Lucene search
+L

24925 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in nss

NSS has demonstrated timing differences during the execution of DSA signatures, which can be exploited and may eventually lead to the leakage of private keys. This vulnerability affects Thunderbird versions 68.9.0, Firefox versions 77, and Firefox ESR versions 68.9...

4.4CVSS6.7AI score0.00651EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability in Redis

Redis is an in-memory database that persists data on disk. Redis does not correctly identify keys accessed using SORTRO. As a result, it may grant users who execute this command access to keys that are not explicitly authorized by the ACL configuration. This issue exists in Redis 7.0 or later...

3.3CVSS6.3AI score0.0029EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux - Vulnerability in Golang-1.19

Extremely large RSA keys in certificate chains can cause clients and servers to spend significant CPU time verifying signatures. With this fix, the size of RSA keys transmitted during handshake operations is limited to 8192 bits or less. Based on a survey of publicly trusted RSA keys, there are...

5.3CVSS6.7AI score0.01601EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux – Vulnerability in Ceph

An authentication flaw was discovered in Ceph versions prior to 14.2.20. When the monitor processes CEPHXGETAUTHSESSIONKEY requests, it does not sanitize otherkeys, allowing for key reuse. An attacker who can request a globalid can exploit the ability of any user to request a globalid that has...

7.2CVSS6.5AI score0.02128EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys – prevented overflow in asymmetrickeygenerateid. Use checkaddoverflow to prevent potential integer overflows when adding the lengths of binary blobs and the size of an asymmetrickeyid structure. Return...

7.8CVSS6.2AI score0.00138EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-6.1, Linux-5.10

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections support pairing in Bluetooth Core Specification 4.2 through 5.4. However, these devices are vulnerable to certain man-in-the-middle attacks, which force the use of a short key length. This vulnerability may lead to the...

6.8CVSS6.7AI score0.01297EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•7 views

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTRTOFLOWKEYS For PTRTOFLOWKEYS, the checkflowkeysaccess function only uses a fixed offset for validation. However, the variable offset ptr isn’t prohibited for this type of pointer. Therefore,...

7.8CVSS6AI score0.00239EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•15 views

Astra Linux – Vulnerability in python-pymysql

PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input, because keys are not escaped by escapedict...

6.3CVSS6.6AI score0.00691EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•12 views

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to the leakage of sensitive information from process memory...

7.5CVSS7.6AI score0.02764EPSS
SaveExploits1References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in Firefox and Thunderbird

Keyboard events reference strings like “KeyA” that are located at fixed, known, and widely-distributed addresses. Cache-based timing attacks, such as Prime+Probe, could potentially determine which keys were pressed. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...

6.5CVSS6.9AI score0.00672EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Rejects invalid reloc tree root keys with stack dump. BUG Syzbot reported a crash that an ASSERT was triggered inside preparetomerge. This ASSERT ensures that the reloc tree is properly pointed back by its subvolume tree...

5.5CVSS5.8AI score0.00197EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability in Thunderbird

OpenPGP secret keys that were imported using Thunderbird versions 78.8.1 up to 78.10.1 were stored unencrypted on the user’s local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automaticall...

4.3CVSS5.5AI score0.0081EPSS
SaveExploits1References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux – Vulnerability in Linux

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP does not require that all fragments of a frame be encrypted with the same key. An adversary can exploit this weakness to decrypt selected fragments when another device sends fragmented...

2.6CVSS6.8AI score0.02592EPSS
SaveExploits2References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in mbedtls

The use of a broken or risky cryptographic algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS for all versions prior to 3.0.0, 2.27.0, or 2.16.11 allows attackers with access to precise timing and memory access information typically from an untrusted operating system attacking a...

4.7CVSS5.8AI score0.00164EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•7 views

Astra Linux – Vulnerability in libssh

A flaw was discovered in libssh versions built with OpenSSL versions older than 3.0. The issue lies with the sshkdf function, which is responsible for key derivation. Due to inconsistent interpretation of return values, OpenSSL uses 0 to indicate failure, while libssh uses 0 for success. As a...

8.8CVSS6.5AI score0.00466EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/14 7:58 a.m.•10 views

openssl: RPK server signature algorithm selection can dereference a missing certificate

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

5.5AI score0.01021EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•14 views

PT-2026-91235

Description A submitted topology carries two lists of blobstore keys, dependency jars and dependency artifacts, which the client fills in after uploading the corresponding blobs. Nimbus performed no validation of their contents on the submission path, yet acts on them in two places. During cleanu...

5.7AI score0.00265EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•0 views

CVE-2026-53714: Missing Authentication for Critical Function

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor bu...

7.4CVSS5.8AI score0.00348EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•11 views

PT-2026-91209

laradashboard through 1.2.2 contains a missing authorization vulnerability in the Local License API endpoints that allows any authenticated user to read, overwrite, and delete premium module license keys. Attackers with low-privileged accounts can access GET /api/admin/licenses/show, POST...

7.1CVSS5.7AI score0.00301EPSS
SaveExploits0References3
Amazon
Amazon
•added 2026/09/14 12:00 a.m.•10 views

Important: openssl

Issue Overview: Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically...

9.8CVSS7.6AI score0.01823EPSS
SaveExploits0
Rows per page
Query Builder