Lucene search
K

31 matches found

Github Security Blog
Github Security Blog
added 2026/05/04 9:31 a.m.7 views

GoBGP has an Integer Underflow Issue

A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation can lead to integer underflow. It is possible to launch the attack remotely. Upgrading to version 4.4.0 addresses this...

7.5CVSS6.8AI score0.00023EPSS
Exploits0References8Affected Software1
Github Security Blog
Github Security Blog
added 2026/05/04 6:32 a.m.7 views

GoBGP has an Improper Resource Shutdown or Release

A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefixsid.go of the component SRv6 L3 Service. Such manipulation of the argument data leads to denial of service. The attack may be performed from...

7.5CVSS5.5AI score0.00124EPSS
Exploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-7735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the compone...

7.5CVSS7.1AI score0.0007EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/05/01 2:11 a.m.2 views

SUSE CVE-2026-6535

Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.0001EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2026/05/01 2:10 a.m.1 views

SUSE CVE-2026-7375

UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00022EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2026/05/01 2:10 a.m.1 views

SUSE CVE-2026-7378

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00022EPSS
Exploits1References3
OSV
OSV
added 2026/05/01 12:16 a.m.0 views

UBUNTU-CVE-2026-5656

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution...

7.8CVSS6.4AI score0.00017EPSS
Exploits1References4
NVD
NVD
added 2026/04/30 6:16 a.m.1 views

CVE-2026-7375

UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

7.5CVSS0.00022EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/04/30 5:38 a.m.2 views

CVE-2026-5657

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

7.5CVSS5.3AI score0.00022EPSS
Exploits1
CVE
CVE
added 2026/04/30 5:37 a.m.5 views

CVE-2026-6537

Wireshark CVE-2026-6537 affects the ZigBee protocol dissector in Wireshark 4.6.0–4.6.4 and 4.4.0–4.4.14. The vulnerability is a stack-based buffer overflow in the ZigBee dissector, causing denial of service. Exploitation status and concrete fix/version are not provided in the documents; a remedia...

5.5CVSS5.2AI score0.00006EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2026/04/30 5:37 a.m.4 views

CVE-2026-6537

ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00006EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2026/04/30 5:34 a.m.2 views

CVE-2026-6521

OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00016EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2026/04/30 5:33 a.m.5 views

CVE-2026-6519

CVE-2026-6519 affects Wireshark’s MBIM protocol dissector, with an infinite loop causing denial of service. Public details across SUSE, Debian, Debian OSV, EUVD, Alpine, and CVE listings confirm the issue impacts Wireshark versions 4.6.0–4.6.4 and 4.4.0–4.4.14. The root cause is described as a lo...

7.5CVSS5.2AI score0.00023EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/30 5:4 a.m.1 views

CVE-2026-7375

UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00022EPSS
Exploits1References3Affected Software1
AlpineLinux
AlpineLinux
added 2026/04/30 5:4 a.m.2 views

CVE-2026-7376

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

7.5CVSS5.8AI score0.00022EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2026/04/30 12:0 a.m.1 views

CVE-2026-5657

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

7.5CVSS5.8AI score0.00022EPSS
Exploits1References1
OSV
OSV
added 2026/04/01 9:46 a.m.7 views

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS7AI score0.00045EPSS
Exploits2References27
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.3 views

PT-2026-7272

Name of the Vulnerable Software and Affected Versions Fortinet FortiSandbox versions 5.0.0 through 5.0.1 Fortinet FortiSandbox versions 4.4.0 through 4.4.7 Fortinet FortiSandbox version 4.2 Fortinet FortiSandbox version 4.0 Description An Improper Neutralization of Input During Web Page Generatio...

8.8CVSS5.8AI score0.00309EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.2 views

PT-2026-3073

Name of the Vulnerable Software and Affected Versions LaSuite Doc versions 3.8.0 through 4.3.0 Description LaSuite Doc is a collaborative note taking, wiki and documentation platform. A Stored Cross-Site Scripting XSS issue exists in the Interlinking feature. When a user creates a link to another...

8.7CVSS6AI score0.00058EPSS
Exploits0References11
OSV
OSV
added 2026/01/14 9:15 p.m.1 views

AZL-74543 CVE-2026-0962 affecting package wireshark 4.4.7-1

SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

6.5CVSS5.7AI score0.00059EPSS
Exploits1References1
Rows per page
Query Builder