Lucene search
K

18 matches found

Snyk
Snyk
added 2026/04/29 12:0 a.m.0 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the reuse of an easy handle in HTTP requests when a custom Host: header is set for the initial request and omitted in a subsequent one. An attacker can obtain cookies intended for a different host by exploiti...

7.5CVSS5.8AI score0.00013EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/04/15 11:4 p.m.0 views

CVE-2026-6301

A type confusion flaw was found in the Turbofan component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495273999...

9.6CVSS5.7AI score0.00042EPSS
Exploits0References5
OSV
OSV
added 2026/03/27 12:26 p.m.1 views

SUSE-SU-2026:1118-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption bsc1253904...

9.9CVSS7AI score0.03345EPSS
Exploits0References9
OpenVAS
OpenVAS
added 2026/02/20 12:0 a.m.4 views

SUSE: Security Advisory (SUSE-SU-2026:20423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2CVSS5.5AI score0.00026EPSS
Exploits1References4
OSV
OSV
added 2026/01/30 10:4 a.m.1 views

SUSE-SU-2026:20180-1 Security update for unbound

This update for unbound fixes the following issues: Update to 1.24.1: - CVE-2025-11411: Fixed possible domain hijacking attack bsc1252525...

7.1CVSS5.8AI score0.00068EPSS
Exploits0References3
OSV
OSV
added 2025/12/09 4:41 p.m.0 views

SUSE-SU-2025:21206-1 Security update for curl

This update for curl fixes the following issues: - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes bsc1253757...

4.6CVSS5.8AI score0.0002EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.1 views

SUSE: Security Advisory (SUSE-SU-2025:03524-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS6.7AI score0.00012EPSS
Exploits0References5
SUSE Linux
SUSE Linux
added 2025/08/25 8:28 a.m.3 views

Security update for pam

This update for pam fixes the following issues: Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

5.7CVSS7AI score0.00042EPSS
Exploits0References6
OSV
OSV
added 2025/06/24 10:24 a.m.1 views

SUSE-SU-2025:02079-1 Security update for icu

This update for icu fixes the following issues: - CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function bsc1243721...

7CVSS7.2AI score0.001EPSS
Exploits1References7
OSV
OSV
added 2025/06/13 10:48 a.m.1 views

SUSE-SU-2025:20418-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2024-40896: Fixed XXE vulnerability bsc1234812...

9.1CVSS6.9AI score0.00553EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/01/09 3:36 p.m.5 views

Security update for python312

This update for python312 fixes the following issues: Properly quote path names provided when creating a virtual environment bsc1232241, CVE-2024-9287 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6.5CVSS7.5AI score0.00061EPSS
Exploits0References4
Microsoft KB
Microsoft KB
added 2024/09/10 7:0 a.m.126 views

KB5042217 - Description of the security update for SQL Server 2017 GDR: September 10, 2024

KB5042217 - Description of the security update for SQL Server 2017 GDR: September 10, 2024 Summary Known issues in this update Improvements and fixes included in this update How to obtain and install the update More information File information Information about protection and security Summary Th...

9.8CVSS7.3AI score0.0673EPSS
Exploits0
AlmaLinux
AlmaLinux
added 2024/06/05 12:0 a.m.16 views

Moderate: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref CVE-2024-26735 kernel: fs: sysfs: Fix reference leak in sysfsbreakactiveprotection CVE-2024-26993 For more details about the...

5.5CVSS7.2AI score0.00028EPSS
Exploits0References6
OSV
OSV
added 2024/04/03 2:54 p.m.7 views

CVE-2023-52638 can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939sockslock to rwlock The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report: - j1939sockslock - activesessionlistlock -...

5.5CVSS5.9AI score0.00018EPSS
Exploits0References8
OSV
OSV
added 2018/07/18 11:29 p.m.0 views

CVE-2018-0392

A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by another user. The vulnerability is due to insufficient access control permissions i.e., World-Readable. An attacker could exploit this vulnerability by logging in to the CLI. An...

5.5CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2016/02/07 1:59 a.m.0 views

CVE-2016-0811

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, ...

7.5CVSS5.8AI score
Exploits0References2
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.99 views

Cisco ASA < 8.4.4.6 & 8.2.5.32 - Ethernet Information Leak

No description provided by source. !/usr/bin/env python CVE-2003-0001 'Etherleak' exploit ================================= Exploit for hosts which use a network device driver that pads ethernet frames with data which vary from one packet to another, likely taken from kernel memory, system memory...

5CVSS5.1AI score0.04317EPSS
Exploits15
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.6 views

Detectoid to check for presence of the Toshiba Bluetooth stack being installed

Designed by Bluetooth team for the purpose of "Bug 5206536"...

2.1AI score
Exploits0
Rows per page
Query Builder