Lucene search
+L

66722 matches found

OSV
OSV
added 2026/09/07 7:20 a.m.6 views

SUSE-SU-2026:3990-1 Security update for redis

This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794...

7.5CVSS6.1AI score0.00435EPSS
SaveExploits0References3
Redos
Redos
added 2026/09/07 12:00 a.m.8 views

ROS-20260907-73-0078

The vulnerability in dotnet9.0 is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS6.2AI score0.00288EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.14 views

PT-2026-86781

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Redos
Redos
added 2026/09/07 12:00 a.m.8 views

ROS-20260907-73-0081

The vulnerability in dotnet10.0 is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS6.2AI score0.00288EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/07 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-80882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM error value is set when the input buffer allocation fails in...

5.8AI score0.00156EPSS
SaveExploits0References2
Redos
Redos
added 2026/09/07 12:00 a.m.8 views

ROS-20260907-73-0080

The vulnerability in dotnet8.0 is related to an exception handling error. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

7.8CVSS6.2AI score0.00288EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/07 12:00 a.m.11 views

Debian dsa-6487 : charon-cmd - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/securit...

7.5CVSS6AI score0.00426EPSS
SaveExploits0References24
OSV
OSV
added 2026/09/06 6:17 p.m.3 views

AZL-99810 CVE-2026-80255 affecting package mysql 8.0.46-1

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

7.5CVSS5.8AI score0.00684EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/06 5:48 p.m.9 views

EUVD-2026-72151

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

5.8AI score0.00684EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2026/09/06 5:48 p.m.10 views

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.2AI score0.00937EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2026/09/06 5:48 p.m.10 views

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS5.7AI score0.00937EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2026/09/06 5:47 p.m.12 views

CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS6.2AI score0.00897EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/06 12:00 a.m.6 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053242 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssxdecoptionarray The creds and oa-data need to be freed in the...

9.8CVSS6.1AI score0.00959EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/05 8:17 p.m.12 views

CVE-2026-86060

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...

9.8CVSS0.01057EPSS
SaveExploits2References8
EUVD
EUVD
added 2026/09/05 8:00 p.m.16 views

EUVD-2026-72029

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...

9.2CVSS5.7AI score0.01057EPSS
SaveExploits2References7
CVE
CVE
added 2026/09/05 8:00 p.m.268 views

CVE-2026-86060

MikroTik RouterOS contains an argument-handling flaw in the SSH login path. An unauthenticated attacker can supply a username beginning with a prohibited character to reach the RouterOS login helper and modify the trusted policy mask , achieving privilege escalation . The vulnerability is rated C...

9.8CVSS5.7AI score0.01057EPSS
SaveIn wildExploits2References8Affected Software1
UbuntuCve
UbuntuCve
added 2026/09/05 7:16 p.m.9 views

CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/05 7:16 p.m.5 views

UBUNTU-CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

5.5CVSS5.7AI score0.00098EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/05 6:51 p.m.15 views

CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0
OSV
OSV
added 2026/09/05 3:03 p.m.5 views

OESA-2026-3608 python-ujson security update

UltraJSON Security Fixes: UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation.CVE-2021-45958 UltraJSON is a fast JSON encoder and decoder written in pure C with...

7.5CVSS6.8AI score0.0155EPSS
SaveExploits3References5
Rows per page
Query Builder