CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1419 matches found

Rapid7 Vulnerability Database (full)•added 2026/06/02 12:00 a.m.•4 views

CVE-2026-45684: Buffer Over-read

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI's log enricher mishandles writev buffers by reading only the first iovec entry but using the total ioviter.count as the copy length. When log...

5.3CVSS5.8AI score0.0018EPSS

SaveExploits1References5

CNNVD•added 2026/06/02 12:00 a.m.•20 views

OpenTelemetry eBPF Instrumentation 安全漏洞

OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. There were security vulnerabilities in the version of OpenTelemetry eBPF Instrumentation from 0.7.0 to 0.9.0. These vulnerabilities stemmed from the log enhancer’...

5.3CVSS8AI score0.0018EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2026/06/02 12:00 a.m.•2 views

CVE-2026-45679: Improper Output Neutralization for Logs

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis error text as the span status message. Because Redis error replies can contain attacker-controlled or sensitive values, this behavior can exfiltrate...

6.5CVSS5.8AI score0.00302EPSS

SaveExploits1References5

Rapid7 Vulnerability Database (full)•added 2026/06/02 12:00 a.m.•2 views

CVE-2026-45686: Integer Overflow or Wraparound

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, a remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and cause denial of service. When parsing...

7.5CVSS5.8AI score0.00515EPSS

SaveExploits1References4

Rapid7 Vulnerability Database (full)•added 2026/06/02 12:00 a.m.•3 views

CVE-2026-45676: Improper Input Validation

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI's replacement ELF parser trusts section offsets, counts, and string offsets from the executable file. A crafted local ELF can make OBI dereference invalid section...

5.5CVSS5.7AI score0.00166EPSS

SaveExploits1References5

Rapid7 Vulnerability Database (full)•added 2026/06/02 12:00 a.m.•1 views

CVE-2026-45682: Missing Release of Memory after Effective Lifetime

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the custom CappedConcurrentHashMap introduced for Java TLS state tracking never removes keys from its insertion-order queue when entries are deleted. In long-running...

5.5CVSS5.8AI score0.00166EPSS

SaveExploits1References5

CNNVD•added 2026/06/02 12:00 a.m.•19 views

OpenTelemetry eBPF Instrumentation 安全漏洞

OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the use of a 256-byte backup...

5.9CVSS8AI score0.00378EPSS

SaveExploits1References2

CNNVD•added 2026/06/02 12:00 a.m.•30 views

OpenTelemetry eBPF Instrumentation 安全漏洞

5.5CVSS5.3AI score0.00166EPSS

SaveExploits1References2

CNNVD•added 2026/06/02 12:00 a.m.•23 views

OpenTelemetry eBPF Instrumentation 安全漏洞

OpenTelemetry eBPF Instrumentation is an open-source, eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the Java TLS ioctl probe usi...

3.8CVSS8AI score0.00175EPSS

SaveExploits1References2

Chainguard•added 2026/06/01 7:18 p.m.•25 views

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: falco-no-driver, external-secrets-operator, k6-fips, gitlab-workhorse-ce-fips, zot, cilium-envoy-fips, frankenphp-8.2, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-netapp, eks-distro, frankenphp-8.4, external-dns-fips, karpenter-fip...

5.8AI score

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•20 views

GHSA-CG87-VWWH-XVGJ vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•16 views

CVE-2026-42506 vulnerabilities

6.1CVSS6.2AI score0.00333EPSS

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•19 views

CVE-2026-42502 vulnerabilities

6.1CVSS6.2AI score0.00223EPSS

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•17 views

GHSA-W9P8-PVXH-RXPJ vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•19 views

CVE-2026-25681 vulnerabilities

6.1CVSS6.5AI score0.00223EPSS

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•18 views

CVE-2026-25680 vulnerabilities

6.5CVSS6.2AI score0.0046EPSS

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•19 views

GHSA-M9X8-M34X-FJ9Q vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•24 views

GHSA-WRH2-89VG-4J9G vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/06/01 7:18 p.m.•19 views

CVE-2026-27136 vulnerabilities

6.1CVSS6.5AI score0.00223EPSS

SaveExploits0

Veracode•added 2026/05/30 6:45 a.m.•19 views

Uncontrolled Resource Consumption

go.opentelemetry.io/obi is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to inefficient processing of BPF probe run-count deltas during histogram observation replay, which allows an attacker to trigger excessive CPU consumption on busy systems, leading to a...

7.5CVSS8.1AI score0.00481EPSS

SaveExploits1References4Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by