Lucene search
+L

11727 matches found

NVD
NVD
•added 2026/10/28 6:17 p.m.•6 views

CVE-2026-58458

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted worldgendata with an invalid Kle...

6.9CVSS0.00246EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/28 5:17 p.m.•21 views

CVE-2026-58458 Don't Starve Together Memory Corruption via world_gen_data

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted worldgendata with an invalid Kle...

6.9CVSS0.00246EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/28 5:17 p.m.•7 views

EUVD-2026-112278

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted worldgendata with an invalid Kle...

6.9CVSS6AI score0.00246EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/28 12:00 a.m.•6 views

PT-2026-128349

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted world gen data with an invalid...

6.9CVSS6AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/28 12:00 a.m.•3 views

CVE-2026-58458: Out-of-bounds Write

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted worldgendata with an invalid Kle...

6.9CVSS6AI score0.00246EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/27 7:01 p.m.•9 views

EUVD-2026-110467

Go JOSE: DoS when parsing JWKs that contain RSA keys...

7.5CVSS5.9AI score0.00366EPSS
SaveExploits0References4
osv_mgasa
osv_mgasa
•added 2026/10/25 1:13 a.m.•14 views

MGASA-2026-0539 Updated iperf package fixes security vulnerabilities

Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...

9.2CVSS6.5AI score0.00635EPSS
SaveExploits2References3
Mageia
Mageia
•added 2026/10/25 1:13 a.m.•12 views

Updated iperf package fixes security vulnerabilities

Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...

9.2CVSS6.6AI score0.00635EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2026/10/21 12:10 p.m.•13 views

CVE-2026-82953 Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service

NULL pointer dereference in the RTMP protocol implementation in Apache bRPC version onfailid, causing the process to crash. Affected Scenarios: Run an Apache bRPC RTMP server whose RtmpService::NewStream may return null i.e., the service rejects createStream requests. A remote client that sends a...

5.3CVSS5.8AI score0.0048EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/21 12:10 p.m.•28 views

CVE-2026-82953 Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service

NULL pointer dereference in the RTMP protocol implementation in Apache bRPC version onfailid, causing the process to crash. Affected Scenarios: Run an Apache bRPC RTMP server whose RtmpService::NewStream may return null i.e., the service rejects createStream requests. A remote client that sends a...

0.0048EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•7 views

RHEL 10 : kernel (RHSA-2026:81406)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:81406 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: thermal: core: Fix thermal...

9.8CVSS6.5AI score0.00803EPSS
SaveExploits3References24
Tenable Nessus
Tenable Nessus
•added 2026/10/17 12:00 a.m.•14 views

SUSE SLED15: libsoup-2_4-1 / libsoup2-devel / libsoup2-lang / etc (SUSE-SU-2026:4703-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4703-1 advisory. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy...

9.8CVSS6.6AI score0.00745EPSS
SaveExploits4References44
SUSE Linux
SUSE Linux
•added 2026/10/16 1:29 p.m.•16 views

Security update for libsoup2

This update for libsoup2 fixes the following issues: CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol...

9.1CVSS5.9AI score0.00745EPSS
SaveExploits4References56
SUSE Linux
SUSE Linux
•added 2026/10/16 8:42 a.m.•18 views

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711:...

9.1CVSS6.4AI score0.00745EPSS
SaveExploits2References50
osv_suse
osv_suse
•added 2026/10/16 8:41 a.m.•10 views

SUSE-SU-2026:4690-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711:...

8.6CVSS6.4AI score0.00745EPSS
SaveExploits2References26
Tenable Nessus
Tenable Nessus
•added 2026/10/16 12:00 a.m.•13 views

SUSE SLES15 Security Update : iperf (SUSE-SU-2026:4678-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4678-1 advisory. - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion...

9.2CVSS6.7AI score0.00635EPSS
SaveExploits2References16
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•21 views

Astra Linux – Vulnerability in ffmpeg

There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/vfvmafmotion.c, within the convolutiony8bit module. This vulnerability could allow a remote malicious user to cause a Denial of Service attack...

6.5CVSS6AI score0.01499EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•21 views

Astra Linux – vulnerability in hdf5

An out-of-bounds read was found in H5Ofillnewdecode and H5Ofillolddecode within H5Ofill.c in the HDF HDF5 1.10.2 library. This vulnerability could potentially be exploited to carry out remote denial-of-service attacks or information disclosure attacks...

8.1CVSS6.7AI score0.02737EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•19 views

Astra Linux – vulnerability in binutils

An issue was discovered in the mergestrings function within merge.c in the Binary File Descriptor BFD library also known as libbfd, as included in GNU Binutils 2.31. There is a NULL pointer dereference in bfdaddmergesection when attempting to merge sections with large alignments. A specially...

5.5CVSS6.2AI score0.0232EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•20 views

Astra Linux – Vulnerability in ffmpeg

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service...

6.5CVSS6.9AI score0.01777EPSS
SaveExploits1References2
Rows per page
Query Builder