Lucene search
+L

25223 matches found

CVE
CVE
•added 2026/09/11 6:21 a.m.•75 views

CVE-2026-73784

A SAML response tampering vulnerability in HPE IceWall products (MFA 4.0 Enterprise/Standard Edition SAML Authentication Option, Federation Agent 4.0, and Federation Proxy 4.0) allows a remote attacker with low privileges to impersonate another user by bypassing security restrictions. HPE rates t...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2026/09/11 2:18 a.m.•18 views

DEBIAN-CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

4.2CVSS6.2AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/11 2:18 a.m.•18 views

CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

4.2CVSS0.00265EPSS
SaveExploits0References3
osv-azl
osv-azl
•added 2026/09/11 2:18 a.m.•17 views

AZL-100019 CVE-2026-89092 affecting package glibc 2.38-21

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

4.2CVSS6.2AI score0.00265EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/11 2:18 a.m.•13 views

UBUNTU-CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

4.2CVSS6.2AI score0.00265EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/09/11 2:18 a.m.•19 views

CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

4.2CVSS6.2AI score0.00265EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/11 1:41 a.m.•20 views

CVE-2026-89092

A flaw was found in glibc, specifically within the nscd service. A remote attacker, operating a malicious Domain Name System DNS server, could send an overly large DNS response. This could trigger a stack overflow in the nscd service, causing it to crash and leading to degraded DNS resolution for...

4.2CVSS5.9AI score0.00265EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/09/11 1:23 a.m.•30 views

CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

4.2CVSS6.2AI score0.00265EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/11 1:23 a.m.•66 views

CVE-2026-89092 Stack overflow in nscd due to unbounded alloca use

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

4.2CVSS0.00265EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/11 1:23 a.m.•118 views

CVE-2026-89092

CVE-2026-89092 affects the nscd (Name Service Cache Daemon) service in GNU C Library 2.3.4 and later . The root cause is an unbounded alloca call that triggers a stack overflow when a malicious or compromised DNS server returns an excessively large response to a DNS query. The primary impact is a...

4.2CVSS6.2AI score0.00265EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-46387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,...

7.5CVSS5.9AI score0.00855EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•29 views

PT-2026-89678

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.3.4 and later Description The nscd service in the GNU C Library may experience a stack overflow when processing an oversized response from a malicious DNS server. This occurs when the service handles DNS records large...

4.2CVSS6AI score0.00265EPSS
SaveExploits0References41
Packet Storm News
Packet Storm News
•added 2026/09/11 12:00 a.m.•12 views

Batten the Hatches: Cybersecurity with Military Mariners

Cyberwarfare has become a key component of contemporary geopolitical conflict. However, there has been extremely limited systematic investigation into how cybersecurity is handled by military organizations and personnel. The military context is unique compared to other operational ones, with...

5.7AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/09/11 12:00 a.m.•11 views

Bridging the First-Hour Gap: Evaluating AI Reliability and Benchmarking Deficiencies in Cyber Incident Response for Law Enforcement

The actions of frontline law enforcement officers in the initial hour of a cyber incident play a vital role in determining the ultimate success of an investigation. The minor mistakes they commit might result in irreversible critical impacts. The integrity of the investigation can be compromised,...

5.7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•10 views

CVE-2026-73784: Improper Verification of Cryptographic Signature

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•18 views

PT-2026-89826

libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when...

8.7CVSS5.7AI score0.0063EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•26 views

PT-2026-89796

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS5.7AI score0.00436EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•31 views

PT-2026-89778

🚨 HIGH SEVERITY: CVE-2026-73784 CVSS 8.8 HPE IceWall SAML response tampering vulnerability allows attackers to impersonate users. Network-exploitable with low complexity. Affected: HPE IceWall products Impact: Full compromise C/I/A: High CVE PatchNow https://t.co/BIQ1Jg5WsS...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-45759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Surica...

7.5CVSS5.8AI score0.00836EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•20 views

PT-2026-90459

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists where the nsm sendrecv msg locked function stores the virtqueue used-ring length reported by the NSM device into msg-resp.len without bounding it to the...

7.7CVSS6AI score0.00142EPSS
SaveExploits0
Rows per page
Query Builder