CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8052 matches found

Chainguard•added 2026/06/09 7:17 a.m.•32 views

GHSA-6GHJ-FRRJ-JJJ3 vulnerabilities

Vulnerabilities for packages: hadoop-fips, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, apache-hop, management-api-for-apache-cassandra-4.0, tez, trino, pinot-fips, pinot, apache-hop-fips, thingsboard, tinkerpop, celeborn, seata...

5.8AI score

SaveExploits0

Chainguard•added 2026/06/09 7:17 a.m.•38 views

CVE-2026-44250 vulnerabilities

7.5CVSS7.2AI score0.00849EPSS

SaveExploits0

Chainguard•added 2026/06/09 7:17 a.m.•22 views

GHSA-3244-J874-RHC2 vulnerabilities

5.8AI score

SaveExploits0

Positive Technologies•added 2026/06/09 12:00 a.m.•46 views

PT-2026-47834

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference occurs in the OpenSSL QUIC server when receiving a QUIC initial packet containing an invalid or expired token. This issue is triggered specifically when address...

8.1CVSS6.1AI score0.01025EPSS

SaveExploits0References141

Positive Technologies•added 2026/06/09 12:00 a.m.•68 views

PT-2026-47836

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur during the decryption of password-encrypted Cryptographic Message Syntax CMS messages. The issue arises because the OpenSSL CMS implementation dereference...

7.5CVSS6.1AI score0.0106EPSS

SaveExploits0References191

UbuntuCve•added 2026/06/09 12:00 a.m.•22 views

CVE-2026-42770

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...

3.7CVSS6.4AI score0.00503EPSS

SaveExploits0References3

Positive Technologies•added 2026/06/09 12:00 a.m.•48 views

PT-2026-47840

Name of the Vulnerable Software and Affected Versions OpenSSL FIPS modules versions 3.0, 3.4, 3.5, 3.6, and 4.0 Description When the EVP PKEY derive set peer function is called with a DHX X9.42 peer key, the software fails to properly verify subgroup membership. Specifically, the check Y^q ≡ 1 mo...

3.7CVSS6.4AI score0.00503EPSS

SaveExploits0References154

UbuntuCve•added 2026/06/09 12:00 a.m.•30 views

CVE-2026-42766

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

5.9CVSS6.1AI score0.0106EPSS

SaveExploits0References4

Positive Technologies•added 2026/06/09 12:00 a.m.•36 views

PT-2026-47832

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A remote peer can cause unbounded memory allocation leading to a Denial of Service and abnormal termination of an application acting as a QUIC client or server. This occurs when a malicious...

9.1CVSS6.6AI score0.01057EPSS

SaveExploits0References118

OpenSSL•added 2026/06/09 12:00 a.m.•21 views

FFC-DH Peer Validation Uses Attacker-Supplied q

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim’s p and g parameters, a forged q = r a small prime factor of the cofacto...

3.7CVSS6.4AI score0.00503EPSS

SaveExploits0Affected Software1

Chainguard•added 2026/06/08 7:18 p.m.•31 views

CVE-2026-45133 vulnerabilities