Lucene search
+L

21147 matches found

Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.12 views

PT-2026-37167

Name of the Vulnerable Software and Affected Versions wlc versions prior to 2.0.0 Description The HTML output format embeds API response data into HTML without proper escaping. This allows for cross-site scripting XSS, a technique where malicious scripts are injected into trusted websites, when t...

5.1CVSS5.6AI score0.00174EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.21 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fact that the rxgkverifyresponse function does not clean up the created rxgk contexts, leadin...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.15 views

Axios 安全漏洞

Axios is an open-source HTTP client developed by Axios. Versions of Axios from 1.0.0 to 1.15.2 had security vulnerabilities. These vulnerabilities stemmed from the use of the transformResponse function during JSON parsing, where the parseReviver function from the merge configuration object was...

9.1CVSS5.8AI score0.00586EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.14 views

Axios 安全漏洞

Axios is an open-source HTTP client developed by Axios. Versions prior to Axios 1.15.1 and 0.31.1 contain security vulnerabilities. These vulnerabilities arise from using responseType set to stream, causing Axios to return response streams without enforcing maxContentLength, thereby bypassing the...

5.3CVSS5.8AI score0.00421EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.12 views

PT-2026-34985

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the rxgk verify response function. This occurs because token len is rounded up before being checked, which allows the length check to be bypassed...

9.8CVSS7.6AI score0.00469EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.23 views

PT-2026-35046

Name of the Vulnerable Software and Affected Versions Axios versions prior to 1.15.1 Axios versions prior to 0.31.1 Description When the responseType variable is set to 'stream', the software returns the response stream without enforcing maxContentLength. This allows unbounded downstream...

5.3CVSS5.8AI score0.00421EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.15 views

PT-2026-34989

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The rxkad decrypt ticket function decrypts the RXKAD response ticket but parses the buffer as plaintext without verifying if the crypto skcipher decrypt operation was successful. A...

9.8CVSS5.9AI score0.00514EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.10 views

PT-2026-34984

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of rxgk context in rxgk verify response Fix rxgk verify response to clean up the rxgk context it creates...

5.3AI score0.00121EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.17 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the logic reversal in the length check for the RESPONSE verifier in the rxgkverifyresponse...

7.5CVSS6AI score0.00817EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.10 views

PT-2026-34988

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the rxrpc component. The function rxgk verify authenticator copies auth len bytes into a temporary buffer and passes the parser limit to rxgk do verify...

9.1CVSS7.4AI score0.00442EPSS
SaveExploits0References61
Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.14 views

PT-2026-35042

Name of the Vulnerable Software and Affected Versions Axios versions prior to 0.31.1 Axios versions prior to 1.15.1 Description An issue exists where the software reads keys from Object.prototype without a hasOwnProperty guard. If a co-dependency pollutes the Object.prototype, an attacker can...

7.4CVSS5.8AI score0.00808EPSS
SaveExploits1References269
OSV
OSV
added 2026/04/23 9:44 p.m.24 views

GHSA-28XM-PRXC-5866 OpenTelemetry.Sampler.AWS & OpenTelemetry.Resources.AWS have unbounded HTTP response body reads

Summary OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. OpenTelemetry.Resources.AWS reads unbounded HTTP response bodies from a configured AWS EC2/ECS/EKS remote instance metadata service endpoint into memory. Both o...

5.9CVSS5.8AI score0.00301EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/04/23 9:26 p.m.17 views

OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies

Summary When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol format OTLP, if the request results in a unsuccessful request i.e. HTTP 4xx or 5xx, the response is read into memory with no upper-bound on the number of bytes consumed. This could cause memory...

5.9CVSS5.8AI score0.00304EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/04/23 9:26 p.m.32 views

GHSA-Q834-8QMM-V933 OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies

Summary When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol format OTLP, if the request results in a unsuccessful request i.e. HTTP 4xx or 5xx, the response is read into memory with no upper-bound on the number of bytes consumed. This could cause memory...

5.3CVSS5.8AI score0.00304EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/23 6:22 p.m.43 views

CVE-2026-41173 Unbounded HTTP response body read in OpenTelemetry.Sampler.AWS

The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. AWSXRaySamplerClient.DoRequestAsyn...

5.9CVSS0.00301EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/23 6:22 p.m.5 views

CVE-2026-41173

The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. AWSXRaySamplerClient.DoRequestAsyn...

5.9CVSS5.8AI score0.00301EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/04/23 6:22 p.m.20 views

CVE-2026-41173

OpenTelemetry.Sampler.AWS is affected by an unbounded HTTP response body read in the AWS X-Ray remote sampler prior to 0.1.0-alpha.8. The AWSXRaySamplerClient.DoRequestAsync call reads the entire HTTP response into memory (ReadAsStringAsync) without size limits, enabling an attacker controlling o...

5.9CVSS5.8AI score0.00301EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/23 5:51 p.m.6 views

CVE-2026-40182

OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol format OTLP, if the request results in a unsuccessful request i.e. HTTP 4xx or 5xx, the response is read into memory...

5.3CVSS5.8AI score0.00304EPSS
SaveExploits0References5Affected Software1
SUSE CVE
SUSE CVE
added 2026/04/23 1:24 a.m.12 views

SUSE CVE-2026-33259

Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor. Normally concurrent transfers of the same RPZ zone can only occur with a malfunctioning RPZ provider...

5CVSS5.8AI score0.00225EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/04/23 1:24 a.m.13 views

SUSE CVE-2026-33600

An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service...

4.4CVSS5.8AI score0.00523EPSS
SaveExploits0References3
Rows per page
Query Builder