Lucene search
+L

29045 matches found

osv_cleanstart
osv_cleanstart
•added 2026/01/30 4:15 p.m.•11 views

CLEANSTART-2026-KU65968 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS6.9AI score0.08927EPSS
SaveExploits3References38
osv_cleanstart
osv_cleanstart
•added 2026/01/30 4:08 p.m.•29 views

CLEANSTART-2026-GL70025 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS6.9AI score0.08927EPSS
SaveExploits3References43
osv_cleanstart
osv_cleanstart
•added 2026/01/30 4:02 p.m.•15 views

CLEANSTART-2026-EC15228 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS6.9AI score0.08927EPSS
SaveExploits3References38
osv_cleanstart
osv_cleanstart
•added 2026/01/30 3:58 p.m.•13 views

CLEANSTART-2026-NP17404 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS6.9AI score0.08927EPSS
SaveExploits3References40
SUSE Linux
SUSE Linux
•added 2026/01/30 11:17 a.m.•15 views

Security update for bind

This update for bind fixes the following issues: Upgrade to release 9.20.18: CVE-2025-13878: Fixed incorrect length checks for BRID and HHIT records bsc1256997 Feature Changes: Add more information to the rndc recursing output about fetches. Reduce the number of outgoing queries. Provide more...

8.7CVSS6.2AI score0.09218EPSS
SaveExploits0References4
osv_opensuse
osv_opensuse
•added 2026/01/30 9:59 a.m.•10 views

OPENSUSE-SU-2026:20138-1 Security update for jasper

This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high bsc1247901. - CVE-2025-8836: Added some missing range checking on several coding parameters in the J...

7.8CVSS6.1AI score0.00237EPSS
SaveExploits3References6
osv_suse
osv_suse
•added 2026/01/30 9:58 a.m.•19 views

SUSE-SU-2026:20200-1 Security update for jasper

This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high bsc1247901. - CVE-2025-8836: Added some missing range checking on several coding parameters in the J...

7.8CVSS6.1AI score0.00237EPSS
SaveExploits3References7
EUVD
EUVD
•added 2026/01/30 6:00 a.m.•19 views

EUVD-2026-5045

Improper access control in the WCF endpoint in Edgemo now owned by Danoffice IT Local Admin Service 1.2.7.23180 on Windows allows a local user to escalate their privileges to local administrator via direct communication with the LocalAdminService.exe named pipe, bypassing client-side group...

8.5CVSS5.9AI score0.00225EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/30 3:24 a.m.•19 views

CVE-2026-24889

soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the Bytes::slice, Vec::slice, and Prng::genrange for u64 methods in the soroban-sdk in versions up to and including 25.0.1, 23.5.1, and 25.0.2. Contracts that pass user-controlled or computed range bounds to...

5.3CVSS5.7AI score0.0039EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•11 views

SUSE: Security Advisory (SUSE-SU-2026:20135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.1AI score0.09218EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•14 views

SUSE: Security Advisory (SUSE-SU-2026:20122-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.02326EPSS
SaveExploits2References10
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•5 views

SUSE: Security Advisory (SUSE-SU-2026:0308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.02326EPSS
SaveExploits4References26
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•11 views

SUSE: Security Advisory (SUSE-SU-2026:0310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.52446EPSS
SaveExploits8References11
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•8 views

SUSE: Security Advisory (SUSE-SU-2026:0311-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.52446EPSS
SaveExploits8References11
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•6 views

SUSE: Security Advisory (SUSE-SU-2026:20134-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00312EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•10 views

openSUSE Security Advisory (SUSE-SU-2026:0308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.02326EPSS
SaveExploits4References26
OpenVAS
OpenVAS
•added 2026/01/30 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2026:20132-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.02326EPSS
SaveExploits2References10
RedhatCVE
RedhatCVE
•added 2026/01/29 9:21 p.m.•20 views

CVE-2025-46306

The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing a maliciously crafted Keynote file may disclose memory contents...

5.5CVSS5.8AI score0.00145EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/29 9:21 p.m.•19 views

CVE-2025-68933

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, non-admin moderators with the moderatorschangepostownership setting enabled can change ownership of posts in private messages and restricted categories they cannot access, then export...

6.9CVSS5.6AI score0.0016EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/29 9:21 p.m.•20 views

CVE-2025-68479

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, some subscription endpoints lack proper checking for ownership before making changes. This issue is patched in versions 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0. No known workarounds...

7.1CVSS5.9AI score0.00193EPSS
SaveExploits0References1
Rows per page
Query Builder