Lucene search
+L

7044 matches found

curl security advisories
curl security advisories
•added 2026/06/24 8:00 a.m.•24 views

Native CA trust persist

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA...

9.1CVSS5.9AI score0.00428EPSS
SaveExploits1References1Affected Software2
OSV
OSV
•added 2026/06/24 8:00 a.m.•22 views

CURL-CVE-2026-8458 wrong reuse for different services

libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different "services". libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When...

6.5CVSS5.8AI score0.00371EPSS
SaveExploits1
curl security advisories
curl security advisories
•added 2026/06/24 8:00 a.m.•68 views

incomplete mTLS config matching in conn reuse

libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS...

7.5CVSS5.8AI score0.00396EPSS
SaveExploits2References1Affected Software2
curl security advisories
curl security advisories
•added 2026/06/24 8:00 a.m.•30 views

wrong reuse for different services

libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different "services". libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When...

6.5CVSS5.8AI score0.00371EPSS
SaveExploits1References1Affected Software2
Positive Technologies
Positive Technologies
•added 2026/06/24 12:00 a.m.•21 views

PT-2026-51998

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the mt76 WiFi driver during device destruction. All MT76 rx queues possess an associated page pool, including those not linked to a NAPI, such as WED RRO queues...

5.5CVSS6.1AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/24 12:00 a.m.•23 views

PT-2026-51746

Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description A logical error in the connection pooling mechanism allows the software to reuse an incorrect connection for Negotiate-authenticated requests. This occurs even when the requests are configure...

9.8CVSS5.8AI score0.0108EPSS
SaveExploits9References79
RedHat Linux
RedHat Linux
•added 2026/06/22 6:28 a.m.•15 views

kernel: libceph: make decode_pool() more resilient against corrupted osdmaps

In the Linux kernel, the following vulnerability has been resolved: libceph: make decodepool more resilient against corrupted osdmaps If the osdmap is maliciously corrupted such that the encoded length of cephpgpool envelope is less than what is expected for a particular encoding version,...

9.1CVSS5.7AI score0.0037EPSS
SaveExploits0References5
F5 Networks
F5 Networks
•added 2026/06/22 5:48 a.m.•19 views

K000161823: Linux kernel vulnerability CVE-2025-71095

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDPTX action There is a crash issue when running zero copy XDPTX action, the crash log is shown below. 216.122464 Unable to handle kernel paging request...

9.1CVSS5.5AI score0.0028EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/22 12:00 a.m.•1 views

CVE-2026-55388: Improper Control of Generation of Code

piscina is a node.js worker pool implementation. Prior to 6.0.0-rc.2, 5.2.0, and 4.9.3, piscina's constructor and run paths read the filename option via plain member access. Both reads fall through the prototype chain when the caller's options object doesn't have filename as an own property. When...

8.1CVSS5.9AI score0.00454EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/20 2:28 a.m.•21 views

SUSE CVE-2026-55204

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memo...

7.5CVSS5.9AI score0.00484EPSS
SaveExploits0References13
OSV
OSV
•added 2026/06/19 2:20 p.m.•16 views

GHSA-HM92-R4W5-C3MJ undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Impact When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requests are dispatched through the pool connected to the first origin, regardless of the intended destination. This cause...

7.5CVSS6.4AI score0.00385EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/06/19 2:20 p.m.•30 views

EUVD-2026-37760

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse...

7.5CVSS6.4AI score0.00385EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/06/19 2:20 p.m.•19 views

NPM: undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

NPM: undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse vulnerability discovered by ? in WordPress Npm undici versions = 7.23.0, 7.28.0...

8.8CVSS6.4AI score0.00385EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2026/06/19 2:20 p.m.•24 views

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Impact When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requests are dispatched through the pool connected to the first origin, regardless of the intended destination. This cause...

8.8CVSS6.4AI score0.00385EPSS
SaveExploits0References5Affected Software1
AstraLinux
AstraLinux
•added 2026/06/19 11:10 a.m.•12 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mm/vmalloc: The vmappurgelock must be taken in the shrinker function. The decayvapoolnode function can be invoked concurrently from two paths: 1. purgevmaparealazy, when pools are being purged; 2. The shrinker via...

7.8CVSS5.7AI score0.00175EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/18 5:16 p.m.•11 views

AZL-90261 CVE-2026-55204 affecting package haproxy for versions less than 2.9.11-7

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memo...

8.7CVSS5.9AI score0.00484EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/18 4:05 p.m.•17 views

CVE-2026-55204 HAProxy - NULL Pointer Dereference in hpack_dht_insert Function

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memo...

8.7CVSS5.3AI score0.00484EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/18 4:05 p.m.•14 views

CVE-2026-55204

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memo...

8.7CVSS5.4AI score0.00484EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/06/18 1:05 p.m.•13 views

Prototype Pollution

Overview piscina is an A fast, efficient Node.js Worker Thread Pool implementation Affected versions of this package are vulnerable to Prototype Pollution via the options.filename property in the constructor and run function. An attacker can execute arbitrary code and gain control over worker...

9.2CVSS6.7AI score0.00454EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/18 12:00 a.m.•21 views

Siemens RUGGEDCOM RST2428P Improper Input Validation (CVE-2026-23033)

In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fix dmapool resource leak in error paths The dmapool created by dmapoolcreate is not destroyed when dmaasyncdeviceregister or ofdmacontrollerregister fails, causing a resource leak in the probe error paths. A...

5.4AI score0.00229EPSS
SaveExploits0References4
Rows per page
Query Builder