Lucene search
K

1248 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001998 advisory. net/sctp/smsideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a...

6.2CVSS6.7AI score0.00121EPSS
Exploits0References28
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.0 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002915 advisory. The hashaccept function in crypto/algifhash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service OOPS by attempting to trigger use of...

5.5CVSS6.5AI score0.00034EPSS
Exploits0References12
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002240 advisory. net/sctp/smsideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a...

6.2CVSS6.7AI score0.00121EPSS
Exploits0References28
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.0 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002659)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002659 advisory. The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or...

7.8CVSS6.6AI score0.00403EPSS
Exploits5References12
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003392 advisory. The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or...

7.8CVSS6.6AI score0.00403EPSS
Exploits5References12
NVD
NVD
added 2026/01/13 4:16 p.m.4 views

CVE-2025-71093

In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000tbishouldaccept In e1000tbishouldaccept we read the last byte of the frame via 'datalength - 1' to evaluate the TBI workaround. If the descriptor- reported length is zero or larger than the actual RX buffer...

7.1CVSS0.00023EPSS
Exploits0References7
CVE
CVE
added 2026/01/13 3:34 p.m.9 views

CVE-2025-71093

Technical details for CVE-2025-71093 are not provided in the connected documents. The Initial Description mentions an OOB read in e1000_tbi_should_accept() and a fix. Monitor for updates.

7.1CVSS6AI score0.00023EPSS
Exploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/13 3:34 p.m.2 views

CVE-2025-71093

In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000tbishouldaccept In e1000tbishouldaccept we read the last byte of the frame via 'datalength - 1' to evaluate the TBI workaround. If the descriptor- reported length is zero or larger than the actual RX buffer...

5.3AI score0.00023EPSS
Exploits0References8Affected Software1
Huntr
Huntr
added 2026/01/13 3:32 a.m.5 views

Integer Overflow lead to DOS in handling Accept-Encoding header in API /v2/models/<model-name>/generate

This report is not public...

5.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/09 9:3 a.m.15 views

CVE-2024-39316

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.5, Regular Expression Denial of Service ReDoS vulnerability exists in the Rack::Request::Helpers module when parsing HTTP Accept headers. This vulnerability can be exploited by an attacker sending...

7.5CVSS6.8AI score0.00833EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:41 a.m.8 views

CVE-1999-0396

A race condition between the select and accept calls in NetBSD TCP servers allows remote attackers to cause a denial of service...

2.6CVSS7AI score0.00655EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:19 a.m.2 views

CVE-2024-2233

The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. These include declining and accepting group invitations or leaving a group...

6.3CVSS6.7AI score0.0009EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2026/01/07 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-000163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000163 advisory. In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. Th...

7.5CVSS6.8AI score0.05085EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-29141

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.2 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A double-free issue exists in the kerberos AcceptSecurityContext and kerberos InitializeSecurityContextA functions WinPR,...

7.1CVSS4.5AI score0.00132EPSS
Exploits1References23
EUVD
EUVD
added 2025/12/24 3:30 p.m.0 views

EUVD-2025-205233

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Scott Paterson Accept Donations with PayPal easy-paypal-donation allows Phishing.This issue affects Accept Donations with PayPal: from n/a through = 1.5.1...

6.1CVSS6.3AI score0.00128EPSS
Exploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.3 views

CVE-2025-68602

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Phishing.This issue affects Accept Donations with PayPal & Stripe: from n/a through = 1.5.2...

4.7CVSS0.00128EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.28 views

CVE-2025-68602 WordPress Accept Donations with PayPal plugin <= 1.5.2 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Phishing.This issue affects Accept Donations with PayPal & Stripe: from n/a through = 1.5.2...

4.7CVSS0.00128EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.3 views

WordPress plugin Accept Donations with PayPal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.7CVSS6.5AI score0.00128EPSS
Exploits0References1
Hacker One
Hacker One
added 2025/12/22 5:49 a.m.12 views

curl: libcurl WebSocket handshake accepts any Sec-WebSocket-Accept

Summary: libcurl upgrades to WebSocket without validating Sec-WebSocket-Accept, allowing a spoofed 101 response to complete the handshake and inject frames; AI assistance was used to draft this report. Steps to Reproduce: 1. Clone and build curl from source: git clone --depth=1...

7.2AI score
Exploits0
NVD
NVD
added 2025/12/16 3:15 p.m.3 views

CVE-2025-68246

In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connection limit is exceeded in ksmbdkthreadfn, the code sets ret = -EAGAIN and continues the accept loop without closing the just-accepted socket...

0.00043EPSS
Exploits0References5
Rows per page
Query Builder