CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

49 matches found

Fedora•added 2026/10/31 6:58 p.m.•5 views

[SECURITY] Fedora 45 Update: fips-provider-1.5.3-2.fc45

This package provides a cryptographic module that is both an OpenSSL provider as well as a PKCS11 software token...

5.9AI score

SaveExploits0

Tenable Nessus•added 2026/10/20 12:00 a.m.•17 views

Fedora 43 : curl (2026-d65da12723)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d65da12723 advisory. - fix incomplete mTLS config matching in conn reuse CVE-2026-8932 - fix OpenLDAP SASL authentication bypass CVE-2026-13608 - fix OpenSSL pinning...

7.5CVSS6.9AI score0.00563EPSS

SaveExploits6References6

Tenable Nessus•added 2026/09/21 12:00 a.m.•18 views

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:4048-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4048-1 advisory. - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. -...

7.5CVSS7.7AI score0.00563EPSS

SaveExploits3References10

osv_suse•added 2026/09/07 1:54 p.m.•22 views

SUSE-SU-2026:4048-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. - CVE-2026-80230: OpenSSL pinning bypass can allow...

7.5CVSS7.5AI score0.00563EPSS

SaveExploits3References7

Vulnrichment•added 2026/09/06 5:47 p.m.•17 views

CVE-2026-80229 OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

5.9AI score0.00563EPSS

SaveExploits1References3

RedhatCVE•added 2026/08/31 5:53 a.m.•21 views

CVE-2026-62243

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

8.7CVSS7AI score0.00155EPSS

SaveExploits0References5

Hacker One•added 2026/08/25 6:11 p.m.•29 views

curl: CVE-2026-80229: OpenSSL provider use-after-free

Summary When CURLOPTSSLENGINE is set e.g. "default" on OpenSSL 3.x, osslsetprovider line 1791 allocates a per-handle OSSLLIBCTX and stores it in data-state.libctx. During TLS connection setup, SSLCTXnewex line 3750 receives this library context and embeds a pointer to it inside the newly created...

7.5CVSS6.4AI score0.00563EPSS

SaveExploits1

RedHat Linux•added 2026/06/23 12:41 p.m.•28 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl-fips-provider: openssl-fips-provider-3.0.7-1.2.hum1 aarch64, x8664 openssl-fips-provider-so-3.0.7-1.2.hum1 aarch64, x8664 openssl-fips-provider-3.0.7-1.2.hum1.src src...

7.5CVSS6.7AI score0.0103EPSS

SaveExploits0References3