Lucene search
+L

554862 matches found

RedHat Linux
RedHat Linux
added 4 days ago7 views

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

7.5CVSS7.5AI score0.00591EPSS
SaveExploits0References8
Securelist
Securelist
added 4 days ago11 views

Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

Project CAV3RN is a modular espionage framework used against targets in Israel. This report expands on two earlier publications: the first was published in June 2026 as part of our Kaspersky Threat Intelligence Reporting service, and the second was published on Securelist the following month,...

5.8AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 4 days ago15 views

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1x) is affected by multiple critical vulnerabilities in OpenSSL, Java SE, and Jetty

Summary IBM Cloud Pak for Data System 1x uses OpenSSL, Java SE, and Eclipse Jetty to provide cryptographic, runtime, and web application server functionality. This security update addresses multiple critical vulnerabilities affecting these components, including ASN.1 decoding flaws, CMS/PKCS7...

9.1CVSS8AI score0.01165EPSS
SaveExploits1Affected Software1
NVD
NVD
added 4 days ago6 views

CVE-2026-73161

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

5.1CVSS0.00247EPSS
SaveExploits0References1
OSV
OSV
added 4 days ago4 views

DEBIAN-CVE-2026-71218

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

5.3CVSS5.4AI score0.00383EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago7 views

CVE-2026-71218

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

5.3CVSS0.00383EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 4 days ago5 views

CVE-2026-73161 cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

5.1CVSS5.4AI score0.00247EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago7 views

EUVD-2026-55993

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

5.1CVSS5.4AI score0.00247EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago6 views

CVE-2026-73161

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

5.1CVSS5.4AI score0.00247EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago36 views

CVE-2026-73161 cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

5.1CVSS0.00247EPSS
SaveExploits0References1
OSV
OSV
added 4 days ago4 views

CVE-2026-73161 cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

5.1CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 4 days ago29 views

CVE-2026-73161

CVE-2026-73161 affects certain versions of cti-transmute where the highlight() function mishandled conversion-table values passed to the search highlighting feature. The original implementation could return raw text when no query was supplied or perform a regex replace that inserted tags without...

5.1CVSS5.4AI score0.00247EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 4 days ago5 views

CVE-2026-68359

A flaw was found in the Linux kernel's hwmon nzxt-smart2 component. A race condition exists when the hidhwstop function is called without first stopping device input/output IO. If a device probe operation fails after IO has been initiated, this race condition can lead to a use-after-free UAF...

5.7AI score0.00225EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 4 days ago5 views

CVE-2026-68313

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. A vulnerability in the tipcnlcompatdumpit function can lead to an infinite loop if a callback returns a negative error code. This prevents the release of a critical system lock, causing other processes to...

5.5CVSS5.4AI score0.002EPSS
SaveExploits0References4
EUVD
EUVD
added 4 days ago8 views

EUVD-2026-55991

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

5.3CVSS5.4AI score0.00383EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago39 views

CVE-2026-71218

CVE-2026-71218 in iperf3 involves a flaw in the JSON_read() function where a peer-controlled message length is accepted and memory is allocated without an upper bound. This can cause excessive memory consumption, leading to DoS via memory exhaustion, severe slowdown, or service termination. The i...

5.3CVSS5.4AI score0.00383EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 4 days ago6 views

CVE-2026-71218

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

5.3CVSS5.4AI score0.00383EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 4 days ago5 views

CVE-2026-71218 Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

5.3CVSS5.4AI score0.00383EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago36 views

CVE-2026-71218 Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

5.3CVSS0.00383EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago3 views

CVE-2026-71218 Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion

A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message length and allocates memory without an upper bound. This allows the attacker to trigger excessive memory consumption, leading to a Denial of...

5.3CVSS5.4AI score
SaveExploits0References6
Rows per page
Query Builder