Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2026/08/26 2:36 p.m.•42 views

CVE-2026-74752 sctp: validate cookie AUTH state before use

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...

9.8CVSS6.1AI score0.00524EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2026/07/20 5:51 p.m.•24 views

NPM: Axios: Prototype pollution auth subfields can inject Basic auth

NPM: Axios: Prototype pollution auth subfields can inject Basic auth vulnerability discovered by ? in WordPress Npm axios versions = 1.15.2, 1.18.0...

5.3AI score
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2014/07/06 12:00 a.m.•26 views

PT-2014-2043 · Php +5 · Mod Php +7

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.4.30 PHP versions 5.5.x prior to 5.5.14 Description: The issue is related to a "type confusion" vulnerability in the phpinfo implementation, which might allow context-dependent attackers to obtain sensitive information...

10CVSS6.9AI score0.55065EPSS
SaveExploits86References278
Rows per page
Query Builder