Lucene search
K

59 matches found

Friends Of PHP
Friends Of PHP
added 2026/05/29 8:0 a.m.10 views

symfony/ux-live-component LiveComponentHydrator HMAC checksum lacks component and slot binding

More info at https://github.com/symfony/ux/security/advisories/GHSA-34w5-c283-j9fg...

5.8AI score
Exploits0Affected Software1
Cvelist
Cvelist
added 2026/05/20 11:7 p.m.29 views

CVE-2026-9150 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption a...

6.5CVSS0.00014EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-44919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL...

4.3CVSS5.5AI score0.00014EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/29 4:47 p.m.2 views

CVE-2026-6914 MD5 checksum creation may cause availability loss

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior...

7.1CVSS5.2AI score0.00059EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2026/04/29 12:0 a.m.10 views

MongoDB Server -- Multiple vulnerabilities

https://jira.mongodb.org/browse/SERVER-119981 reports: Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. An authorization flaw in the user management command could allow an authenticated user to make limited changes t...

7.5CVSS5.8AI score0.00072EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/02 6:38 p.m.1 views

EUVD-2026-18507

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.5.3, the fix for CVE-2026-33645 was applied to the authenticated /api/uploadChunked endpoint but was not applied to the unauthenticated /api/uploadChunked/public endpoint in the same file app/server/fireshare/api.py. An...

9.1CVSS5.9AI score0.00115EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.3 views

Microsoft Devices Pricing Program 代码问题漏洞

The Microsoft Devices Pricing Program is Microsoft's exclusive device purchasing and pricing mechanism for enterprise customers, partners, or select channels to enjoy customized pricing, terms of business, and support for volume purchases of Surface Series devices such as Surface Laptop, Surface...

9.8CVSS6.1AI score0.01698EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000894 advisory. The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a...

7.8CVSS7.2AI score0.21228EPSS
Exploits0References40
NVD
NVD
added 2025/12/02 2:16 p.m.1 views

CVE-2025-41086

Vulnerability in the access control system of the GAMS licensing system that allows unlimited valid licenses to be generated, bypassing any usage restrictions. The validator uses an insecure checksum algorithm; knowing this algorithm and the format of the license lines, an attacker can recalculat...

6.9CVSS0.00036EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-23343

Malware in sbrugna...

7.5CVSS7.6AI score0.00698EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-14077

Malware in sbrugna...

8.8CVSS8.8AI score0.002EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-3179

Malware in sbrugna...

6.5CVSS6.9AI score0.00443EPSS
Exploits3References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-1354

Malware in sbrugna...

7.8CVSS6AI score0.09538EPSS
Exploits0References26
OSV
OSV
added 2025/10/04 12:11 a.m.2 views

RLSA-2025:9430 Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

5.9CVSS6.7AI score0.00252EPSS
Exploits0References2
OSV
OSV
added 2025/10/03 7:56 p.m.4 views

RLSA-2025:9418 Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

5.9CVSS6.8AI score0.00252EPSS
Exploits0References2
OSV
OSV
added 2025/09/22 8:44 a.m.1 views

SUSE-SU-2025:20719-1 Security update for krb5

This update for krb5 fixes the following issues: - CVE-2025-3576: Fixed Kerberos RC4-HMAC-MD5 Checksum Vulnerability bsc1241219...

5.9CVSS7.1AI score0.00252EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/09/22 8:42 a.m.3 views

Security update for krb5

This update for krb5 fixes the following issues: CVE-2025-3576: Fixed Kerberos RC4-HMAC-MD5 Checksum Vulnerability bsc1241219 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

8.2CVSS7AI score0.00252EPSS
Exploits0References4
CNVD
CNVD
added 2025/09/09 12:0 a.m.3 views

Huawei HarmonyOS home screen module privilege checksum vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege checksum vulnerability exists in the Huawei HarmonyOS home screen module, which can be exploited by an attacker to compromise usability...

6.8CVSS6.8AI score0.00014EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/09/04 10:44 a.m.3 views

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

...

5.9CVSS7AI score0.00252EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/09/02 2:59 a.m.2 views

Moderate: Red Hat Security Advisory: krb5 security update

An update for krb5 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...

5.9CVSS6.8AI score0.00252EPSS
Exploits0References2
Rows per page
Query Builder