CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

44 matches found

OSV•added 2026/09/07 1:54 p.m.•7 views

SUSE-SU-2026:4048-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. - CVE-2026-80230: OpenSSL pinning bypass can allow...

6.2AI score0.00899EPSS

SaveExploits3References7

Vulnrichment•added 2026/09/06 5:47 p.m.•9 views

CVE-2026-80229 OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

5.8AI score0.00899EPSS

SaveExploits1References3

RedhatCVE•added 2026/08/31 5:53 a.m.•13 views

CVE-2026-62243

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

8.7CVSS5.8AI score0.00155EPSS

SaveExploits0References5

Hacker One•added 2026/08/25 6:11 p.m.•15 views

curl: CVE-2026-80229: OpenSSL provider use-after-free

Summary When CURLOPTSSLENGINE is set e.g. "default" on OpenSSL 3.x, osslsetprovider line 1791 allocates a per-handle OSSLLIBCTX and stores it in data-state.libctx. During TLS connection setup, SSLCTXnewex line 3750 receives this library context and embeds a pointer to it inside the newly created...

5.8AI score0.00899EPSS

SaveExploits1

RedHat Linux•added 2026/06/23 12:41 p.m.•22 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl-fips-provider: openssl-fips-provider-3.0.7-1.2.hum1 aarch64, x8664 openssl-fips-provider-so-3.0.7-1.2.hum1 aarch64, x8664 openssl-fips-provider-3.0.7-1.2.hum1.src src...

7.5CVSS7.3AI score0.0103EPSS

SaveExploits0References3