170440 matches found
DEBIAN-CVE-2025-30156
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...
UBUNTU-CVE-2025-30156
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...
CGA-FP45-GPMH-5HMM
Bulletin has no description...
CGA-WWFF-VPCV-RXHG
Bulletin has no description...
CVE-2026-81730
creationtimestamp| type| source ---|---|--- 2026-08-27 22:12:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2vkvq4f4uofm4 2026-08-27 22:59:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3x7he4yh24 2026-08-27 22:59:49+00:00| seen|...
CGA-87J8-VM8F-62RM
Bulletin has no description...
DEBIAN-CVE-2026-18374
Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...
MINI-PGQQ-RFWM-3855
Bulletin has no description...
MINI-C4J9-24M4-GPJ3
Bulletin has no description...
MINI-XFQH-CGR3-R647
Bulletin has no description...
MINI-VC7G-JM2R-88HJ
Bulletin has no description...
MINI-7CQ4-9CRW-622G
Bulletin has no description...
MINI-RPRX-GWRQ-8544
Bulletin has no description...
MINI-4XPJ-5HWH-QMPP
Bulletin has no description...
MINI-VH7X-FXMV-8W4X
Bulletin has no description...
MINI-XVQ4-W8CQ-7GC7
Bulletin has no description...
DEBIAN-CVE-2026-81724
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested feature-structure input. Attackers can craft trivial payloads with nested brackets that exceed...
DEBIAN-CVE-2026-81725
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...
DEBIAN-CVE-2026-81727
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incrdownload methods that allows attackers to overwrite files outside the install root through pre-existing hardlinks. Attackers with write access to a shared downloader...
DEBIAN-CVE-2026-81722
nltk PorterStemmer in versions = 3.10.2 fixed in 3.10.3 contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem. The isconsonant helper walks backward over the entire run of trailing 'y' characters on every call, and measure invokes it for each stem position, causin...