Lucene search
+L

4684 matches found

Snyk
Snyk
added 2026/04/28 11:19 a.m.3 views

Improper Validation of Certificate with Host Mismatch

Overview org.apache.thrift:libthrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch due to insufficient verificatio...

8.2CVSS5.9AI score0.00571EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/27 8:21 p.m.8 views

CLSA-2026-1777305243 Fix CVE(s): CVE-2024-38286

SECURITY UPDATE: Denial of Service caused by unbounded TLS handshake wrap queue in SecureNio2Channel / SecureNioChannel. Backport upstream fix from 9.0.x commit 76c5cce6f0bcef14b0c21c38910371ca7d322d13. - debian/patches/CVE-2024-38286.patch: cap the handshake wrap queue at...

8.6CVSS7.1AI score0.01702EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/25 5:49 a.m.9 views

OESA-2026-2076 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. syzbot reported the splat below where a socket had tcpsksk-fastopenrsk in the TCPESTABLISHED state. 0 syzbot...

9.8CVSS5.6AI score0.0056EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/04/25 1:39 a.m.9 views

SUSE CVE-2026-31550

In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control timeout The bcm2835asbcontrol function uses a tight polling loop to wait for the ASB bridge to acknowledge a request. During intensive workloads, this handshake intermittently...

4.7CVSS5.5AI score0.00123EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2026/04/25 1:36 a.m.7 views

SUSE CVE-2026-31655

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOCHDCP clock enabled Keep the NOCHDCP clock always enabled to fix the potential hang caused by the NoC ADB400 port power down handshake...

5.5CVSS5.4AI score0.00114EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.12 views

FreeBSD : OpenVPN -- server DOS and data leak in TLS handshake vulnerabilities (549313db-3e93-11f1-8d38-7fbbe0285610)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 549313db-3e93-11f1-8d38-7fbbe0285610 advisory. Gert Doering reports: Security fixes in 2.7.2 Tenable has extracted the preceding description...

6.9CVSS5.5AI score0.00317EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/24 3:16 p.m.7 views

CVE-2026-31655

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOCHDCP clock enabled Keep the NOCHDCP clock always enabled to fix the potential hang caused by the NoC ADB400 port power down handshake...

5.5CVSS0.00114EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/24 3:16 p.m.6 views

CVE-2026-31550

In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control timeout The bcm2835asbcontrol function uses a tight polling loop to wait for the ASB bridge to acknowledge a request. During intensive workloads, this handshake intermittently...

5.5CVSS0.00123EPSS
SaveExploits0References8
OSV
OSV
added 2026/04/24 2:45 p.m.3 views

CVE-2026-31655 pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOCHDCP clock enabled Keep the NOCHDCP clock always enabled to fix the potential hang caused by the NoC ADB400 port power down handshake...

5.5CVSS6.2AI score0.00114EPSS
SaveExploits0References8
CVE
CVE
added 2026/04/24 2:45 p.m.42 views

CVE-2026-31655

CVE-2026-31655 affects the Linux kernel’s pmdomain: imx8mp-blk-ctrl module, where the NOC_HDCP clock must be kept enabled. The underlying issue is an inconsistent clock state that can disrupt the NoC ADB400 port power‑down handshake, potentially causing a system hang. Reported impact is a DoS-lik...

5.5CVSS5.3AI score0.00114EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2026/04/24 2:45 p.m.8 views

CVE-2026-31655

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOCHDCP clock enabled Keep the NOCHDCP clock always enabled to fix the potential hang caused by the NoC ADB400 port power down handshake...

5.5CVSS5.2AI score0.00114EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/04/24 2:33 p.m.2 views

CVE-2026-31550

In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control timeout The bcm2835asbcontrol function uses a tight polling loop to wait for the ASB bridge to acknowledge a request. During intensive workloads, this handshake intermittently...

5.4AI score0.00123EPSS
SaveExploits0References9Affected Software1
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.12 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a timeout in the polling of the bcm2835asbcontrol function. This issue may cause the V3D main ASB...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.12 views

PT-2026-35007

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pmdomain: imx8mp-blk-ctrl component where the NOC HDCP clock may be disabled, potentially causing a system hang due to the NoC ADB400 port power down handshake...

5.5CVSS6.3AI score0.00114EPSS
SaveExploits0
OSV
OSV
added 2026/04/23 4:39 p.m.10 views

SUSE-SU-2026:1581-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: - Update to go1.25.9 bsc1244485. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...

9.8CVSS5.6AI score0.00658EPSS
SaveExploits0References20
SUSE Linux
SUSE Linux
added 2026/04/23 4:38 p.m.5 views

Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to go1.26.2 bsc1255111. CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. CVE-2026-27144: cmd/compile:...

7.5CVSS5.6AI score0.00621EPSS
SaveExploits0References44
OSV
OSV
added 2026/04/23 4:38 p.m.9 views

SUSE-SU-2026:1580-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: - Update to go1.26.2 bsc1255111. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...

9.8CVSS5.6AI score0.00658EPSS
SaveExploits0References22
GithubExploit
GithubExploit
added 2026/04/23 3:31 a.m.116 views

Exploit for Path Traversal in Jenkins

jenkinsscan Find jenkins environment and checks for CVE-2024-...

9.8CVSS7.4AI score0.99999EPSS
SaveExploits48
Positive Technologies
Positive Technologies
added 2026/04/23 12:0 a.m.14 views

PT-2026-36645

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.6.0 through 2.6.19 OpenVPN versions 2.7 alpha1 through 2.7.1 Description A race condition occurs during the TLS handshake, specifically during TLS session promotion. This issue can be triggered by remote attackers, potential...

6.9CVSS5.5AI score0.00317EPSS
SaveExploits0References29
UbuntuCve
UbuntuCve
added 2026/04/23 12:0 a.m.6 views

CVE-2026-40215

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion...

6.1CVSS6.1AI score0.00309EPSS
SaveExploits0References3
Rows per page
Query Builder