Lucene search
+L

1121 matches found

NVD
NVD
added yesterday6 views

CVE-2026-12185

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
added yesterday28 views

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS0.00263EPSS
SaveExploits0References2
CVE
CVE
added yesterday21 views

CVE-2026-12185

In Bouncy Castle for Java before 1.85, the BKS/UBER keystore allocates from untrusted lengths before integrity check, and this issue also affects Java LTS builds before 2.73.12. Affected products: Bouncy Castle Java libraries for keystores; root cause is allocation using untrusted lengths prior t...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-12185

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added yesterday6 views

EUVD-2026-52021

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added yesterday5 views

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
OSV
OSV
added yesterday4 views

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score
SaveExploits0References9
OSV
OSV
added 2026/07/28 10:0 a.m.3 views

UBUNTU-CVE-2026-58224

The CTDB protocol has bounds checking issues. CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets...

5.9AI score
SaveExploits0References3
NVD
NVD
added 2026/07/27 7:16 a.m.14 views

CVE-2026-13390

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

5.3CVSS0.00182EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/27 6:0 a.m.10 views

EUVD-2026-49071

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

5.3CVSS5.9AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/27 6:0 a.m.35 views

CVE-2026-13390 The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

0.00182EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/07/22 12:1 a.m.9 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due to improper validation of the contenttype field in TLS 1.3 encrypted records. An attacker can cause undetectable data loss or request/response desynchronization by selectively dropping...

8.3CVSS5.9AI score0.00186EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/17 5:17 p.m.11 views

CVE-2026-54496

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2gadgets 0.5.0, orchard 0.14.0, zcashprimitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2gadgets/src/ecc/chip/mul/incomplete.rs used assignadvice for the base point without a copy...

9.3CVSS0.0021EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/17 3:16 p.m.12 views

CVE-2026-12705

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

6.4CVSS0.00098EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/17 2:30 p.m.9 views

EUVD-2026-45179

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

6.4CVSS5.2AI score0.00098EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.14 views

PT-2026-60766

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

6.4CVSS5.2AI score0.00098EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/15 4:2 a.m.9 views

MAL-2026-10638 Malicious code in monogrok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369fb16804682addfec56904223d0255c2a0ca6d35481e744221e8252f2000d Package publishes as a generic 'M!T' library with an unrelated Apache-license README, but the tarball contains an offensive spam / phishing /...

6.2AI score
SaveExploits0References3
NVD
NVD
added 2026/07/15 2:18 a.m.15 views

CVE-2026-13385

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middleMITM user to make the router download and execute arbitrary command via a spoofed server. Refer to the ' Security Update for ASUS Router Firmware '...

9.5CVSS0.00142EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/15 2:1 a.m.7 views

CVE-2026-13385

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middleMITM user to make the router download and execute arbitrary command via a spoofed server. Refer to the ' Security Update for ASUS Router Firmware '...

9.5CVSS6.3AI score0.00142EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/15 2:1 a.m.28 views

CVE-2026-13385

The CVE-2026-13385 entry affects certain ASUS router models. It covers an vulnerability path where an attacker can perform a remote MITM to cause the device to download and execute arbitrary commands via a spoofed server, due to improper validation of the integrity check value and improper certif...

9.5CVSS6.3AI score0.00142EPSS
SaveExploits0References1
Rows per page
Query Builder