Lucene search
K

10 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/23 7:43 p.m.5 views

CVE-2026-27623

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking...

7.5CVSS5.5AI score0.00269EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/02/23 7:43 p.m.4 views

CVE-2026-27623

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking...

7.5CVSS5.4AI score0.00269EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/02/23 7:43 p.m.15 views

CVE-2026-27623

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking...

7.5CVSS5.6AI score0.00269EPSS
Exploits0
CNNVD
CNNVD
added 2026/02/23 12:0 a.m.8 views

Valkey 输入验证错误漏洞

Valkey is a flexible distributed key-value database developed by Valkey OpenSource. In versions 9.0.0 to 9.0.3 of Valkey, there was an input validation vulnerability. This vulnerability stemmed from failing to correctly reset the network state after processing empty requests, which could allow...

7.5CVSS5.8AI score0.00269EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/13 8:43 p.m.2 views

CVE-2025-59836 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial of service by sending empty create/update resource reques...

5.3CVSS6.3AI score0.0053EPSS
Exploits1References3
CVE
CVE
added 2025/10/13 8:43 p.m.12 views

CVE-2025-59836

Summary (CVE-2025-59836): Omni (github.com/siderolabs/omni) is vulnerable to a Denial of Service via empty Create/Update Resource requests. The root cause is a nil pointer dereference in isSensitiveSpec, which calls CreateResource without verifying resource.Metadata is non-nil. If a resource with...

7.5CVSS6.3AI score0.0053EPSS
Exploits1References3Affected Software1
Snyk
Snyk
added 2025/10/13 7:59 p.m.1 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the isSensitiveSpec function which calls grpcomni.CreateResource without checking if the resource's metadata field is nil. An attacker can cause a server crash and disrupt service availability by sending emp...

7.5CVSS6.7AI score0.0053EPSS
Exploits1References2
Snyk
Snyk
added 2025/10/13 7:59 p.m.1 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the isSensitiveSpec function which calls grpcomni.CreateResource without checking if the resource's metadata field is nil. An attacker can cause a server crash and disrupt service availability by sending emp...

7.5CVSS7AI score0.0053EPSS
Exploits1References2
Snyk
Snyk
added 2025/10/13 7:59 p.m.2 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the isSensitiveSpec function which calls grpcomni.CreateResource without checking if the resource's metadata field is nil. An attacker can cause a server crash and disrupt service availability by sending emp...

7.5CVSS7AI score0.0053EPSS
Exploits1References2
SonicWall
SonicWall
added 2001/01/09 5:0 a.m.6 views

Soho Firewall CVE-2000-1098 Denial-Of-Service Vulnerability

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request. CVE: CVE-2000-1098 Last updated: Sept. 5, 2008, 8:22 p.m...

5CVSS7AI score0.01291EPSS
Exploits0
Rows per page
Query Builder