Lucene search
K

9 matches found

NVD
NVD
added 2026/04/28 7:37 p.m.1 views

CVE-2026-41402

OpenClaw before 2026.3.31 contains a scope bypass vulnerability in webhook replay cache deduplication that allows authenticated attackers to replay messages across sibling targets using the same messageId. Attackers can exploit overly broad cache keying to bypass replay protection and deliver...

5.4CVSS0.00037EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/19 12:0 a.m.3 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.2.25 contained security vulnerabilities. These vulnerabilities stemmed from a lack of persistent replay protection for Nextcloud Talk webhook events. This allowed attackers to...

6.5CVSS5.8AI score0.00066EPSS
Exploits0References3
OSV
OSV
added 2023/09/15 11:5 a.m.1 views

OESA-2023-1658 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

7.5CVSS6.7AI score0.00118EPSS
Exploits0References2
OSV
OSV
added 2021/03/16 5:7 p.m.5 views

OPENSUSE-SU-2021:0423-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: Upgrade to version 12.6: - Reindexing might be needed after applying this update. - CVE-2021-3393, bsc1182040: Fix information leakage in constraint-violation error messages. This update was imported from the SUSE:SLE-15-SP1:Update update...

4.3CVSS6.1AI score0.00109EPSS
Exploits2References4
CNVD
CNVD
added 2018/06/14 12:0 a.m.1 views

Node.js Denial of Service Vulnerability (CNVD-2018-11809)

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

7.8CVSS7.2AI score0.01017EPSS
Exploits0References1
NVD
NVD
added 2016/03/24 1:59 a.m.13 views

CVE-2016-1788

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

5.9CVSS4.5AI score0.00588EPSS
Exploits0References7
OSV
OSV
added 2016/03/24 1:59 a.m.1 views

CVE-2016-1788

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

5.9CVSS5.8AI score
Exploits0References7
Prion
Prion
added 2016/03/24 1:59 a.m.16 views

Design/Logic Flaw

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

2.6CVSS6.1AI score0.00588EPSS
Exploits0References7Affected Software3
Cvelist
Cvelist
added 2016/03/24 1:0 a.m.19 views

CVE-2016-1788

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

4.6AI score0.00588EPSS
Exploits0References7
Rows per page
Query Builder