42358 matches found
CVE-2026-33845
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service...
CVE-2026-42009
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...
Exploit for CVE-2026-31431
Copy Fail CVE-2026-31431 – Exploit Usage Guide ⚠️ Discla...
CVE-2026-32936 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, juicefs, k8sgateway, kubernetes-dns-node-cache-fips, eks-distro, kubernetes-dns-node-cache, k8sgateway-fips...
GHSA-63CW-R7XF-JMWR vulnerabilities
Vulnerabilities for packages: eks-distro-fips, juicefs, k8sgateway, kubernetes-dns-node-cache-fips, eks-distro, kubernetes-dns-node-cache, k8sgateway-fips...
CVE-2026-39706
Missing Authorization vulnerability in Netro Systems Make My Trivia trivialy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Make My Trivia: from n/a through = 1.1.0...
MAL-2026-3169 Malicious code in frank-newton3-db-final (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a69c1c519dbe289ed217a75f1a31ace9b850acdb7df6cdadd95ca68f879f1d The package frank-newton3-db-final was found to contain malicious code. Source: ghsa-malware...
MAL-2026-3164 Malicious code in chai-as-char (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beb7aa3057c2e6c31e9bb9074f8ac71d5b2ad3a9f65761c0131816ab4bdb8df The package chai-as-char was found to contain malicious code. Source: ghsa-malware e12e1d019bed1dd99212206b54a611003e75acc13943eb13c8ab63cd388adc83 A...
CVE-2026-40684
In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...
CVE-2026-6921 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6919 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6921 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6919 vulnerabilities
Vulnerabilities for packages: chromium...
gdb: Fix of CVE-2019-1010180
CVE-2019-1010180: add warning for corrupt ELF section size larger than file...
GHSA-FH64-R2VC-XVHR vulnerabilities
Vulnerabilities for packages: mlflow...
CVE-2026-6752 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
GHSA-H3RR-2Q6V-G8RC vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-6757 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...