Lucene search
+L

395 matches found

AlpineLinux
AlpineLinux
•added 2026/04/24 1:46 a.m.•38 views

CVE-2026-32952

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue...

7.5CVSS6.1AI score0.01467EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2026/04/24 12:00 a.m.•22 views

CVE-2026-32952

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue...

7.5CVSS6.1AI score0.01467EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/24 12:00 a.m.•6 views

CVE-2026-32952: Integer Overflow or Wraparound

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue...

7.5CVSS6.1AI score0.01467EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/04/23 9:21 p.m.•39 views

go-ntlmssp NTLM challenges can panic on malformed payloads

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue...

7.5CVSS6.1AI score0.01467EPSS
SaveExploits0References4Affected Software1
osv_clsa
osv_clsa
•added 2026/04/01 10:36 a.m.•44 views

CLSA-2026-1775039763 wireshark: Fix of 11 CVEs

CVE-2023-6175: fix heap buffer overflow in NetScreen file parser - CVE-2024-0208: fix crash in GVCP dissector due to NULL string - CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors - CVE-2024-0211: fix infinite loop in DOCSIS dissector - CVE-2024-2955: fix use-after-free in T.38...

7.8CVSS7.1AI score0.03456EPSS
SaveExploits7References1
osv_clsa
osv_clsa
•added 2026/04/01 8:42 a.m.•33 views

CLSA-2026-1775032927 wireshark: Fix of 11 CVEs

CVE-2023-6175: fix heap buffer overflow in NetScreen file parser - CVE-2024-0208: fix crash in GVCP dissector due to NULL string - CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors - CVE-2024-0211: fix infinite loop in DOCSIS dissector - CVE-2024-2955: fix use-after-free in T.38...

7.8CVSS7.1AI score0.03456EPSS
SaveExploits7References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2003-0155

Malware in sbrugna...

7.5CVSS6.3AI score0.03793EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2005-1460

Malware in sbrugna...

5CVSS6AI score0.01898EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-6898

Malware in sbrugna...

5CVSS6.7AI score0.02241EPSS
SaveExploits0References19
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-6010

Malware in sbrugna...

6.5CVSS6.8AI score0.03151EPSS
SaveExploits0References20
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-49046

Malicious code in bioql PyPI...

7.8CVSS6.5AI score0.00317EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-36512

Malicious code in bioql PyPI...

5.3CVSS6.3AI score0.00497EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•6 views

CVE-2022-50372: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory leak when build ntlmssp negotiate blob failed There is a memory leak when mount cifs: unreferenced object 0xffff888166059600 size 448: comm "mount.cifs", pid 51391, jiffies 4295596373 age 330.596s hex dump first ...

5.5CVSS5.7AI score0.00184EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2019-14907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with log level = 3 or above then the...

6.5CVSS6.7AI score0.03151EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/02 10:25 p.m.•8 views

CVE-2023-32255 Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type

A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion...

5.3CVSS7AI score0.00497EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/08/02 10:25 p.m.•27 views

CVE-2023-32255 Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type

A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion...

5.3CVSS0.00497EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/08/02 10:25 p.m.•21 views

CVE-2023-32255

A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion...

5.3CVSS5.5AI score0.00497EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/02 12:00 a.m.•4 views

CVE-2023-32255: Missing Release of Resource after Effective Lifetime

A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion...

5.3CVSS5.6AI score0.00497EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/06/25 12:00 a.m.•14 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : GSS NTLMSSP vulnerabilities (USN-7588-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7588-1 advisory. Phil Turnbull discovered that GSS NTLMSSP may perform out-of-bounds reads when decoding NTLM fields and target...

8.2CVSS7.5AI score0.01942EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2025/06/24 12:00 a.m.•15 views

Ubuntu: Security Advisory (USN-7588-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS8.1AI score0.01942EPSS
SaveExploits0References2
Rows per page
Query Builder