CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

159 matches found

Ubuntu•added 2026/04/13 1:19 p.m.•4 views

USN-8170-1: Corosync vulnerabilities

It was discovered that Corosync incorrectly handled the membership commit token validity check. A remote attacker could use this issue to cause Corosync to crash, resulting in a denial of service, or to possibly obtain a small quantity of sensitive information. CVE-2026-35091 It was discovered th...

8.2CVSS5.8AI score0.00313EPSS

Exploits2

OSV•added 2026/04/10 11:19 a.m.•0 views

SUSE-SU-2026:21224-1 Security update for corosync

This update for corosync fixes the following issues: - CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet bsc1261299. - CVE-2026-35092: Denial of Service via integer overflow in join message validation bsc1261300...

8.2CVSS5.8AI score0.00313EPSS

Exploits2References5

OSV•added 2026/04/01 1:40 p.m.•1 views

SUSE-SU-2026:1165-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. - CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. - CVE-2026-31806: improper validation of server...

9.8CVSS6.5AI score0.00077EPSS

Exploits5References13

SUSE Linux•added 2026/04/01 1:40 p.m.•3 views

Security update for freerdp2

This update for freerdp2 fixes the following issues: CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. CVE-2026-31806: improper validation of server messages...

8.8CVSS6.6AI score0.00077EPSS

Exploits5References24

Vulnrichment•added 2026/04/01 1:18 p.m.•3 views

CVE-2026-35092 Corosync: corosync: denial of service via integer overflow in join message validation

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol UDP packets. This can cause the service to crash, leading to a denial of service. This vulnerability...

7.5CVSS5.9AI score0.00313EPSS

Exploits1References17

CVE•added 2026/04/01 1:18 p.m.•25 views

CVE-2026-35092

Corosync: A vulnerability in the join message sanity validation causes an integer overflow when using totemudp/totemudpu mode. Remote, unauthenticated attackers can send crafted UDP packets to crash the service, resulting in an availability impact (DoS). No remediation details are provided in the...

7.5CVSS5.9AI score0.00313EPSS

Exploits1References17Affected Software3

SUSE Linux•added 2026/03/31 3:4 p.m.•2 views

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. CVE-2026-31806: improper validation of server messages c...

8.8CVSS6.6AI score0.00077EPSS

Exploits5References24

Veracode•added 2025/12/13 5:1 a.m.•5 views

XML External Entity (XXE) Injection

Jenkins Semantic Versioning Plugin is vulnerable to XML External Entity XXE Injection. The vulnerability is due to improper validation of controller/agent messages and unrestricted parsing of attacker-controlled files containing external entities, allowing attackers controlling agent processes to...

9.8CVSS7.3AI score0.00439EPSS

Exploits0References3Affected Software1