Lucene search
+L

618 matches found

RedhatCVE
RedhatCVE
•added 2026/03/09 1:59 p.m.•12 views

CVE-2026-30910

Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows. Combined aead encryption, combined signature creation, and bin2hex functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer...

7.5CVSS6.2AI score0.00338EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•0 views

CVE-2026-30910: Integer Overflow or Wraparound

Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows. Combined aead encryption, combined signature creation, and bin2hex functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer...

7.5CVSS5.9AI score0.00338EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/03/07 6:06 a.m.•433 views

coruna

Coruna The leaked exploit toolkit for various iOS versions. E...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/03/04 12:00 a.m.•13 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005539 advisory. In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection failure in xstcpsetupsocket When using a BPF progr...

5.5CVSS6.7AI score0.00231EPSS
SaveExploits0References3
Apple
Apple
•added 2026/03/04 12:00 a.m.•26 views

Apple Security Update: iOS 18.7.6

Apple recommends to install security update iOS 18.7.6 on devices iPhone XS, iPhone XS Max, iPhone XR...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/02/27 12:16 a.m.•16 views

UBUNTU-CVE-2026-2597

Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function randombytes. The function does not validate that the length parameter is non-negative. If a negative value e.g. -1 is supplied, the expression length + 1u causes an integer wraparound,...

7.5CVSS6AI score0.00525EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•1 views

CVE-2026-2597: Heap-based Buffer Overflow

Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function randombytes. The function does not validate that the length parameter is non-negative. If a negative value e.g. -1 is supplied, the expression length + 1u causes an integer wraparound,...

7.5CVSS6.4AI score0.00525EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/26 11:29 p.m.•36 views

CVE-2026-2597 Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes()

Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function randombytes. The function does not validate that the length parameter is non-negative. If a negative value e.g. -1 is supplied, the expression length + 1u causes an integer wraparound,...

0.00525EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/02/22 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-2597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function randombytes. The function does not validate that...

7.5CVSS6.2AI score0.00525EPSS
SaveExploits0References2
Apple
Apple
•added 2026/01/26 12:00 a.m.•57 views

Apple Security Update: iOS 18.7.4 and iPadOS 18.7.4

Apple recommends to install security update iOS 18.7.4 and iPadOS 18.7.4 on devices iPhone XS, iPhone XS Max, iPhone XR, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and...

5.9AI score
SaveExploits0References1Affected Software2
EUVD
EUVD
•added 2026/01/23 1:13 a.m.•14 views

EUVD-2026-4530

Malicious code in @transaction-list/transaction-list-xs npm...

5.5AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/23 1:13 a.m.•15 views

Malicious code in @transaction-list/transaction-list-xs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a746b479fa4f5cf9daa56d99d4e405c183bae19f055d207078d1c166d76173 The package @transaction-list/transaction-list-xs was found to contain malicious code...

5.4AI score
SaveExploits0
OSV
OSV
•added 2026/01/23 1:13 a.m.•10 views

MAL-2026-476 Malicious code in @transaction-list/transaction-list-xs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a746b479fa4f5cf9daa56d99d4e405c183bae19f055d207078d1c166d76173 The package @transaction-list/transaction-list-xs was found to contain malicious code...

5.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/13 12:00 a.m.•6 views

MiracleLinux 8 : perl-JSON-XS-3.04-4.el8_10 (AXSA:2025-10954:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10954:01 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly...

7.6AI score0.00641EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/13 12:00 a.m.•7 views

MiracleLinux 9 : perl-JSON-XS-4.04-1.el9_6 (AXSA:2025-10955:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10955:02 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly...

7.6AI score0.00641EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/06 1:16 a.m.•31 views

CVE-2025-15444

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium = 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://vulners.com/cve/CVE-2025-69277 . The libsodium...

9.8CVSS0.00266EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/06 12:22 a.m.•5 views

CVE-2025-15444 Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium = 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://vulners.com/cve/CVE-2025-69277 . The libsodium...

6.5AI score0.00266EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•13 views

PT-2026-1359

Name of the Vulnerable Software and Affected Versions Crypt::Sodium::XS versions prior to 0.000042 libsodium versions 1.0.20 and earlier Description The Crypt::Sodium::XS module for Perl includes a vulnerable version of libsodium. libsodium versions up to and including 1.0.20 may improperly handl...

9.8CVSS6.4AI score0.00266EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/06 12:00 a.m.•0 views

CVE-2025-15444: Dependency on Vulnerable Third-Party Component

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium = 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://vulners.com/cve/CVE-2025-69277 . The libsodium...

9.8CVSS5.8AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/30 11:15 p.m.•14 views

CVE-2023-53983

Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms...

9.8CVSS0.00649EPSS
SaveExploits2References6
Rows per page
Query Builder