Lucene search
+L

1247 matches found

attackerkb
attackerkb
•added 2026/08/03 12:49 a.m.•16 views

CVE-2026-59645

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

8.7CVSS5.9AI score0.00493EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist
•added 2026/08/03 12:49 a.m.•68 views

CVE-2026-59645 OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

8.7CVSS0.00493EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/03 12:00 a.m.•1 views

CVE-2026-59645: Uncontrolled Recursion

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

8.7CVSS5.8AI score0.00493EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/07/23 11:16 a.m.•12 views

CVE-2026-64611

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...

7.5CVSS7.1AI score0.0063EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/23 10:46 a.m.•20 views

EUVD-2026-47973

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...

7.5CVSS7.1AI score0.0063EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/23 10:46 a.m.•54 views

CVE-2026-64611 Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...

7.5CVSS0.0063EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/23 10:46 a.m.•14 views

CVE-2026-64611 Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...

7.5CVSS7.1AI score0.0063EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/23 10:46 a.m.•77 views

CVE-2026-64611

CVE-2026-64611 affects libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop while processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. This enables a network-adjacent attacker to broadcast a crafted printe...

7.5CVSS7.1AI score0.0063EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/07/21 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-15166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service CVE-2026-15166 Note that Nessus relies on the...

5.5CVSS6AI score0.00194EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2026/07/19 5:34 p.m.•13 views

SUSE CVE-2026-63831

In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform in-place cryptographic transformations on skb data. They build a scatterli...

8.8CVSS6AI score0.00252EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•23 views

PT-2026-61147

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description In the Linux kernel, the mac802154 module performs in-place cryptographic transformations on socket buffer skb data using the functions llsec do encrypt unauth, llsec do encrypt auth,...

8.8CVSS6.1AI score0.00252EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/07/10 3:19 a.m.•16 views

SUSE CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6AI score0.00194EPSS
SaveExploits1References6
NVD
NVD
•added 2026/07/08 9:16 p.m.•20 views

CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS0.00194EPSS
SaveExploits1References2
OSV
OSV
•added 2026/07/08 9:16 p.m.•13 views

DEBIAN-CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6AI score0.00194EPSS
SaveExploits1References1
OSV
OSV
•added 2026/07/08 9:16 p.m.•13 views

AZL-92138 CVE-2026-15166 affecting package wireshark 4.4.7-2

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6AI score0.00194EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/07/08 8:55 p.m.•21 views

CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6AI score0.00194EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2026/07/08 8:55 p.m.•59 views

CVE-2026-15166 Stack-based Buffer Overflow in Wireshark

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS0.00194EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/07/08 8:55 p.m.•20 views

EUVD-2026-42423

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6AI score0.00194EPSS
SaveExploits1References2
OSV
OSV
•added 2026/07/08 8:55 p.m.•18 views

CVE-2026-15166 Stack-based Buffer Overflow in Wireshark

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6.1AI score
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/07/08 8:55 p.m.•22 views

CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6AI score0.00194EPSS
SaveExploits1References2
Rows per page
Query Builder