Lucene search
+L

204256 matches found

OSV
OSV
•added 2026/08/03 3:16 a.m.•13 views

DEBIAN-CVE-2026-58059

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

7.5CVSS7.2AI score0.00493EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/03 3:16 a.m.•14 views

UBUNTU-CVE-2026-58059

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS7.2AI score0.00493EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/08/03 2:41 a.m.•26 views

CVE-2026-58059

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS7.2AI score0.00493EPSS
SaveExploits0References4Affected Software2
Vulnrichment
Vulnrichment
•added 2026/08/03 2:41 a.m.•13 views

CVE-2026-58059 Quadratic-time escaping when stringifying X.500 distinguished names

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS7.2AI score0.00493EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/03 2:41 a.m.•26 views

EUVD-2026-52092

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS7.2AI score0.00493EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/03 2:41 a.m.•79 views

CVE-2026-58059 Quadratic-time escaping when stringifying X.500 distinguished names

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS0.00493EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/03 2:41 a.m.•17 views

CVE-2026-58059 Quadratic-time escaping when stringifying X.500 distinguished names

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS5.4AI score
SaveExploits0References9
CVE
CVE
•added 2026/08/03 2:41 a.m.•166 views

CVE-2026-58059

CVE-2026-58059 affects Bouncy Castle for Java prior to 1.85, with a quadratic-time escaping issue when stringifying X.500 distinguished names. The vulnerability also impacts BC-Java LTS prior to 2.73.12 and BC-FJA (FIPS) prior to bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), and 2.1.3 (2.1.x). The root...

8.7CVSS7.2AI score0.00493EPSS
SaveExploits0References2Affected Software3
Debian CVE
Debian CVE
•added 2026/08/03 2:41 a.m.•21 views

CVE-2026-58059

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS7.2AI score0.00493EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/08/03 1:29 a.m.•43 views

Exploit for CVE-2026-5556

--- CVE-2026-5556 – Kubernetes Admission Controller Bypass v...

6.5CVSS6.9AI score0.00393EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•35 views

PT-2026-67535

Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that allows admin-authenticated attackers to inject arbitrary JavaScript by submitting malicious payloads via the tag names parameter of the GET /api/save content admin endpoint,...

4.8CVSS5.8AI score0.00273EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•42 views

PT-2026-67226

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Bouncy Castle for Java FIPS BC-FJA versions prior to 1.0.2.7 Bouncy Castle for Java FIPS BC-FJA versions prior to 2.0.2 Bouncy Castle for Java...

8.7CVSS7.1AI score0.00493EPSS
SaveExploits0References195
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/03 12:00 a.m.•5 views

CVE-2026-58059: Inefficient Algorithmic Complexity

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS7.2AI score0.00493EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/03 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-69097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through...

7.3CVSS7.4AI score0.00268EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/08/02 12:00 a.m.•23 views

AlmaLinux 8 : unbound (ALSA-2026:37282)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37282 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...

8.7CVSS6.5AI score0.00827EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/01 12:22 p.m.•17 views

CVE-2026-67310 openremote before 1.27.0 Cross-Tenant IDOR via setAssetLinks

OpenRemote org.openremote:openremote versions = 1.26.2 contain an insecure direct object reference vulnerability in the setAssetLinks endpoint of AlarmResourceImpl. The realm access check validates only a single realm obtained via realms.stream.findFirst on a HashSet of realms from the request,...

5.3CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/08/01 12:22 p.m.•33 views

EUVD-2026-51838

OpenRemote org.openremote:openremote versions = 1.26.2 contain an insecure direct object reference vulnerability in the setAssetLinks endpoint of AlarmResourceImpl. The realm access check validates only a single realm obtained via realms.stream.findFirst on a HashSet of realms from the request,...

5.4CVSS5.8AI score0.00239EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/01 12:22 p.m.•83 views

CVE-2026-67310

CVE-2026-67310 concerns OpenRemote

5.4CVSS5.8AI score0.00239EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/01 12:22 p.m.•20 views

CVE-2026-67313

axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands of nested brackets to exhaust the JavaScript call stack and trigger...

6.3CVSS6AI score0.00521EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2026/08/01 12:22 p.m.•25 views

EUVD-2026-51866

axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands of nested brackets to exhaust the JavaScript call stack and trigger...

6.3CVSS6AI score0.00521EPSS
SaveExploits1References2
Rows per page
Query Builder