Lucene search
+L

1501 matches found

RedHat Linux
RedHat Linux
•added 2026/02/25 11:30 a.m.•24 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2026/02/25 6:54 a.m.•40 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•26 views

PT-2026-21966

Name of the Vulnerable Software and Affected Versions Angular SSR versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17, and 19.2.21 Description Angular SSR, a server-side rendering tool for Angular applications, contains a Server-Side Request Forgery SSRF issue in its request handling pipeline. The...

9.2CVSS7.4AI score0.00516EPSS
SaveExploits1References22
Github Security Blog
Github Security Blog
•added 2026/02/24 4:04 p.m.•22 views

nats-server websockets are vulnerable to pre-auth memory DoS

Impact The WebSockets handling of NATS messages handles compressed messages via the WebSockets negotiated compression. The implementation bound the memory size of a NATS message but did not independently bound the memory consumption of the memory stream when constructing a NATS message which migh...

7.5CVSS7.9AI score0.00735EPSS
SaveExploits0References7Affected Software2
OSV
OSV
•added 2026/02/23 2:53 p.m.•19 views

CLSA-2026-1771858411 golang: Fix of CVE-2025-61728

CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm...

6.5CVSS7.2AI score0.00749EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2026/02/23 6:47 a.m.•20 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2026/02/23 2:14 a.m.•16 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2026/02/23 1:30 a.m.•20 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
Vulnrichment
Vulnrichment
•added 2026/02/19 8:35 p.m.•10 views

CVE-2026-27368 WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a...

5.3CVSS6AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/19 8:35 p.m.•55 views

CVE-2026-27368

CVE-2026-27368 concerns the WordPress plugin “Coming Soon Page, Under Construction & Maintenance Mode by SeedProd” (versions up to and including 6.19.8). The Red Hat/NVD/CVE listings describe a Missing Authorization vulnerability caused by incorrectly configured access control, enabling exploitat...

5.3CVSS6AI score0.00312EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•6 views

CVE-2026-27368: Missing Authorization

Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a...

5.3CVSS5.9AI score0.00312EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•39 views

PT-2026-20933

Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a...

5.5AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•28 views

PT-2026-39443

Name of the Vulnerable Software and Affected Versions PHP versions 8.2.0 through 8.2.30 PHP versions 8.3.0 through 8.3.30 PHP versions 8.4.0 through 8.4.20 PHP versions 8.5.0 through 8.5.5 Description The PDO Firebird driver improperly handles NUL bytes during the preparation of SQL queries. Duri...

9.8CVSS6.6AI score0.01047EPSS
SaveExploits0References83
RedHat Linux
RedHat Linux
•added 2026/02/10 1:45 p.m.•30 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2026/02/09 5:56 a.m.•20 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2026/02/09 1:48 a.m.•29 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2026/02/09 1:34 a.m.•29 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2026/02/04 11:48 a.m.•17 views

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

7.5CVSS6.6AI score0.00457EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
•added 2026/02/02 12:00 a.m.•28 views

PT-2026-5713

Name of the Vulnerable Software and Affected Versions Signal K Server versions prior to 1.5.0 Signal K Set-System-Time plugin versions prior to 1.5.0 Description A command injection issue exists in the Signal K Server and its Set-System-Time plugin. Authenticated users with write permissions can...

9.9CVSS6.4AI score0.04586EPSS
SaveExploits1References15
EUVD
EUVD
•added 2026/01/30 3:54 p.m.•13 views

EUVD-2025-206575

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kodmatic Computer Software Tourism Construction Industry and Trade Ltd. Co. Online Exam and Assessment allows SQL Injection.This issue affects Online Exam and Assessment: through 30012026. NOTE: Th...

8.6CVSS5.9AI score0.00343EPSS
SaveExploits0References1
Rows per page
Query Builder