Lucene search
+L

1789 matches found

Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•15 views

PT-2026-84267

The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4...

8.7CVSS5.9AI score0.00577EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•18 views

PT-2026-84254

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max header size option defaults to nolimit, and httpc response:parse headers/6 accumulates every header into a list before the length check runs which only fires after the...

8.2CVSS5.9AI score0.00694EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•14 views

PT-2026-84258

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod auth protected directory by prefixing the request path with an extra slash. httpd request:validate uri/1 normalises the request URI with uri string:normalize/1, which...

8.2CVSS5.9AI score0.00973EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•18 views

PT-2026-84263

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpc handler.erl converts the server-supplied Content-Length wi...

6.3CVSS5.8AI score0.00577EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/08/31 10:04 a.m.•10 views

CVE-2026-80712

A flaw was found in the Linux kernel's spi-qpic-snand driver. This vulnerability arises from an incorrect timing issue where the SETFEATURE command for SPI-NAND flash devices is executed before the intended feature value is properly written. Consequently, the device is programmed with an outdated...

8.4CVSS5.9AI score0.00194EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-80712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which...

8.4CVSS5.9AI score0.00194EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/29 5:17 p.m.•20 views

CVE-2026-82470

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor...

5.4CVSS0.00408EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/29 4:35 p.m.•13 views

EUVD-2026-68127

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor...

5.4CVSS5.9AI score0.00408EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/29 4:35 p.m.•11 views

CVE-2026-82470 Rodauth before 2.47.0 TOTP Code Reuse via Drift Window

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor...

5.4CVSS5.9AI score0.00408EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/29 4:35 p.m.•27 views

CVE-2026-82470 Rodauth before 2.47.0 TOTP Code Reuse via Drift Window

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor...

5.1CVSS5.9AI score
SaveExploits0References6
CVE
CVE
•added 2026/08/29 4:35 p.m.•32 views

CVE-2026-82470

Rodauth (a Ruby authentication library) before 2.47.0 contains a TOTP code reuse vulnerability in its otp feature. The root cause is a failure to track the last accepted code timestamp, allowing an attacker who observes a valid time-based one-time password to replay it within the drift window and...

5.4CVSS5.9AI score0.00408EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/29 12:00 a.m.•23 views

PT-2026-83450

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor...

5.4CVSS5.9AI score0.00408EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/08/28 4:33 p.m.•10 views

SUSE CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6AI score0.00194EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/28 8:16 a.m.•17 views

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS0.00194EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/28 8:16 a.m.•16 views

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6AI score0.00194EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/28 8:16 a.m.•9 views

UBUNTU-CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6AI score0.00194EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/28 6:53 a.m.•44 views

CVE-2026-80712

This vulnerability affects the Linux kernel's spi-qpic-snand driver (Qualcomm QPIC SPI-NAND controller). The root cause is an off-by-one in SET_FEATURE command handling : qcom_spi_send_cmdaddr() submits and executes the command immediately, but the feature value is only written to NAND_FLASH_FEAT...

8.4CVSS6AI score0.00194EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/28 6:53 a.m.•13 views

EUVD-2026-67447

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

6AI score0.00194EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/28 6:53 a.m.•14 views

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/28 6:53 a.m.•42 views

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

8.4CVSS0.00194EPSS
SaveExploits0References3
Rows per page
Query Builder