Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/09/24 8:15 a.m.•5 views

CVE-2026-97152

A flaw was found in Nanomsg. A remote attacker could exploit a buffer overflow vulnerability in the WebSocket transport by sending a specially crafted Sec-WebSocket-Version header. This issue arises from an unchecked copy operation using snprintf. Successful exploitation of this flaw could lead t...

8.6CVSS6.6AI score0.00313EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 4:18 a.m.•8 views

CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS0.00313EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/24 4:18 a.m.•5 views

DEBIAN-CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS6AI score0.00313EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/24 3:17 a.m.•8 views

CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS6AI score0.00313EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/24 3:17 a.m.•4 views

CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS6AI score
SaveExploits0References6
CVE
CVE
•added 2026/09/24 3:17 a.m.•12 views

CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 are vulnerable to a remotely exploitable buffer overflow within the WebSocket transport . The root cause is an unchecked copy of the Sec-WebSocket-Version header performed via snprintf . This vulnerability could allow for remote exploitation. Rem...

8.6CVSS6AI score0.00313EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/24 3:17 a.m.•24 views

CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS0.00313EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 3:17 a.m.•8 views

EUVD-2026-85784

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS6AI score0.00313EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/24 12:00 a.m.•2 views

UBUNTU-CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS6AI score0.00313EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/09/24 12:00 a.m.•5 views

CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

8.6CVSS6AI score0.00313EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2026-97152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the...

8.6CVSS6.1AI score0.00313EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•1 views

CVE-2026-59898: Inconsistent Interpretation of HTTP Requests

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...

7.5CVSS5.7AI score0.00439EPSS
SaveExploits0References3
Rows per page
Query Builder