Lucene search
+L

138 matches found

Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.16 views

PT-2026-45025

Name of the Vulnerable Software and Affected Versions zeroconf versions prior to 0.149.6 Description An unauthenticated host on the local link can cause excessive memory growth by sending malformed packets to UDP port 5353. The DNSIncoming. log exception debug function and QuietLogger...

6.5CVSS6.1AI score0.00241EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.25 views

PT-2026-45026

Name of the Vulnerable Software and Affected Versions zeroconf versions prior to 0.149.6 Description An unauthenticated host on the local link can send multicast mDNS responses with unique names to the DNSCache. async add function, causing records to accumulate in cache, expirations, expire heap,...

6.5CVSS6.1AI score0.00241EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.23 views

PT-2026-45024

Name of the Vulnerable Software and Affected Versions zeroconf versions prior to 0.149.5 Description An unauthenticated host on the local link can degrade the mDNS listener by sending a specially crafted mDNS packet. The DNSIncoming. decode labels at offset function recurses for each DNS-name...

6.5CVSS6.1AI score0.0023EPSS
SaveExploits0References22
Fedora
Fedora
added 2026/04/16 11:42 p.m.13 views

[SECURITY] Fedora 44 Update: kf6-kdnssd-6.25.0-1.fc44

KDE Frameworks 6 Tier 1 integration module for DNS-SD services Zeroconf...

5.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/03/20 12:24 a.m.7 views

SUSE CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References3
NVD
NVD
added 2026/03/18 6:16 p.m.9 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS0.00282EPSS
SaveExploits1References3
OSV
OSV
added 2026/03/18 6:16 p.m.9 views

PYSEC-2026-2172

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS6.6AI score0.00282EPSS
SaveExploits1References3
OSV
OSV
added 2026/03/18 6:16 p.m.23 views

UBUNTU-CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2026/03/18 6:16 p.m.10 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/18 5:55 p.m.11 views

CVE-2026-32634 Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.9AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2026/03/18 5:55 p.m.10 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References3
CVE
CVE
added 2026/03/18 5:55 p.m.40 views

CVE-2026-32634

Glances Central Browser mode vulnerability (CVE-2026-32634): prior to 4.5.2, Zeroconf advertising can mislead the browser into using an untrusted server name to create connection URIs, and to look up saved passwords. If a dynamic server reports itself as protected, the untrusted name is also used...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/18 5:55 p.m.4 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-32634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised...

8.1CVSS6AI score0.00282EPSS
SaveExploits1References3
OSV
OSV
added 2026/03/16 4:36 p.m.8 views

GHSA-VX5F-957P-QPVM Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Summary In Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead of the discovered IP. When a dynamic server reports itself as protected, Glances...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/03/16 4:36 p.m.16 views

Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Summary In Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead of the discovered IP. When a dynamic server reports itself as protected, Glances...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-25821

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.2 Description Glances, a system cross-platform monitoring tool, contains a flaw in Central Browser mode. The software stores both the Zeroconf-advertised server name and the discovered IP address for dynamic...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References28
Debian
Debian
added 2023/06/21 10:49 p.m.45 views

[SECURITY] [DLA 3466-1] avahi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3466-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès June 21, 2023 https://wiki.debian.org/LTS -...

5.5CVSS5.9AI score0.00453EPSS
SaveExploits0
AlmaLinux
AlmaLinux
added 2021/09/21 7:13 a.m.17 views

pcp bug fix and enhancement update

Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Bug Fixes and...

2.7AI score
SaveExploits0
Fedora
Fedora
added 2021/08/19 1:11 a.m.49 views

[SECURITY] Fedora 33 Update: avahi-0.8-14.fc33

Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is alread...

1.7AI score
SaveExploits0
Rows per page
Query Builder