Lucene search
+L

12246 matches found

osv_suse
osv_suse
•added 2026/05/14 6:29 a.m.•11 views

SUSE-SU-2026:21705-1 Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes one security issue The following security issue was fixed: - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264459...

8.8CVSS7.1AI score0.94194EPSS
SaveExploits39References3
osv_suse
osv_suse
•added 2026/05/14 6:27 a.m.•11 views

SUSE-SU-2026:21647-1 Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes one security issue The following security issue was fixed: - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264459...

8.8CVSS7.1AI score0.94194EPSS
SaveExploits39References3
osv_suse
osv_suse
•added 2026/05/14 6:27 a.m.•10 views

SUSE-SU-2026:21691-1 Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes one security issue The following security issue was fixed: - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264459...

8.8CVSS7.1AI score0.94194EPSS
SaveExploits39References3
Mend
Mend
•added 2026/05/14 3:18 a.m.•1 views

WS-2018-0198

The http-live-simulator module doesn't set a root directory and allows any arbitrary paths to be accessed on the file system and returned to requesting clients...

8.7CVSS6AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•10 views

CVE-2026-44633: Incorrect Authorization

Live Helper Chat is an open-source application that enables live support websites. In 4.84v, the Live Helper Chat REST API chat update endpoint allows a REST user with lhchat/use to update a chat in a department they cannot read. The endpoint accepts arbitrary chat object fields, so the user can...

8.1CVSS6AI score0.0038EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/14 12:00 a.m.•22 views

PT-2026-41019

Live Helper Chat is an open-source application that enables live support websites. In 4.84v, the Live Helper Chat REST API chat update endpoint allows a REST user with lhchat/use to update a chat in a department they cannot read. The endpoint accepts arbitrary chat object fields, so the user can...

8.1CVSS6AI score0.0038EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/14 12:00 a.m.•23 views

Live Helper Chat 安全漏洞

Live Helper Chat is an open-source plugin developed by Live Helper Chat developers, designed to provide chat functionality for web platforms. Version 4.84 of Live Helper Chat contains a security vulnerability. This vulnerability stems from the REST API chat update endpoint, which allows users to...

8.1CVSS5.8AI score0.0038EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/13 9:32 p.m.•36 views

EUVD-2026-30138

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/13 9:32 p.m.•69 views

EUVD-2026-30139

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/13 8:16 p.m.•26 views

CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS0.00328EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/13 8:16 p.m.•84 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS0.00262EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/05/13 8:16 p.m.•33 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/05/13 8:16 p.m.•23 views

CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/05/13 8:16 p.m.•26 views

UBUNTU-CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/05/13 8:16 p.m.•22 views

UBUNTU-CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/13 7:28 p.m.•18 views

CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/13 7:28 p.m.•16 views

CVE-2026-28376 Grafana Live push endpoint allows unbounded memory allocation leading to OOM

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
Mend
Mend
•added 2026/05/13 7:28 p.m.•6 views

CVE-2026-28376

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

7.1CVSS6.6AI score0.00328EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/13 7:28 p.m.•75 views

CVE-2026-28376

CVE-2026-28376 affects the Grafana Live push endpoint. An authenticated user with access to the Grafana Live API can trigger unbounded memory allocation by sending a large or streaming request body, potentially causing out-of-memory conditions. The available documents describe the vulnerable comp...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2026/05/13 7:28 p.m.•19 views

CVE-2026-28376 Grafana Live push endpoint allows unbounded memory allocation leading to OOM

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue...

6.5CVSS6.5AI score
SaveExploits0References3
Rows per page
Query Builder