Lucene search
K

70 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:17 p.m.7 views

CVE-2026-6328

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.5AI score0.00198EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/17 6:31 p.m.2 views

EUVD-2026-22832

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.8AI score0.00198EPSS
Exploits0References2
NVD
NVD
added 2026/04/15 4:17 a.m.1 views

CVE-2026-6328

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS0.00198EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/15 3:18 a.m.23 views

CVE-2026-6328 XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS0.00198EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/15 3:18 a.m.0 views

CVE-2026-6328 XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.8AI score0.00198EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/15 3:18 a.m.2 views

CVE-2026-6328

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS5.8AI score0.00198EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.5 views

XQUIC 安全漏洞

XQUIC is an open-source cross-platform implementation code base for QUIC and HTTP/3 protocols developed by Alibaba. Versions of XQUIC 1.8.3 and earlier contain security vulnerabilities. These vulnerabilities stem from improper input validation and encryption signature verification, which may lead...

8.3CVSS5.9AI score0.00198EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/15 12:0 a.m.5 views

PT-2026-33006

Name of the Vulnerable Software and Affected Versions XQUIC versions prior to 1.8.3 Description Improper input validation and improper verification of cryptographic signatures in the QUIC protocol implementation, specifically within the packet processing module and STREAM frame handler modules,...

8.3CVSS5.4AI score0.00198EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.1 views

CVE-2026-2298

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026...

9.4CVSS5.8AI score0.00413EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/23 9:30 p.m.4 views

EUVD-2026-14512

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026...

5.8AI score0.00413EPSS
Exploits0References2
CVE
CVE
added 2026/03/23 7:54 p.m.11 views

CVE-2026-2298

Technical details for CVE-2026-2298 are not provided in the supplied documents; no affected products, versions, impact, or remediation are specified. Monitor official sources for updates.

9.4CVSS5.8AI score0.00413EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.3 views

PT-2026-27201

Name of the Vulnerable Software and Affected Versions Salesforce Marketing Cloud Engagement versions prior to January 30, 2026 Description Improper neutralization of argument delimiters in a command, known as argument injection, allows for Web Services Protocol Manipulation. Recommendations Updat...

9.4CVSS5.8AI score0.00413EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/03/06 7:45 p.m.3 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.8AI score0.00288EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/05 6:31 p.m.7 views

EUVD-2026-9838

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.9AI score0.00288EPSS
Exploits1References2
NVD
NVD
added 2026/03/05 4:16 p.m.9 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS0.00288EPSS
Exploits1References3
OSV
OSV
added 2026/03/05 4:16 p.m.4 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

7.5CVSS5.8AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/05 3:38 p.m.5 views

CVE-2026-30798 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.8AI score0.00288EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/05 3:38 p.m.5 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.8AI score0.00288EPSS
Exploits1References4
CVE
CVE
added 2026/03/05 3:38 p.m.26 views

CVE-2026-30798

CVE-2026-30798 affects RustDesk Client (rustdesk-client) on Windows, macOS, Linux, iOS, and Android up to version 1.4.5. The issue arises from insufficient verification of data authenticity and improper handling of exceptional conditions in the Heartbeat sync loop and strategy processing modules,...

8.2CVSS5.8AI score0.00288EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/03/05 3:38 p.m.35 views

CVE-2026-30798 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS0.00288EPSS
Exploits1References3
Rows per page
Query Builder