Lucene search
+L

1412 matches found

OSV
OSV
added 2026/02/09 3:16 p.m.5 views

CVE-2025-14831

A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...

5.3CVSS5.7AI score0.00638EPSS
SaveExploits1References5
OSV
OSV
added 2026/02/09 3:16 p.m.3 views

ALPINE-CVE-2025-14831

A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...

5.3CVSS5.5AI score0.00638EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2026/02/09 3:16 p.m.9 views

CVE-2025-14831

A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...

5.3CVSS5.8AI score0.00638EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/09 3:16 p.m.5 views

UBUNTU-CVE-2025-14831

A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...

5.3CVSS7AI score0.00638EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/09 2:51 p.m.8 views

CVE-2025-14831

A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...

5.3CVSS5.4AI score0.00638EPSS
SaveExploits1References28
CVE
CVE
added 2026/02/09 2:51 p.m.86 views

CVE-2025-14831

CVE-2025-14831 concerns GnuTLS. A DoS can occur due to excessive CPU and memory use when processing specially crafted certificates with a large number of name constraints and SANs. According to the sources, the vulnerability affects GnuTLS and has a CVSSv3.1 base score of 5.3 (Network attack vect...

5.3CVSS5.4AI score0.00638EPSS
SaveExploits1References28
Vulnrichment
Vulnrichment
added 2026/02/09 2:51 p.m.3 views

CVE-2025-14831 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...

5.3CVSS5.4AI score0.00638EPSS
SaveExploits1References27
Cvelist
Cvelist
added 2026/02/09 2:51 p.m.46 views

CVE-2025-14831 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...

5.3CVSS0.00638EPSS
SaveExploits1References27
RedhatCVE
RedhatCVE
added 2026/02/09 2:51 p.m.10 views

CVE-2025-14831

A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...

5.3CVSS5.4AI score0.00638EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/02/06 1:30 p.m.10 views

CVE-2026-1319

The Robin Image Optimizer – Unlimited Image Optimization & WebP Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Alternative Text' field of a Media Library image in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output...

6.4CVSS5.6AI score0.00205EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/05 9:15 a.m.10 views

CVE-2026-1319

The Robin Image Optimizer – Unlimited Image Optimization & WebP Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Alternative Text' field of a Media Library image in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output...

6.4CVSS0.00205EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/05 8:25 a.m.28 views

CVE-2026-1319

The CVE concerns the WordPress plugin Robin Image Optimizer – Unlimited Image Optimization & WebP Converter . Affected versions: all up to and including 2.0.2. Issue: Stored Cross-Site Scripting via the Alternative Text field in Media Library images, caused by insufficient input sanitization and ...

6.4CVSS5.6AI score0.00205EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/05 8:25 a.m.6 views

CVE-2026-1319 Robin Image Optimizer <= 2.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Alternative Text Field

The Robin Image Optimizer – Unlimited Image Optimization & WebP Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Alternative Text' field of a Media Library image in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output...

6.4CVSS5.6AI score0.00205EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/05 8:25 a.m.33 views

CVE-2026-1319 Robin Image Optimizer <= 2.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Alternative Text Field

The Robin Image Optimizer – Unlimited Image Optimization & WebP Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Alternative Text' field of a Media Library image in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output...

6.4CVSS0.00205EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.5 views

EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-1169)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of...

8.2CVSS5.8AI score0.01245EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-71180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - counter: interrupt-cnt: Drop IRQFNOTHREAD flag An IRQ handler can either be IRQFNOTHREAD or acquire spinlockt, as CONFIGPROVERAWLOCKNESTING warns:...

5.5CVSS6.7AI score0.00149EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.6 views

EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2026-1118)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of...

8.2CVSS5.8AI score0.01245EPSS
SaveExploits0References5
OSV
OSV
added 2026/01/30 4:25 p.m.4 views

CLEANSTART-2026-RN77098 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.83007EPSS
SaveExploits39References7
OSV
OSV
added 2026/01/30 3:23 p.m.10 views

CLEANSTART-2026-EL98016 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00617EPSS
SaveExploits2References21
OSV
OSV
added 2026/01/30 3:7 p.m.16 views

CLEANSTART-2026-IW06531 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00442EPSS
SaveExploits2References5
Rows per page
Query Builder