Lucene search
+L

10452 matches found

Github Security Blog
Github Security Blog
•added 2026/01/21 10:52 p.m.•23 views

Triton VM has a Soundness Vulnerability due to Improper Sampling of Randomness

In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol. Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness. Protocols that rely on proofs and the supplied...

5.7AI score
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/21 10:25 p.m.•23 views

CVE-2026-21963

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

6CVSS6.5AI score0.00272EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/21 10:24 p.m.•19 views

CVE-2026-21975

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.29 and 21.3-21.20. Easily exploitable vulnerability allows high privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise Java VM...

4.5CVSS5.3AI score0.00251EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/21 10:24 p.m.•20 views

CVE-2026-21987

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

8.2CVSS7.1AI score0.00216EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/21 10:24 p.m.•17 views

CVE-2026-21986

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

7.1CVSS6.9AI score0.00206EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/21 10:24 p.m.•18 views

CVE-2026-21955

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

8.2CVSS7.1AI score0.003EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/01/21 1:39 p.m.•23 views

openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17...

6.1CVSS5.6AI score0.00304EPSS
SaveExploits1References5
RustSec
RustSec
•added 2026/01/21 12:00 p.m.•43 views

Triton VM Soundness Vulnerability due to Improper Sampling of Randomness

In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol. Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness. Protocols that rely on proofs and the supplied...

5.7AI score
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/01/21 12:31 a.m.•36 views

EUVD-2026-3549

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

6CVSS6.5AI score0.00272EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/21 12:31 a.m.•25 views

EUVD-2026-3525

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

8.2CVSS7.1AI score0.00216EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/21 12:31 a.m.•23 views

EUVD-2026-3555

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

8.2CVSS7.1AI score0.003EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/21 12:31 a.m.•23 views

EUVD-2026-3531

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

4.6CVSS6.1AI score0.00137EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/21 12:31 a.m.•22 views

EUVD-2026-3556

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

8.2CVSS7.1AI score0.003EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•2 views

PT-2026-5547

In affected versions of Triton VM, the verifier failed to correctly sample randomness in the FRI sub-protocol. Malicious provers can exploit this to craft proofs for arbitrary statements that this verifier accepts as valid, undermining soundness. Protocols that rely on proofs and the supplied...

5.9AI score
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2026/01/21 12:00 a.m.•16 views

Security update of open-vm-tools (important)

openSUSE security update: security update of open-vm-tools ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20067-1 Rating: important References: bsc1250373 bsc1250692 Cross-References: CVE-2025-41244 CVSS scores: CVE-2025-41244 SUSE : 7.8...

8.5CVSS7.3AI score0.08438EPSS
SaveExploits3References2
OSV
OSV
•added 2026/01/20 10:16 p.m.•18 views

CVE-2026-21989

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

8.1CVSS7AI score0.00212EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/20 10:16 p.m.•20 views

CVE-2026-21985

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

6CVSS6.5AI score0.00268EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/20 10:16 p.m.•24 views

CVE-2026-21990

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

8.2CVSS7.1AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/20 10:16 p.m.•19 views

CVE-2026-21986

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

7.1CVSS6.9AI score0.00206EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/20 10:16 p.m.•21 views

CVE-2026-21985

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

6CVSS0.00268EPSS
SaveExploits0References1
Rows per page
Query Builder