CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10643 matches found

Tenable Nessus•added 2025/10/07 12:00 a.m.•5 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: curl (UTSA-2025-987465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987465 advisory. 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear...

7.5CVSS6.3AI score0.01395EPSS

SaveExploits1References4

Hacker One•added 2025/10/06 9:39 p.m.•18 views

curl: OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)

Summary: In curl’s OpenSSL backend, osslgetchannelbinding retains a new reference to the server’s X509 certificate via SSLget1peercertificate and never releases it. When Negotiate SPNEGO over TLS is in use, this path is invoked and leaks one X509 object per trigger. Over many requests in a...

7.1AI score

SaveExploits0

Redos•added 2025/10/06 12:00 a.m.•8 views

ROS-20251006-02

A vulnerability in the curl program is related to boundary conditions when reading the cookie path. Exploitation The vulnerability could allow a remote attacker to cause a denial of service...

7.5CVSS6.9AI score0.01395EPSS

SaveExploits1

OSV•added 2025/10/04 12:11 a.m.•8 views

RLSA-2025:12187 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox: thunderbird: Incorrect URL stripping in CSP reports CVE-2025-80...

7.5CVSS7.4AI score0.00472EPSS

SaveExploits0References10

Tenable Nessus•added 2025/10/04 12:00 a.m.•5 views

RockyLinux 9 : thunderbird (RLSA-2025:12187)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:12187 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefo...

9.8CVSS8.8AI score0.00472EPSS

SaveExploits0References19