Lucene search
+L

1051 matches found

OSV
OSV
added 2026/09/03 1:06 p.m.6 views

AZL-99891 CVE-2026-85150 affecting package gstreamer1-plugins-base 1.20.0-3

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

7.5CVSS5.5AI score0.00519EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 1:06 p.m.9 views

CVE-2026-85150

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

7.5CVSS0.00519EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/09/03 1:06 p.m.14 views

CVE-2026-85150

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

7.5CVSS5.5AI score0.00519EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/03 1:06 p.m.10 views

UBUNTU-CVE-2026-85150

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

7.5CVSS5.6AI score0.00519EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/09/03 10:47 a.m.15 views

CVE-2026-85150 Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

7.5CVSS5.8AI score0.00519EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/03 10:47 a.m.11 views

EUVD-2026-70380

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

7.5CVSS5.8AI score0.00519EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/03 10:47 a.m.27 views

CVE-2026-85150

CVE-2026-85150 is a NULL pointer dereference in GStreamer's RTSP support library, specifically in gst_rtsp_message_parse_auth_credentials() (part of gst-plugins-base). A specially crafted whitespace placement in a Digest Authorization or WWW-Authenticate header causes an internal length calculati...

7.5CVSS5.8AI score0.00519EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/03 10:47 a.m.12 views

CVE-2026-85150

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

7.5CVSS5.8AI score0.00519EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/03 12:00 a.m.16 views

PT-2026-84981

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

7.5CVSS5.8AI score0.00519EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-85150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate heade...

7.5CVSS5.5AI score0.00519EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/27 8:45 p.m.8 views

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee8-security jar (CVE-2026-10050)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-10050 reported for jetty-ee8-security-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10050 DESCRIPTION: In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

9.1CVSS5.5AI score0.00483EPSS
SaveExploits1Affected Software1
SUSE CVE
SUSE CVE
added 2026/08/27 12:25 a.m.11 views

SUSE CVE-2026-65905

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

9.8CVSS5.8AI score0.00769EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/08/26 12:33 a.m.12 views

Replay Attack

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Replay Attack in the DIGEST authenticator’s nonce-count window handling. An attacker can reuse a valid DIGEST-authenticated request...

9.8CVSS5.9AI score0.00769EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 9:51 p.m.47 views

CVE-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

9.8CVSS5.7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/25 9:51 p.m.10 views

CVE-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

5.4AI score0.00769EPSS
SaveExploits0References1
Veracode
Veracode
added 2026/08/25 9:00 a.m.8 views

URI Validation Bypass

http4k-security-digest is vulnerable to URI Validation Bypass. The vulnerability is due to the client not validating the uri parameter in the Digest authentication response against the actual request URL, which allows an attacker to replay a captured authentication response against other URLs...

5.8AI score
SaveExploits0References3Affected Software1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in Apache2

A timing attack against modauthdigest in Apache HTTP Server 2.4.66 allows a remote attacker to bypass Digest authentication. Users are recommended to upgrade to version 2.4.67, which fixes this issue...

4.8CVSS5.7AI score0.00557EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in curl

Successfully using libcurl to perform a transfer over a specific HTTP proxy proxyA with Digest authentication. Then, changing the proxy host to another one proxyB for a second transfer, while reusing the same handle, causes libcurl to incorrectly pass the Proxy-Authorization: header field meant f...

5.3CVSS6.8AI score0.00471EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in Squid

Squid is vulnerable to a Denial of Service attack, where a remote attacker can carry out a buffer overflow attack by writing up to 2 MB of arbitrary data into heap memory when Squid is configured to accept HTTP Digest Authentication...

8.6CVSS8.2AI score0.88351EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in Firefox

A HTTP digest authentication nonce value was generated using rand, which may result in predictable values. This vulnerability affects Firefox versions less than 126...

5.9CVSS7.3AI score0.00217EPSS
SaveExploits1References1
Rows per page
Query Builder