Lucene search
+L

174 matches found

osv_cve
osv_cve
•added 2026/05/06 11:27 a.m.•23 views

CVE-2026-43187 xfs: delete attr leaf freemap entries when empty

In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty Back in commit 2a2b5932db6758 "xfs: fix attr leaf header freemap.size underflow", Brian Foster observed that it's possible for a small freemap at the end of the end of the xattr...

8.8CVSS6.3AI score
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•31 views

PT-2026-37598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Alpha systems may experience sporadic user-space crashes and heap corruption when memory compaction is enabled. This issue is caused by insufficient TLB Translation Lookaside Buffer...

7.8CVSS7.5AI score0.00175EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•6 views

CVE-2026-43258: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory compaction Alpha systems can suffer sporadic user-space crashes and heap corruption when memory compaction is enabled. Symptoms include SIGSEGV, glibc allocator failures e.g...

7.8CVSS6.6AI score0.00175EPSS
SaveExploits0References6
Spring Security Advisories
Spring Security Advisories
•added 2026/04/15 12:00 a.m.•22 views

Spring AI Agentic Patterns (Part 7): Session API — Event-Sourced Short-Term Memory with Context Compaction

A New Session API for Spring AI — Structured, Compactable, Multi-Agent-Ready Part 7 of theSpring AI Agentic Patterns series completes the memory picture. After covering Agent Skills, AskUserQuestionTool, TodoWriteTool, Subagent Orchestration, A2A Integration, and AutoMemoryTools for long-term...

6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/01 12:00 a.m.•31 views

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2026-33413)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33413 advisory. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References1
osv_bit
osv_bit
•added 2026/03/27 11:39 a.m.•38 views

BIT-ETCD-2026-33413 etcd: Authorization bypasses in multiple APIs

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/03/27 12:25 a.m.•15 views

SUSE CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.6CVSS7.9AI score0.00336EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/26 6:50 p.m.•13 views

CVE-2026-33413

A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lea...

8.8CVSS7.8AI score0.00336EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/03/26 2:16 p.m.•18 views

DEBIAN-CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/26 2:16 p.m.•17 views

CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS0.00336EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/03/26 2:16 p.m.•12 views

AZL-80957 CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/03/26 2:16 p.m.•15 views

CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/03/26 2:16 p.m.•31 views

UBUNTU-CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/26 1:36 p.m.•41 views

CVE-2026-33413 etcd: Authorization bypasses in multiple APIs

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS0.00336EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/26 1:36 p.m.•13 views

CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2026/03/26 1:36 p.m.•36 views

CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/03/26 1:36 p.m.•21 views

CVE-2026-33413 etcd: Authorization bypasses in multiple APIs

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS5.9AI score
SaveExploits0References3
CVE
CVE
•added 2026/03/26 1:36 p.m.•143 views

CVE-2026-33413

CVE-2026-33413 affects etcd before 3.4.42, 3.5.28, and 3.6.9. Unauthorized users can bypass authentication/authorization on etcd RPCs exposed to untrusted or partially trusted clients, enabling actions such as MemberList (discover cluster topology), Alarm (disruption/DoS), Lease APIs (TTL/lease o...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/26 1:36 p.m.•13 views

CVE-2026-33413 etcd: Authorization bypasses in multiple APIs

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/26 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-33413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass...

8.8CVSS7.9AI score0.00336EPSS
SaveExploits0References3
Rows per page
Query Builder