Lucene search
+L

28687 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-88032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted...

8.2CVSS6.1AI score0.00257EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/10 7:17 p.m.•13 views

DEBIAN-CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

7.5CVSS6.2AI score0.00257EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/10 7:17 p.m.•15 views

CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS0.00257EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/10 7:17 p.m.•14 views

CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS6.1AI score0.00257EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/10 7:17 p.m.•13 views

UBUNTU-CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS6.2AI score0.00257EPSS
SaveExploits0References3
MongoDB
MongoDB
•added 2026/09/10 6:02 p.m.•18 views

Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS6.2AI score0.00257EPSS
SaveExploits0References1Affected Software3
EUVD
EUVD
•added 2026/09/10 6:02 p.m.•15 views

EUVD-2026-75668

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS6.2AI score0.00257EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/10 6:02 p.m.•56 views

CVE-2026-88032

A use-after-free vulnerability in the reactive client-side encryption component of the MongoDB Java Driver allows an attacker who can cause an affected encrypted operation to be cancelled to free native resources while they are still in use, leading to hosting application process termination (den...

8.2CVSS6.2AI score0.00257EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/10 6:02 p.m.•47 views

CVE-2026-88032 Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS0.00257EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/10 6:02 p.m.•16 views

CVE-2026-88032 Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS6.2AI score0.00257EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/10 6:02 p.m.•23 views

CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS6.2AI score0.00257EPSS
SaveExploits0
NVD
NVD
•added 2026/09/10 1:20 p.m.•19 views

CVE-2026-85544

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards...

6.1CVSS0.00411EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/10 12:26 p.m.•62 views

CVE-2026-85544

CVE-2026-85544 is an Improper Encryption Configuration vulnerability affecting some Hikvision Intercom Products . The flaw allows an attacker with physical access to forge M1 cards , leading to high confidentiality impact and low integrity impact (CVSS 3.1: 5.2 MEDIUM ). No specific product model...

6.1CVSS5.8AI score0.00411EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/10 12:26 p.m.•49 views

CVE-2026-85544

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards...

6.1CVSS0.00411EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/10 12:26 p.m.•16 views

EUVD-2026-75400

There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards...

5.2CVSS5.8AI score0.00411EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/10 12:26 p.m.•35 views

CVE-2026-85544

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards...

6.1CVSS5.8AI score0.00411EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/09/10 7:18 a.m.•31 views

Exploit for Unsafe Reflection in Progress Telerik_Ui_For_Asp.Net_Ajax

Telerik RadAsyncUpload RCE Exploit CVE-2026-13181 through 1...

8.1CVSS6.3AI score0.00742EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/09/10 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-53939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using ...

9.1CVSS5.8AI score0.00245EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•5 views

CVE-2026-88032: Use After Free

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

8.2CVSS6.1AI score0.00257EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•20 views

PT-2026-89364

Name of the Vulnerable Software and Affected Versions Hikvision intercom products affected versions not specified Description Certain intercom products use an immutable factory value for main card authentication. This value, which is intended to be retrieved via physical interaction or a local...

6.1CVSS5.7AI score0.00411EPSS
SaveExploits0References4
Rows per page
Query Builder