Lucene search
+L

145 matches found

Kitploit
Kitploit
•added 2026/11/12 9:04 p.m.•31 views

fcn-

fcn free connect your private network from anywhere 1. What is fcn fcnfree connect is a foolproof one-click tool for accessing private networks, consisting of the server side and the client side fcn uses fcn public data servers and data encryption technology to virtually connect user clients to...

6.6AI score
SaveExploits0References2
osv_bit
osv_bit
•added 2026/10/29 9:02 a.m.•22 views

BIT-TOMCAT-2026-93446 Apache Tomcat: Possible TLS 1.3 connection failures

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or...

5.5AI score0.00592EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/29 7:19 a.m.•12 views

CVE-2026-99216

A flaw was found in the Linux kernel's Hyper-V Virtual Machine Bus VMBus driver. During driver exit or connection failure handling, the connection state is prematurely set to disconnected before the disconnect routine runs, preventing the driver from notifying the host hypervisor to unload the...

8.4CVSS7.4AI score0.00137EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/29 12:00 a.m.•9 views

PT-2026-132488

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or...

5.6AI score0.00592EPSS
SaveExploits0References4
Veracode
Veracode
•added 2026/10/27 8:20 a.m.•17 views

Uncontrolled Resource Consumption

org.asynchttpclient, async-http-client is vulnerable to uncontrolled resource consumption. The vulnerability is due to connection permits not being released when TLS connection establishment fails, which allows an attacker to trigger repeated connection failures and exhaust the available connecti...

5.9CVSS6AI score0.00533EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-93446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21...

7.5CVSS5.5AI score0.00592EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/20 5:00 p.m.•15 views

Incomplete Cleanup

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Incomplete Cleanup via handshake-wrap state handling in the SecureNioChannel component. A TLS client can trigger intermittent TLS 1.3 connection failures by...

7.5CVSS5.4AI score0.00592EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/20 5:00 p.m.•10 views

Incomplete Cleanup

Overview Affected versions of this package are vulnerable to Incomplete Cleanup via handshake-wrap state handling in the SecureNioChannel component. A TLS client can trigger intermittent TLS 1.3 connection failures by sending traffic that leaves a handshake wrap pending; after the channel wraps...

7.5CVSS5.4AI score0.00592EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/20 2:17 p.m.•65 views

CVE-2026-93446

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or...

7.5CVSS0.00592EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/20 1:44 p.m.•18 views

EUVD-2026-105008

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or...

5.5AI score0.00592EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/20 1:44 p.m.•13 views

CVE-2026-93446 Apache Tomcat: Possible TLS 1.3 connection failures

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or...

5.5AI score0.00592EPSS
SaveExploits0References1
Mend
Mend
•added 2026/10/20 1:44 p.m.•17 views

CVE-2026-93446

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or...

6.3CVSS5.5AI score0.00592EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/20 1:44 p.m.•39 views

CVE-2026-93446 Apache Tomcat: Possible TLS 1.3 connection failures

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or...

0.00592EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/20 1:44 p.m.•73 views

CVE-2026-93446

An incomplete cleanup vulnerability in Apache Tomcat can cause TLS 1.3 connections to fail intermittently. This issue impacts versions 11.0.0-M21 through 11.0.26 , 10.1.25 through 10.1.60 , and 9.0.90 through 9.0.122 . The underlying cause is related to the failure to properly reset certain flags...

7.5CVSS5.5AI score0.00592EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•23 views

PT-2026-118383

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M21 through 11.0.26 Apache Tomcat versions 10.1.25 through 10.1.60 Apache Tomcat versions 9.0.90 through 9.0.122 Description An incomplete cleanup issue may cause TLS 1.3 connections to fail intermittently...

7.5CVSS5.5AI score0.00592EPSS
SaveExploits0References74
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•14 views

AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1709547699)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1709547699 advisory. - A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the...

5.3CVSS6.5AI score0.01409EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•16 views

CVE-2026-85718: Uncontrolled Resource Consumption

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, a client with maxConnections or maxConnectionsPerHost set above zero leaks one connection permit whenever TLS connection establishment fails...

5.9CVSS6.2AI score0.00533EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/08/15 6:22 a.m.•30 views

UBUNTU-CVE-2026-72467

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwrwpcreate during connect frwrwpcreate creates the singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. Its failure paths return a negative errno and leave...

6.1AI score0.00215EPSS
SaveExploits0References26
osv_cve
osv_cve
•added 2026/08/10 10:55 p.m.•37 views

CVE-2026-11811 Socket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoS

The UpdateHub over-the-air update client's startcoapclient in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret 0 flag, but ret was set to -1 immediately after the socket was...

3.7CVSS5.7AI score0.00405EPSS
SaveExploits0References5
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•13 views

Magento Mass Importer <0.7.24 - Remote Auth Bypass Detection

Magento Mass Importer aka MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. !/usr/bin/env python3 -- coding: utf-8 -- """Magento Mass Importer aka MAGMI versions prior to 0."""...

9.8CVSS8.5AI score0.23303EPSS
SaveExploits1References6
Rows per page
Query Builder