Lucene search
+L

7125 matches found

Vulnrichment
Vulnrichment
added 2026/05/28 9:34 p.m.11 views

CVE-2026-45364 Better Auth: Rate limiter keys IPv6 addresses individually and is bypassable via prefix rotation

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.4.17 and 1.5.0-beta.9, Better Auth's HTTP rate limiter keyed each request by the exact textual IP address it received in x-forwarded-for or the configured IP-bearing header. IPv6 clients controlling a typical /6...

7.3CVSS5.8AI score0.00295EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/28 8:41 p.m.44 views

CVE-2026-45344 LinkAce: Setup database password newline injection enables pre-auth RCE on uninitialized instances

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, the setup database configuration flow on uninitialized LinkAce instances accepts attacker-controlled database credential fields and writes them back into .env without escaping. A remote attacker who can reach the setup...

8.1CVSS0.00456EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/28 8:20 p.m.13 views

CVE-2026-46119

A flaw was found in the Linux kernel's libceph component. A remote attacker could exploit this vulnerability by sending a specially crafted CEPHMSGAUTHREPLY message. When the message's result field contains a positive value, it can be misinterpreted as a buffer size, leading to a slab-out-of-boun...

9.1CVSS5.9AI score0.00525EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/05/28 7:16 p.m.5 views

CVE-2026-44394

An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued token. When a federated user rescopes a token via POST /v3/auth/tokens, the handlescopedtoken function in the mapped...

8.1CVSS6.1AI score0.00249EPSS
SaveExploits1References4
NVD
NVD
added 2026/05/28 10:16 a.m.17 views

CVE-2026-46119

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...

9.1CVSS0.00525EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/05/28 10:16 a.m.8 views

CVE-2026-46119

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...

9.1CVSS5.6AI score0.00525EPSS
SaveExploits0References35
UbuntuCve
UbuntuCve
added 2026/05/28 10:16 a.m.5 views

CVE-2026-46193

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV layout differently when ESN is enabled: the async ahash setup appends a 4-byte seqhi slot before the ICV or authdata area, but the async...

5.5CVSS5.4AI score0.00128EPSS
SaveExploits0References11
Debian CVE
Debian CVE
added 2026/05/28 9:36 a.m.18 views

CVE-2026-46193

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV layout differently when ESN is enabled: the async ahash setup appends a 4-byte seqhi slot before the ICV or authdata area, but the async...

5.5CVSS5.7AI score0.00128EPSS
SaveExploits0
OSV
OSV
added 2026/05/28 9:35 a.m.9 views

CVE-2026-46119 libceph: Fix slab-out-of-bounds access in auth message processing

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...

9.1CVSS6AI score
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:35 a.m.20 views

CVE-2026-46119

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...

9.1CVSS5.9AI score0.00525EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2026/05/28 9:35 a.m.69 views

CVE-2026-46119

CVE-2026-46119 affects the Linux kernel libceph component. The flaw is a slab-out-of-bounds access in auth message processing: if CEPH_MSG_AUTH_REPLY carries a positive result, it is misinterpreted as an error code and later as the size of the front segment, causing out-of-bounds reads. The fix t...

9.1CVSS6AI score0.00525EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD
added 2026/05/28 9:35 a.m.18 views

EUVD-2026-32878

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...

6AI score0.00525EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/28 9:35 a.m.43 views

CVE-2026-46119 libceph: Fix slab-out-of-bounds access in auth message processing

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...

9.1CVSS0.00525EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/05/28 9:35 a.m.12 views

CVE-2026-46119

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...

9.1CVSS5.9AI score0.00525EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/05/28 8:11 a.m.10 views

libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()

...

7.5CVSS5.4AI score0.0049EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/05/28 4:47 a.m.13 views

CVE-2026-9803 Keycloak: keycloak: denial of service via malformed authorization header

A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an...

5.3CVSS5.8AI score0.00417EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/05/28 3:55 a.m.18 views

SUSE CVE-2026-45964

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssauth kref leak in gssallocmsg error path Commit 5940d1cf9f42 "SUNRPC: Rebalance a kref in authgss.c" added a krefget&gssauth-kref call to balance the gssputauth done in gssreleasemsg, but forgot to add a...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2026/05/28 3:54 a.m.14 views

SUSE CVE-2026-46024

In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in cephhandleauthreply If a message of type CEPHMSGAUTHREPLY contains a zero value for both protocol and result, this is currently not treated as an error. In case of ac-negotiating == tr...

6.5CVSS5.7AI score0.0049EPSS
SaveExploits0References18
Hacker One
Hacker One
added 2026/05/28 3:28 a.m.22 views

curl: CURLOPT_COOKIE leaked to cross-origin redirect target — CURLOPT_UNRESTRICTED_AUTH bypass for the STRING_COOKIE path

Summary: httpcookies at lib/http.c:2532-2534 appends the value of CURLOPTCOOKIE the cookie supplied via -b to outgoing Cookie: headers without invoking Curlauthallowedtohost. As a result, when CURLOPTFOLLOWLOCATION is enabled and the initial origin issues a cross-origin redirect open redirector,...

5.7CVSS6.7AI score0.01702EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.27 views

PT-2026-44242

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds access exists in the libceph module during the processing of authentication messages. When a CEPH MSG AUTH REPLY message contains a positive value in its result fiel...

9.1CVSS6AI score0.00525EPSS
SaveExploits0
Rows per page
Query Builder