Lucene search
+L

1789 matches found

SUSE CVE
SUSE CVE
•added 2026/08/22 12:53 a.m.•12 views

SUSE CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.5AI score0.00426EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/21 8:16 a.m.•17 views

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

9.8CVSS0.00707EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/21 7:39 a.m.•20 views

EUVD-2026-63827

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

9.8CVSS5.5AI score0.00707EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/21 7:39 a.m.•74 views

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code WordPress plugin (versions ≤ 4.8.6 ) contains a critical authentication bypass (CVSS 9.8). The handle_email_otp_return() function returns the secret magic login token directly in the HTTP response to a publ...

9.8CVSS5.5AI score0.00707EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/21 7:39 a.m.•17 views

CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

9.8CVSS5.4AI score0.00707EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/21 7:39 a.m.•44 views

CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

9.8CVSS0.00707EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•21 views

PT-2026-79312

Name of the Vulnerable Software and Affected Versions Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress versions prior to 4.8.7 Description An authentication bypass exists because the handle email otp return function returns a secret magic...

9.8CVSS5.4AI score0.00707EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/20 11:16 a.m.•12 views

DEBIAN-CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

6.5CVSS5.6AI score0.00426EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/20 11:16 a.m.•12 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

6.5CVSS0.00426EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/20 10:31 a.m.•95 views

CVE-2026-73196 Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS0.00426EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/20 10:31 a.m.•8 views

CVE-2026-73196 Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.6AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/08/20 10:31 a.m.•12 views

EUVD-2026-63241

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.4AI score0.00426EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/20 10:31 a.m.•11 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

6.5CVSS5.5AI score0.00426EPSS
SaveExploits0
CVE
CVE
•added 2026/08/20 10:31 a.m.•49 views

CVE-2026-73196

FreeIPA is vulnerable to an authenticated denial-of-service in the otptoken-add operation. A low-privilege authenticated user can submit an oversized One-Time Password (OTP) key value , which is decoded and re-encoded without proper size limits, consuming excessive CPU and memory and degrading th...

6.5CVSS5.4AI score0.00426EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2026/08/20 10:31 a.m.•12 views

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

6.5CVSS5.5AI score0.00426EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/20 10:00 a.m.•15 views

OESA-2026-3465 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Improper Handling of Exceptional Conditions vulnerabili...

7.5CVSS7.1AI score0.01215EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/20 10:00 a.m.•12 views

OESA-2026-3464 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Improper Handling of Exceptional Conditions vulnerabili...

7.5CVSS7.1AI score0.01215EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/20 10:00 a.m.•9 views

OESA-2026-3463 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Improper Handling of Exceptional Conditions vulnerabili...

7.5CVSS7.1AI score0.01215EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/08/20 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-73196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This...

6.5CVSS5.5AI score0.00426EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•22 views

PT-2026-78917

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

4.3CVSS5.4AI score0.00426EPSS
SaveExploits0References3
Rows per page
Query Builder