Lucene search
+L

8178 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/07 12:11 p.m.•37 views

Malicious code in streak-kit-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18948f1c8e71b24d05e1ef6f749995bdc9098d610f791b86dc33f7d41dd8b1d3 The package advertises itself as a streak/calendar math library, but its main entry dist/index.mjs contains a top-level IIFE that, on any...

5.6AI score
SaveExploits0References2
NVD
NVD
•added 2026/08/07 9:16 a.m.•27 views

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS0.00152EPSS
SaveExploits0References2
osv_azl
osv_azl
•added 2026/08/07 9:16 a.m.•28 views

AZL-95481 CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/08/07 9:16 a.m.•11 views

UBUNTU-CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/08/07 8:19 a.m.•26 views

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/08/07 8:19 a.m.•18 views

CVE-2026-18938 P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/07 8:19 a.m.•74 views

CVE-2026-18938 P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS0.00152EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/07 8:19 a.m.•26 views

EUVD-2026-54413

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/07 8:19 a.m.•95 views

CVE-2026-18938

CVE-2026-18938 affects p11-kit: an integer overflow in RPC attribute-array length calculation on 32‑bit systems can under‑allocate nested attribute storage, causing a heap out‑of‑bounds write and DoS by crashing the p11-kit RPC parser. Affected component: p11-kit RPC decoding of nested attributes...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/07 8:19 a.m.•26 views

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/07 8:19 a.m.•22 views

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References3
Slackware Linux
Slackware Linux
•added 2026/08/07 2:16 a.m.•30 views

[slackware-security] p11-kit

New p11-kit packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/p11-kit-0.26.5-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: rpc: guard against overflow when decoding nested...

6.2CVSS5.9AI score0.00152EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/07 12:00 a.m.•2 views

PT-2026-68883

Name of the Vulnerable Software and Affected Versions p11-kit affected versions not specified Description A local attacker or one with access to a reachable RPC channel can exploit an integer overflow. By sending specially crafted messages, the attacker can cause the system to miscalculate memory...

6.2CVSS6.3AI score0.00152EPSS
SaveExploits0References26
UbuntuCve
UbuntuCve
•added 2026/08/07 12:00 a.m.•18 views

CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/07 12:00 a.m.•22 views

Slackware Linux 15.0 / current p11-kit Vulnerability (SSA:2026-218-02)

The version of p11-kit installed on the remote host is prior to 0.26.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-218-02 advisory. New p11-kit packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

6.2CVSS5.9AI score0.00152EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/07 12:00 a.m.•2 views

CVE-2026-18938: Heap-based Buffer Overflow

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

6.2CVSS6.2AI score0.00152EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/07 12:00 a.m.•26 views

Linux Distros Unpatched Vulnerability : CVE-2026-18938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By...

6.2CVSS6.1AI score0.00152EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2026/08/06 8:10 p.m.•29 views

@fernir2/saas-kit (>=0.0.173, <=0.0.207), @fernir2/saas-kit-cli (>=0.1.38, <=0.1.40) +1 more potentially affected by CVE-2026-71476 via @nx/s3-cache (>=5.0.0, <=5.0.7)

@nx/s3-cache NPM version =5.0.0, =0.0.173, =0.1.38, =5.0.0, =5.0.7 Source cves: CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

8.7CVSS5.8AI score0.00865EPSS
SaveExploits0
NVD
NVD
•added 2026/08/06 3:17 p.m.•23 views

CVE-2026-65549

Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...

7.2CVSS0.00539EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/06 3:16 p.m.•27 views

CVE-2026-25403

Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...

6.5CVSS0.00266EPSS
SaveExploits0References1
Rows per page
Query Builder