Lucene search
K

858 matches found

EUVD
EUVD
added 2026/04/17 11:51 p.m.4 views

EUVD-2026-23603

The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the sysint syscall familly. Prior to version 0.4.7, this can lead to DoS and...

5.1CVSS5.8AI score0.00155EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/17 11:51 p.m.4 views

CVE-2026-40337

The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the sysint syscall familly. Prior to version 0.4.7, this can lead to DoS and...

5.1CVSS5.8AI score0.00155EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/17 11:51 p.m.2 views

CVE-2026-40337 Sentry kernel has incomplete ownership check for IRQ line manipulation

The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the sysint syscall familly. Prior to version 0.4.7, this can lead to DoS and...

5.1CVSS5.8AI score0.00155EPSS
Exploits0References3
OSV
OSV
added 2026/04/17 9:25 p.m.4 views

GHSA-GGMG-CQG6-J45G Sentry: Improper authentication on SAML SSO process allows user identity linking

Impact A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same...

9.1CVSS5.8AI score0.00435EPSS
Exploits0References4
Chainguard
Chainguard
added 2026/04/17 7:17 p.m.5 views

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: atuin, linkerd2-cni-plugin, berg, wasm-pack, zellij, buck2, wasmtime, sccache, samply, mise, linkerd2-proxy, qdrant, kdash, parseable, fnm, tealdeer, linkerd-extension-init, garage, ntpd-rs, wasmcloud, ztunnel-fips, zola, zizmor, sqlx, rye, asciinema, py3-xet-core,...

5.8AI score
Exploits0
Chainguard
Chainguard
added 2026/04/17 7:17 p.m.3 views

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: atuin, linkerd2-cni-plugin, berg, wasm-pack, zellij, buck2, wasmtime, sccache, samply, mise, linkerd2-proxy, qdrant, kdash, parseable, fnm, tealdeer, linkerd-extension-init, garage, ntpd-rs, wasmcloud, ztunnel-fips, zola, zizmor, sqlx, rye, asciinema, py3-xet-core,...

5.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.5 views

PT-2026-33535

The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the sys int syscall familly. Prior to version 0.4.7, this can lead to DoS and...

5.1CVSS5.8AI score0.00155EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.10 views

NI LabVIEW < 2023 Q3 Patch 9 / 2024.x < 2024 Q3 Patch 6 / 2025.x < 2025 Q3 Patch 4 / 2026.x < 2026 Q1 Patch 1 Multiple Memory Corruption Vulnerabilities

The version of National Instruments NI LabVIEW installed on the remote Windows host is affected by multiple memory corruption vulnerabilities that may result in information disclosure or arbitrary code execution, including the following: - There is an out-of-bounds read vulnerability in...

8.5CVSS7.4AI score0.0022EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2026/04/11 12:1 a.m.6 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-sentry-sdk: python3-sentry-sdk+aiohttp-2.48.0-4.1.hum1 noarch python3-sentry-sdk+asyncpg-2.48.0-4.1.hum1 noarch python3-sentry-sdk+bottle-2.48.0-4.1.hum1 noarch...

8.9CVSS5AI score0.00367EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/07 7:53 p.m.16 views

CVE-2026-32863 Out-of-Bounds Read in sentry_transaction_context_set_operation()

There is a memory corruption vulnerability due to an out-of-bounds read in sentrytransactioncontextsetoperation in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafte...

8.5CVSS0.00193EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/27 2:26 p.m.4 views

CVE-2021-27184

Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability exploitable via the DTD parameter entities technique, resulting in disclosure and retrieval of arbitrary data on the affected node via an out-of-band OOB attack. The vulnerability is triggered when input passed to...

7.5CVSS7AI score0.01594EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/27 2:26 p.m.3 views

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

8.8CVSS7.6AI score0.01738EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:6 p.m.3 views

CVE-2026-26004

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

7.1CVSS5.8AI score0.00241EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2026/03/18 12:42 a.m.2 views

cbs-sentry-dingding (=1.0.24), cbs-sentry-qyweixin (=1.0.1) +47 more potentially affected by CVE-2026-26004 via sentry (=20.8.0)

sentry PYPI version =20.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry and may be impacted: - cbs-sentry-dingding =1.0.24 - cbs-sentry-qyweixin =1.0.1 - csnp =0.0.5, =1.0.0, =0.2.4, =1.0.0, =0.1.0, =0.4.0, =0.1.0, =0.2.0 and more Source cve...

7.1CVSS5.8AI score0.00241EPSS
Exploits1
NVD
NVD
added 2026/03/18 12:16 a.m.3 views

CVE-2026-26004

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

7.1CVSS0.00241EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.4 views

Sentry 安全漏洞

Sentry is an open-source error tracking and performance monitoring platform for developers. Versions of Sentry prior to 26.1.0 contained a security vulnerability, which stemmed from an insecure direct object reference in the GroupEventJsonView endpoint across organizations...

7.1CVSS5.8AI score0.00241EPSS
Exploits1References3
OSV
OSV
added 2026/03/17 11:21 p.m.3 views

CVE-2026-26004 Sentry allows unauthorized access to event data across organizational boundaries

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

7.1CVSS5.9AI score0.00241EPSS
Exploits1References5
EUVD
EUVD
added 2026/03/17 11:21 p.m.2 views

EUVD-2026-12673

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

7.1CVSS5.8AI score0.00241EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/17 11:21 p.m.3 views

CVE-2026-26004

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

7.1CVSS5.8AI score0.00241EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/03/17 11:21 p.m.34 views

CVE-2026-26004 Sentry allows unauthorized access to event data across organizational boundaries

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

7.1CVSS0.00241EPSS
Exploits1References3
Rows per page
Query Builder