16086 matches found
gnutls: gnutls: Information disclosure via heap overread in RSA key exchange
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
CVE-2026-13601
creationtimestamp| type| source ---|---|--- 2026-06-29 12:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116833283825806725 2026-06-29 12:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpggufewex2l 2026-06-29 12:07:59+00:00| seen|...
gnutls: gnutls: Information disclosure via heap overread in RSA key exchange
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
Important: Red Hat Security Advisory: gnutls and libtasn1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
gnutls: gnutls: Information disclosure via heap overread in RSA key exchange
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
gnutls: gnutls: Information disclosure via heap overread in RSA key exchange
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
OSV-2026-995 Heap-double-free in dxf_entities_read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=528859714 Crash type: Heap-double-free Crash state: dxfentitiesread dwgreaddxf llvmfuzz.c...
Release Information for Veeam Backup for Microsoft 365 8.5
Requirements This release can be used to: upgrade an existing v8, v8.1, v8.2, v8.3, or v8.4 deployment of Veeam Backup for Microsoft 365 to v8.5. install a new deployment of Veeam Backup for Microsoft 365 v8.5. After installing this release, the Veeam Backup for Microsoft 365 build number will be...
CVE-2026-53281
creationtimestamp| type| source ---|---|--- 2026-06-26 23:27:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116818996860233750 2026-06-28 19:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenvbozdg2v 2026-06-28 19:01:06+00:00| seen|...
CVE-2026-53300
creationtimestamp| type| source ---|---|--- 2026-06-26 23:13:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116818941848613874 2026-06-28 17:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpeh67yoo72s...
CVE-2026-53304
creationtimestamp| type| source ---|---|--- 2026-06-26 20:31:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116818304806421907 2026-07-06 06:52:38+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...
CVE-2026-13282
creationtimestamp| type| source ---|---|--- 2026-06-25 23:22:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116813314953984302 2026-06-26 14:40:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp76fcsqgb2j 2026-06-26 15:44:13+00:00| seen|...
CVE-2026-13283
creationtimestamp| type| source ---|---|--- 2026-06-25 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116813263698329595 2026-06-26 09:45:07+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen|...
GO-2026-5768 ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation) in github.com/zitadel/zitadel
ZITADEL: Missing clientid binding in OIDC authorization code exchange and refresh token flows RFC 6749 Section 4.1.3 violation in github.com/zitadel/zitadel...
GO-2026-5531 Ech0's OAuth redirect URI validation ignores path component, enables exchange-code theft in github.com/lin-snow/ech0
Ech0's OAuth redirect URI validation ignores path component, enables exchange-code theft in github.com/lin-snow/ech0...
CVE-2026-53259
creationtimestamp| type| source ---|---|--- 2026-06-25 19:46:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116812465225813498...
GO-2026-5231 Dex: Token-exchange endpoint is missing AllowedConnectors enforcement in github.com/dexidp/dex
Dex: Token-exchange endpoint is missing AllowedConnectors enforcement in github.com/dexidp/dex...
gnutls: gnutls: Information disclosure via heap overread in RSA key exchange
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
CVE-2026-56789
RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp satellite count values from RINEX epoch headers. Attackers can craft malicious RINEX files declaring more than 64...