Lucene search
+L

17316 matches found

RedHat Linux
RedHat Linux
added yesterday3 views

nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling

A flaw was found in Node.js. This vulnerability in the TLS Transport Layer Security hostname handling allows embedded null characters in hostnames. This can lead to silent authority rebinding, potentially enabling an attacker to redirect network traffic to an unintended server and disclose...

9.8CVSS6.5AI score0.00405EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added yesterday3 views

netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

10CVSS5.2AI score0.00224EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added yesterday3 views

axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution

A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle MITM attack. This enables the attacker to intercept, read, and modify all...

8.7CVSS8.1AI score0.01041EPSS
Exploits1References5
NVD
NVD
added yesterday7 views

CVE-2026-16242

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert and without token-based agent authentication, so client certificates were not validated. A remote attacker who can reach the Konnectivity...

9.4CVSS0.00367EPSS
Exploits0References3
Cvelist
Cvelist
added yesterday9 views

CVE-2026-16242 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert and without token-based agent authentication, so client certificates were not validated. A remote attacker who can reach the Konnectivity...

9.4CVSS0.00367EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added yesterday9 views

CVE-2026-16242

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert and without token-based agent authentication, so client certificates were not validated. A remote attacker who can reach the Konnectivity...

9.4CVSS5.3AI score0.00367EPSS
Exploits0References4
EUVD
EUVD
added yesterday7 views

EUVD-2026-45897

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert and without token-based agent authentication, so client certificates were not validated. A remote attacker who can reach the Konnectivity...

9.4CVSS5.3AI score0.00367EPSS
Exploits0References3
CVE
CVE
added yesterday19 views

CVE-2026-16242

The CVE-2026-16242 issue affects the Konnectivity proxy-server used for hosted control planes. The agent-facing listener was started without --cluster-ca-cert and without token-based agent authentication, allowing client certificates not to be validated. A remote attacker who can reach the Konnec...

9.4CVSS5.4AI score0.00367EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-16242

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert and without token-based agent authentication, so client certificates were not validated. A remote attacker who can reach the Konnectivity...

9.4CVSS5.5AI score0.00367EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-64061

A flaw was found in the Linux kernel's network file system netfs. This use-after-free vulnerability occurs when the netfsreadgaps function prematurely releases a memory page during network read operations. A remote attacker could exploit this by sending specially crafted network traffic, leading ...

9.8CVSS5.9AI score0.00168EPSS
Exploits0References4
Nuclei
Nuclei
added yesterday67 views

WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection

WordPress Visitor Statistics Real Time Traffic plugin before 4.8 does not properly sanitize and escape the refUrl in the refDetails AJAX action, which is available to any authenticated user. This could allow users with a role as low as subscriber to perform SQL injection attacks. id: CVE-2021-247...

8.8CVSS8.1AI score0.38298EPSS
Exploits5References5
ATTACKERKB
ATTACKERKB
added 2 days ago4 views

CVE-2026-64175

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware crashes e.g., NMIINTERRUPTUNKNOWN on Intel BE201/Wi-Fi 7, iwlmldnicerror sets mld-fwstatus.inhwrestart to true. However, iwlmldtxfromtxq does not check thi...

5.3AI score0.00162EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2 days ago8 views

CVE-2026-63983

The CVE-2026-63983 entry concerns the Linux kernel net/sched component with netem, where duplicating a packet could cause recursive duplication loops in the qdisc tree, potentially exhausting stack or memory. Root cause: the old duplication guard invalidly zeroed q-&gt;duplicate around re-enqueue...

5.4AI score0.00166EPSS
Exploits0References3
Cvelist
Cvelist
added 2 days ago25 views

CVE-2026-63983 net/sched: fix packet loop on netem when duplicate is on

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix packet loop on netem when duplicate is on When netem duplicates a packet it re-enqueues the copy at the root qdisc. If another netem sits in the tree the copy can be duplicated again, recursing until the stack or...

0.00166EPSS
Exploits0References3
CVE
CVE
added 2 days ago7 views

CVE-2026-63889

The CVE-2026-63889 entry concerns the Linux kernel, specifically the SCSI FC transport (scsi_transport_fc) and a bug in the FPIN pname walker. The issue triggers when an adjacent Fibre Channel fabric actor can deliver an FPIN ELS frame to an lpfc or qla2xxx Linux initiator, potentially causing a ...

8.1CVSS5.4AI score0.00196EPSS
Exploits0References7
Cvelist
Cvelist
added 2 days ago26 views

CVE-2026-63889 scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportfc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS frame to an lpfc or qla2xxx Linux initiator can trigger a non-return in the generic FC transport...

8.1CVSS0.00196EPSS
Exploits0References7
OSV
OSV
added 2 days ago3 views

CVE-2026-63889 scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportfc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS frame to an lpfc or qla2xxx Linux initiator can trigger a non-return in the generic FC transport...

8.1CVSS5.3AI score0.00196EPSS
Exploits0References10
NVD
NVD
added 3 days ago10 views

CVE-2026-59173

Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.1.13, from 10.0.0 through 10.1.2. Users are recommended to upgrade to version 9.1.14 or 10.1.3, which fixes the issue...

7.5CVSS0.00225EPSS
Exploits0References2
CVE
CVE
added 3 days ago17 views

CVE-2026-59173

CVE-2026-59173 is an Uncontrolled Resource Consumption (DoS) vulnerability in Apache Traffic Server. Affected: versions 9.0.0–9.1.13 and 10.0.0–10.1.2. Root cause and impact: unresolved resource exhaustion potentially affecting service availability. Remediation: upgrade to 9.1.14 or 10.1.3, which...

7.5CVSS5.3AI score0.00225EPSS
Exploits0References2
Cvelist
Cvelist
added 3 days ago38 views

CVE-2026-59173 Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions

Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.1.13, from 10.0.0 through 10.1.2. Users are recommended to upgrade to version 9.1.14 or 10.1.3, which fixes the issue...

0.00225EPSS
Exploits0References1
Rows per page
Query Builder