Lucene search
+L

5390 matches found

CVE
CVE
added 2026/09/08 3:12 p.m.27 views

CVE-2026-16037

CVE-2026-16037 is an observable timing discrepancy in the PayTR Virtual Pos iFrame API (v9x) WHMCS Module (versions v9.0.0 through before v9.0.3) that allows a callback authentication bypass via timing attack , enabling black box reverse engineering . The CNA-assigned CVSS 3.1 score is 7.5 (HIGH)...

7.5CVSS5.7AI score0.00303EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 2:03 a.m.9 views

CLEANSTART-2026-DJ05320 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

9.8CVSS6.1AI score0.0073EPSS
SaveExploits0References29
OSV
OSV
added 2026/09/08 1:58 a.m.9 views

CLEANSTART-2026-UV76679 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

9.8CVSS6.1AI score0.0073EPSS
SaveExploits0References17
OSV
OSV
added 2026/09/08 1:57 a.m.8 views

CLEANSTART-2026-HB08666 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

9.8CVSS6.1AI score0.0073EPSS
SaveExploits0References18
OSV
OSV
added 2026/09/08 1:35 a.m.6 views

CLEANSTART-2026-BC74118 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the external-secrets-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See...

9.8CVSS6.1AI score0.00641EPSS
SaveExploits0References20
OSV
OSV
added 2026/09/08 1:30 a.m.6 views

CLEANSTART-2026-RU97646 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the helm-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references fo...

9.8CVSS6.5AI score0.00878EPSS
SaveExploits5References156
OSV
OSV
added 2026/09/08 12:42 a.m.6 views

CLEANSTART-2026-LL86841 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the opentelemetry-collector package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See...

9.8CVSS5.8AI score0.0073EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/09/08 12:00 a.m.12 views

EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-3328)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw in curl's cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables a...

5.9AI score0.00661EPSS
SaveExploits4References5
Cvelist
Cvelist
added 2026/09/08 12:00 a.m.32 views

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

0.00399EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/09/08 12:00 a.m.6 views

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

6.2AI score0.00399EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/09/08 12:00 a.m.10 views

NewStart CGSL MAIN 7.02 : pyOpenSSL Multiple Vulnerabilities (NS-SA-2026-0110)

The remote NewStart CGSL host, running version MAIN 7.02, has pyOpenSSL packages installed that are affected by multiple vulnerabilities: - pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to...

9.8CVSS8AI score0.00882EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/09/08 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-74860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document...

8.5CVSS5.8AI score0.00606EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/07 3:16 p.m.9 views

CVE-2026-86143

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

7.3CVSS6.1AI score0.00185EPSS
SaveExploits1References6
OSV
OSV
added 2026/09/06 6:17 p.m.9 views

AZL-99849 CVE-2026-82208 affecting package rust 1.90.0-10

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

5.8AI score0.00407EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/06 6:17 p.m.5 views

AZL-99798 CVE-2026-82208 affecting package mysql 8.0.46-1

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

5.8AI score0.00407EPSS
SaveExploits1References1
CVE
CVE
added 2026/09/06 5:49 p.m.60 views

CVE-2026-82208

This vulnerability affects libcurl built with the wolfSSL backend, in releases 8.9.1 through 8.21.0 . When CA caching is enabled and an application uses CURLOPT_SSL_CTX_FUNCTION to replace the trust store, a logic error in Curl_wssl_setup_x509_store() (lib/vtls/wolfssl.c) silently reinstalls the ...

5.7AI score0.00407EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/09/06 5:49 p.m.60 views

CVE-2026-82208 wolfSSL CA-cache hit overrides callback

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

0.00407EPSS
SaveExploits1References3
OSV
OSV
added 2026/09/06 5:49 p.m.9 views

CVE-2026-82208 wolfSSL CA-cache hit overrides callback

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

7.5CVSS5.8AI score0.00407EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2026/09/06 5:49 p.m.8 views

CVE-2026-82208 wolfSSL CA-cache hit overrides callback

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

5.8AI score0.00407EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2026/09/06 3:54 p.m.8 views

libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

7.3CVSS6AI score0.00185EPSS
SaveExploits1References7
Rows per page
Query Builder