Lucene search
+L

10601 matches found

Cvelist
Cvelist
added 2026/04/24 12:00 a.m.43 views

CVE-2026-31052

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Checkout Authentication Flow component...

0.00541EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.20 views

Hostbill 资源管理错误漏洞

Hostbill is an automated management system for server hosting and cloud services provided by the Polish company Hostbill. Versions 2025-11-24 and 2025-12-01 of Hostbill contain resource management vulnerabilities. These vulnerabilities stem from issues with the Checkout Authentication Flow...

5.3CVSS5.8AI score0.00541EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/24 12:00 a.m.7 views

CVE-2026-31052

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Checkout Authentication Flow component...

5.4AI score0.00541EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/24 12:00 a.m.43 views

CVE-2026-31051

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Balance component...

0.00421EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/23 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-35237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0...

4.9CVSS7.1AI score0.00242EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:00 a.m.18 views

SUSE SLES16 Security Update : bind (SUSE-SU-2026:21204-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21204-1 advisory. - Update to release 9.20.21 - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service bsc1260805. -...

7.5CVSS7.5AI score0.01599EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.19 views

PT-2026-35582

USN-8196-1 fixed vulnerabilities in strongSwan. This update provides the corresponding update to Ubuntu 26.04 LTS. Original advisory details: Haruto Kimura discovered that strongSwan incorrectly handled the supported versions extension in TLS. A remote attacker could possibly use this issue to...

5.9AI score
SaveExploits6References36
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.37 views

PT-2026-45082

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.8 Description An issue exists in the Shared NF-profile Parser component within the lib/sbi/nnrf-handler.c library. Remote manipulation of an unknown functionality in this library can lead to a denial of service...

5.3CVSS5.7AI score0.00296EPSS
SaveExploits0References16
Debian CVE
Debian CVE
added 2026/04/21 8:35 p.m.18 views

CVE-2026-35236

Removed by vendor...

4.9CVSS7.6AI score0.00242EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.8 views

CVE-2026-22021

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 a...

5.3CVSS5.8AI score0.00305EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2026/04/21 6:00 p.m.42 views

CVE-2026-40613

CVE-2026-40613 affects coturn prior to 4.10.0, where STUN/TURN attribute parsing in ns_turn_msg.c performs unsafe pointer casts from uint8_t* to uint16_t* without alignment checks. On ARM64 (AArch64) with strict alignment, processing crafted STUN messages with odd-aligned attribute boundaries tri...

7.5CVSS5.8AI score0.01123EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2026/04/21 6:00 p.m.47 views

CVE-2026-40613 Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.10.0, the STUN/TURN attribute parsing functions in coturn perform unsafe pointer casts from uint8t to uint16t without alignment checks. When processing a crafted STUN message with odd-aligned attribute boundaries, thi...

7.5CVSS0.01123EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/21 6:00 p.m.16 views

CVE-2026-40613 Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.10.0, the STUN/TURN attribute parsing functions in coturn perform unsafe pointer casts from uint8t to uint16t without alignment checks. When processing a crafted STUN message with odd-aligned attribute boundaries, thi...

7.5CVSS6AI score
SaveExploits0References3
NVD
NVD
added 2026/04/21 9:16 a.m.13 views

CVE-2025-13826

Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is...

8.2CVSS0.00253EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/21 8:19 a.m.10 views

EUVD-2025-209536

Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is...

8.2CVSS5.8AI score0.00253EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:19 a.m.7 views

CVE-2025-13826

Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is...

8.2CVSS5.8AI score0.00253EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/21 12:00 a.m.14 views

Zervit 输入验证错误漏洞

Zervit is an open-source HTTP/Web server developed by Zervit. Zervit has a vulnerability related to input validation. This vulnerability arises due to insufficient input validation during configuration reset requests, which may lead to a remote denial-of-service attack, causing the application to...

8.2CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/21 12:00 a.m.16 views

PT-2026-34117

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.45 Description An issue exists in the Server: DML component of Oracle MySQL. A high privileged attacker with network access via multiple protocols can exploit this flaw to compromise the server. Successf...

6.5CVSS7.2AI score0.00323EPSS
SaveExploits1References118
Redos
Redos
added 2026/04/20 12:00 a.m.20 views

ROS-20260420-73-0004

A vulnerability in the PKCS12getfriendlyname function of the OpenSSL library is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

7.4CVSS7.3AI score0.00576EPSS
SaveExploits1
Redos
Redos
added 2026/04/20 12:00 a.m.13 views

ROS-20260420-73-0005

A vulnerability in the PKCS12getfriendlyname function of the OpenSSL library is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

7.4CVSS7.3AI score0.00576EPSS
SaveExploits1
Rows per page
Query Builder