Lucene search
+L

9338 matches found

vulnersOsv
vulnersOsv
added 2026/04/27 12:00 p.m.9 views

parley-core (>=0.2.0, <=0.6.1), pqc-combo (0.1.0) +2 more potentially affected by unknown CVE via libcrux-ml-dsa (>=0.0.4, <=0.0.8)

libcrux-ml-dsa CARGO version =0.0.4, =0.2.0, =0.6.1 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0126...

5.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/23 12:00 a.m.44 views

Dell Client BIOS Weak Password Recovery Mechanism (DSA-2025-153)

Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access. Note that Nessus has not tested for this issue but has instead relied...

5.1CVSS5.3AI score0.00176EPSS
SaveExploits0References2
Debian
Debian
added 2026/04/17 9:18 p.m.24 views

[SECURITY] [DSA 6216-1] opam security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6216-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 17, 2026 https://www.debian.org/security/faq -...

7.8CVSS5.7AI score0.00205EPSS
SaveExploits0
OSV
OSV
added 2026/04/17 12:05 p.m.19 views

CLSA-2026-1776427525 golang: Fix of 3 CVEs

CVE-2025-61723: fix non-linear processing time when parsing invalid PEM inputs that could lead to denial of service - CVE-2025-58187: fix quadratic complexity when checking name constraints in crypto/x509 certificate validation - CVE-2025-58188: fix panic when validating certificates with DSA...

7.5CVSS5.8AI score0.00617EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2026/04/13 12:00 a.m.13 views

Debian: Security Advisory (DSA-6206-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.01069EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-5194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant ke...

9.3CVSS6.8AI score0.0045EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/04/09 10:13 p.m.11 views

CVE-2026-5194

A flaw was found in wolfSSL. Missing hash/digest size and Object Identifier OID checks allow the acceptance of smaller, less secure digests during the verification of Elliptic Curve Digital Signature Algorithm ECDSA certificates. This could enable a remote attacker, with knowledge of the public...

10CVSS5.9AI score0.0045EPSS
SaveExploits1References4
CVE
CVE
added 2026/04/09 7:30 p.m.373 views

CVE-2026-5194

The CVE-2026-5194 issue concerns wolfSSL’s ECDSA certificate verification: missing hash/digest size and OID checks may allow digests smaller than allowed for the given key type to pass verification when EdDSA or ML-DSA is enabled. This could reduce security of ECDSA certificate-based authenticati...

9.3CVSS5.8AI score0.0045EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/04/09 7:30 p.m.69 views

CVE-2026-5194

Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA certificate-based authentication...

9.3CVSS7.2AI score0.0045EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2026/04/09 7:30 p.m.70 views

CVE-2026-5194

Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA certificate-based authentication...

9.3CVSS7.5AI score0.0045EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2026/04/06 12:00 a.m.30 views

Debian: Security Advisory (DSA-6196-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS5.9AI score0.00475EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2026/04/06 12:00 a.m.14 views

Debian: Security Advisory (DSA-6193-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.9AI score0.23674EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
added 2026/04/05 12:00 a.m.18 views

Debian dsa-6195 : python-tornado-doc - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6195 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6195-1 [email protected] https://www.debian.org/securit...

7.5CVSS6.5AI score0.00559EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2026/04/02 12:00 a.m.10 views

Debian: Security Advisory (DSA-6191-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.00773EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/31 3:38 a.m.12 views

Security Bulletin: Vulnerability in IBM Java, Websphere, OpenSSL, libcurl, and Apache Commons may affect IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments and IBM Storage Protect for Space Management

Summary IBM Spectrum Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments and IBM Storage Protect for Space Management can be affected by logging and security vulnerabilities. This update improves reliability of Java object property handling, modern logging frameworks and...

7.5CVSS7.8AI score0.66582EPSS
SaveExploits0Affected Software3
OpenVAS
OpenVAS
added 2026/03/30 12:00 a.m.7 views

Debian: Security Advisory (DSA-6187-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS5.9AI score0.00374EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2026/03/30 12:00 a.m.18 views

Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DS...

7.8CVSS6.2AI score0.0023EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/30 12:00 a.m.25 views

Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DS...

7.8CVSS6.2AI score0.00202EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/29 12:00 a.m.11 views

DSA-6186-1 php-phpseclib - security update

Bulletin has no description...

8.2CVSS5.8AI score0.00374EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2026/03/27 12:00 a.m.11 views

Debian: Security Advisory (DSA-6180-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.9AI score0.00665EPSS
SaveExploits2References2
Rows per page
Query Builder