Lucene search
+L

3554 matches found

NVD
NVD
•added 2026/04/21 1:16 a.m.•30 views

CVE-2026-39320

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.25.0 are vulnerable to an unauthenticated Regular Expression Denial of Service ReDoS attack within the WebSocket subscription handling logic. By injecting unescaped regex metacharacters into the...

7.5CVSS0.00655EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/04/21 12:07 a.m.•52 views

CVE-2026-39320 Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.25.0 are vulnerable to an unauthenticated Regular Expression Denial of Service ReDoS attack within the WebSocket subscription handling logic. By injecting unescaped regex metacharacters into the...

7.5CVSS0.00655EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/04/21 12:07 a.m.•14 views

CVE-2026-39320 Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.25.0 are vulnerable to an unauthenticated Regular Expression Denial of Service ReDoS attack within the WebSocket subscription handling logic. By injecting unescaped regex metacharacters into the...

7.5CVSS5.8AI score0.00655EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/04/21 12:07 a.m.•19 views

CVE-2026-39320

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.25.0 are vulnerable to an unauthenticated Regular Expression Denial of Service ReDoS attack within the WebSocket subscription handling logic. By injecting unescaped regex metacharacters into the...

7.5CVSS5.8AI score0.00655EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/04/21 12:07 a.m.•59 views

CVE-2026-39320

The Signal K Server CVE-2026-39320 affects versions prior to 2.25.0, where an unauthenticated Regular Expression Denial of Service (ReDoS) can be triggered via WebSocket subscription handling. The root cause is injection of unescaped regex metacharacters into the context parameter of a stream sub...

7.5CVSS5.8AI score0.00655EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2026/04/21 12:07 a.m.•22 views

CVE-2026-39320 Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.25.0 are vulnerable to an unauthenticated Regular Expression Denial of Service ReDoS attack within the WebSocket subscription handling logic. By injecting unescaped regex metacharacters into the...

7.5CVSS5.9AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/21 12:00 a.m.•28 views

Oracle Life Sciences Empirica Signal security vulnerability

Oracle Life Sciences Empirica Signal is a drug safety signal detection platform developed by Oracle Corporation. Versions 9.2.1 to 9.2.3 of Oracle Life Sciences Empirica Signal contain security vulnerabilities. These vulnerabilities stem from issues with the Common Core component, allowing...

8.5CVSS7.7AI score0.00202EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/04/21 12:00 a.m.•17 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-010782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010782 advisory. In the Linux kernel, the following vulnerability has been resolved: seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in...

5.8AI score0.00244EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/21 12:00 a.m.•8 views

CVE-2026-39320: Uncontrolled Resource Consumption

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.25.0 are vulnerable to an unauthenticated Regular Expression Denial of Service ReDoS attack within the WebSocket subscription handling logic. By injecting unescaped regex metacharacters into the...

7.5CVSS5.8AI score0.00655EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/04/21 12:00 a.m.•36 views

PT-2026-34067

Name of the Vulnerable Software and Affected Versions Oracle Life Sciences Empirica Signal versions 9.2.1 through 9.2.3 Description An issue in the Common Core component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

8.5CVSS7.2AI score0.00202EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/21 12:00 a.m.•30 views

PT-2026-33877

Name of the Vulnerable Software and Affected Versions Signal K Server versions prior to 2.25.0 Description An unauthenticated Regular Expression Denial of Service ReDoS exists within the WebSocket subscription handling logic. By injecting unescaped regex metacharacters into the context parameter ...

7.5CVSS5.9AI score0.00655EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/21 12:00 a.m.•9 views

CVE-2026-21997: Improper Access Control

Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications component: Common Core. Supported versions that are affected are 9.2.1-9.2.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Lif...

8.5CVSS7.3AI score0.00202EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/21 12:00 a.m.•32 views

Signal K Server security vulnerability

The Signal K Server is an open-source marine central server developed by Signal K. Versions of the Signal K Server prior to 2.25.0 contained a security vulnerability. This vulnerability stemmed from improper validation of the context parameter in the WebSocket subscription processing logic, which...

7.5CVSS5.9AI score0.00655EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•11 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007539 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hung when signal interrupts nbdstartdeviceioctl syzbot reported hung task 1. The followi...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/16 12:31 p.m.•20 views

EUVD-2026-23219

The OneSignal – Web Push Notifications plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

3.1CVSS5.9AI score0.00284EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/16 9:31 a.m.•26 views

EUVD-2026-23213

Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service...

7.1CVSS5.8AI score0.00386EPSS
SaveExploits0References13
Rapid7 Blog
Rapid7 Blog
•added 2026/04/14 12:31 p.m.•26 views

Your Cloud Detection Strategy in 2026: What to Expect at the Global Cybersecurity Summit

Cloud environments have changed how security teams detect and respond to threats. Signals come from more places, identities are harder to track, and attacks rarely stay within a single system. For many teams, the challenge is no longer visibility. It is having the risk context to understand what...

5.8AI score
SaveExploits0
Fedora
Fedora
•added 2026/04/13 9:07 p.m.•21 views

[SECURITY] Fedora 44 Update: siril-1.4.2-3.fc44

Siril is an image processing tool specially tailored for noise reduction and improving the signal/noise ratio of an image from multiple captures, as required in astronomy. Siril can align automatically or manually, stack and enhance pictures from various file formats, even images sequences movies...

9.8CVSS5.7AI score0.0098EPSS
SaveExploits3
HackRead
HackRead
•added 2026/04/13 3:20 p.m.•34 views

BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware

BITTER APT spreads ProSpy and ToSpy via Signal, Google, and Zoom lures, targeting journalists through LinkedIn and iMessage spearphishing...

5.8AI score
SaveExploits0
HackRead
HackRead
•added 2026/04/11 4:04 p.m.•59 views

FBI Recovers Deleted Signal Messages Through iPhone Notifications

Signal messages may persist in iPhone notification data, enabling FBI access even after deletion, a court case reveals...

5.8AI score
SaveExploits0
Rows per page
Query Builder