Lucene search
+L

5709 matches found

EUVD
EUVD
•added 2026/09/10 9:14 p.m.•10 views

EUVD-2026-75757

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traffic may cause Suricata to crash,...

9.1CVSS5.7AI score0.00633EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/10 9:14 p.m.•8 views

CVE-2026-45764 Suricata http2: protocol-change type confusion can lead to denial of service

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traffic may cause Suricata to crash,...

9.1CVSS5.7AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/10 9:14 p.m.•13 views

CVE-2026-45764 Suricata http2: protocol-change type confusion can lead to denial of service

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traffic may cause Suricata to crash,...

9.1CVSS5.7AI score0.00633EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/10 9:14 p.m.•37 views

CVE-2026-45764 Suricata http2: protocol-change type confusion can lead to denial of service

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traffic may cause Suricata to crash,...

9.1CVSS0.00633EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/10 9:14 p.m.•17 views

CVE-2026-45764

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traffic may cause Suricata to crash,...

9.1CVSS5.7AI score0.00633EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2026/09/10 7:36 p.m.•14 views

USN-8571-2: Apache HTTP Server regression

USN-8571-1 fixed vulnerabilities in Apache HTTP Server. That fix was incomplete due to a missing library symbol, resulting in a regression that could cause Apache HTTP Server to fail to start when HTTP/2 proxying was enabled. This update fixes the problem. We apologize for the inconvenience...

7AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/10 4:34 p.m.•13 views

io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing t...

7.5CVSS7AI score0.00665EPSS
SaveExploits1References9
NVD
NVD
•added 2026/09/10 3:17 p.m.•13 views

CVE-2026-88008

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header requesting Upgrade, the Upgrade: h2c token, and HTTP2-Settings to a shared backend. If the backend accepts h2c and returns 101 Switching...

9.1CVSS0.00487EPSS
SaveExploits1References5
OSV
OSV
•added 2026/09/10 3:17 p.m.•9 views

DEBIAN-CVE-2026-46387

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/10 3:17 p.m.•13 views

CVE-2026-46387

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

7.5CVSS0.00736EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/10 2:57 p.m.•17 views

EUVD-2026-75545

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header requesting Upgrade, the Upgrade: h2c token, and HTTP2-Settings to a shared backend. If the backend accepts h2c and returns 101 Switching...

7CVSS5.8AI score0.00487EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/09/10 2:10 p.m.•16 views

CVE-2026-46387 Suricata http2: decompression bomb can cause denial of service in Suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/10 2:10 p.m.•13 views

CVE-2026-46387

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/10 2:10 p.m.•12 views

EUVD-2026-75508

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/10 2:10 p.m.•8 views

CVE-2026-46387 Suricata http2: decompression bomb can cause denial of service in Suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

7.5CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/10 2:10 p.m.•49 views

CVE-2026-46387 Suricata http2: decompression bomb can cause denial of service in Suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

7.5CVSS0.00736EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/10 2:10 p.m.•34 views

CVE-2026-46387

Suricata , a network IDS/IPS/NSM engine, is affected by a decompression bomb vulnerability in its HTTP/2 decompression path . Prior to versions 7.0.16 and 8.0.5 , a crafted HTTP/2 DATA payload using a high compression ratio (gzip, deflate, or brotli) could cause Suricata to allocate excessive mem...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits0References3Affected Software1
SUSE Linux
SUSE Linux
•added 2026/09/10 8:16 a.m.•9 views

Security update for tomcat10

This update for tomcat10 fixes the following issues: CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority...

8.7CVSS7.1AI score0.00864EPSS
SaveExploits0References44
OSV
OSV
•added 2026/09/10 8:16 a.m.•5 views

SUSE-SU-2026:4119-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: Apache Tomcat: HTTP/2...

9.8CVSS7.1AI score0.00864EPSS
SaveExploits0References23
RedHat Linux
RedHat Linux
•added 2026/09/10 7:07 a.m.•16 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.70 security and extras update

Red Hat OpenShift Container Platform release 4.16.70 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...

7.5CVSS5.8AI score0.00781EPSS
SaveExploits0References2
Rows per page
Query Builder