Lucene search
+L

23713 matches found

attackerkb
attackerkb
•added 2026/04/04 1:51 p.m.•9 views

CVE-2018-25251

Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu t...

8.6CVSS6.5AI score0.00185EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/04 1:51 p.m.•14 views

CVE-2018-25251 Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket

Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu t...

8.6CVSS6.4AI score0.00185EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/04 6:09 a.m.•9 views

BELL-CVE-2026-23419

Bulletin has no description...

5.5CVSS6.5AI score0.00175EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/04 12:00 a.m.•23 views

SNES9k 缓冲区错误漏洞

SNES9k is a game emulator developed by darkadonis2. Version 0.0.9z of SNES9k contains a buffer error vulnerability, which stems from a buffer overflow in the Netplay Socket Port Number field. This vulnerability could allow local attackers to execute code by overwriting the structured exception...

8.6CVSS6.2AI score0.00185EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/04 12:00 a.m.•7 views

CVE-2018-25251: Out-of-bounds Write

Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu t...

8.6CVSS6.4AI score0.00185EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/04 12:00 a.m.•23 views

PT-2026-30371

Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu t...

8.6CVSS6.5AI score0.00185EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/04/03 11:27 p.m.•18 views

SUSE CVE-2026-23440

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN Extended Sequence Number wrap event to the driver. The driver validates this event by querying the IPSec ASO and checking...

4.7CVSS5.9AI score0.00206EPSS
SaveExploits0References16
RedhatCVE
RedhatCVE
•added 2026/04/03 11:02 p.m.•20 views

CVE-2026-34758

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.8AI score0.00495EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/04/03 11:01 p.m.•18 views

CVE-2026-34759

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered without authentication middleware, while sibling endpoints in the same codebase correctly use ClusterKeyAuthorization.isAuthorizedServiceMiddleware. Thes...

9.2CVSS5.8AI score0.00674EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/04/03 6:31 p.m.•18 views

EUVD-2026-18681

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN Extended Sequence Number wrap event to the driver. The driver validates this event by querying the IPSec ASO and checking...

5.9AI score0.00206EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/04/03 5:35 p.m.•11 views

CVE-2026-23440

A flaw was found in the Linux kernel's net/mlx5e component. A race condition occurs during the handling of IPSec Internet Protocol Security Extended Sequence Number ESN updates. This can cause the system to process the same update event multiple times, leading to an incorrect ESN state. The...

7.5CVSS6AI score0.00206EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/03 4:16 p.m.•21 views

UBUNTU-CVE-2026-23440

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN Extended Sequence Number wrap event to the driver. The driver validates this event by querying the IPSec ASO and checking...

7.5CVSS5.9AI score0.00206EPSS
SaveExploits0References22
UbuntuCve
UbuntuCve
•added 2026/04/03 4:16 p.m.•16 views

CVE-2026-23440

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN Extended Sequence Number wrap event to the driver. The driver validates this event by querying the IPSec ASO and checking...

7.5CVSS5.9AI score0.00206EPSS
SaveExploits0References21
OSV
OSV
•added 2026/04/03 3:15 p.m.•18 views

CVE-2026-23440 net/mlx5e: Fix race condition during IPSec ESN update

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN Extended Sequence Number wrap event to the driver. The driver validates this event by querying the IPSec ASO and checking...

7.5CVSS6AI score
SaveExploits0References8
OSV
OSV
•added 2026/04/03 2:01 p.m.•13 views

MINI-44R8-M2M6-HC35

Bulletin has no description...

7.5CVSS7.1AI score0.00658EPSS
SaveExploits0
OSV
OSV
•added 2026/04/03 1:45 p.m.•9 views

MINI-QM29-P4VQ-WGJP

Bulletin has no description...

7.5CVSS7.1AI score0.00396EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/03 12:00 a.m.•16 views

PT-2026-30135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the handling of IPSec ESN Extended Sequence Number wrap events in the mlx5e driver when operating in IPSec full offload mode. After validating an ESN event, th...

7.5CVSS6AI score0.00206EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•10 views

CVE-2026-25197: Authorization Bypass Through User-Controlled Key

A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call...

9.3CVSS5.8AI score0.00295EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/02 7:21 p.m.•15 views

CVE-2026-34758

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS0.00495EPSS
SaveExploits1References3
CVE
CVE
•added 2026/04/02 6:50 p.m.•58 views

CVE-2026-34759

Affected software: OneUptime Open Source platform (prior to v10.0.42). Vulnerability: Multiple notification API endpoints were registered without authentication middleware, exposing /notification/ and enabling an unauthenticated attacker to exploit a projectId leak from the public Status Page API...

9.2CVSS5.6AI score0.00674EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder