a.m.9 views

PT-2026-28482

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.42 Traefik versions prior to 3.6.12 Traefik versions prior to 3.7.0-ea.3 Description Traefik, an HTTP reverse proxy and load balancer, is susceptible to an identity impersonation issue. When the headerField...

9CVSS5.9AI score0.00469EPSS
SaveExploits1
OSV
OSV
added 2025/03/26 11:15 a.m.4 views

DEBIAN-CVE-2025-27551

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

4CVSS4.9AI score0.00111EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/26 11:15 a.m.3 views

UBUNTU-CVE-2025-27551

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

4CVSS5.8AI score0.00111EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/25 10:15 a.m.10 views

PYSEC-2025-168

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AIMD5PARSESTRINGINQUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based...

8.8CVSS6AI score0.00482EPSS
SaveExploits1References5
OSV
OSV
added 2025/03/24 7:15 p.m.7 views

CVE-2025-2746

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

9.8CVSS5.8AI score0.58431EPSS
SaveExploits1References5
Rows per page
Query Builder