Lucene search
+L

9532 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/13 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-requests (UTSA-2023-002301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002301 advisory. Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint...

6.1CVSS6.4AI score0.02974EPSS
SaveExploits2References4
osv-cleanstart
osv-cleanstart
•added 2026/09/10 12:49 a.m.•18 views

CLEANSTART-2026-LE73008 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the prometheus-redis-exporter package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00692EPSS
SaveExploits2References24
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•23 views

PT-2026-89243

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly validate TLS certificates when making outbound HTTPS requests. An attacker in a position to intercept network...

5.7AI score
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/06 11:24 p.m.•301 views

MOVEit Transfer - Remote Code Execution

In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...

9.8CVSS8.4AI score0.99934EPSS
SaveExploits17References5
osv-azl
osv-azl
•added 2026/09/06 6:17 p.m.•13 views

AZL-99774 CVE-2026-80231 affecting package cmake 3.30.3-15

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References1
osv-azl
osv-azl
•added 2026/09/06 6:17 p.m.•8 views

AZL-99876 CVE-2026-80231 affecting package tensorflow 2.16.1-11

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References1
osv-azl
osv-azl
•added 2026/09/06 6:17 p.m.•9 views

AZL-99758 CVE-2026-80231 affecting package curl 8.11.1-11

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/06 6:17 p.m.•14 views

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS0.00898EPSS
SaveExploits1References3
osv-azl
osv-azl
•added 2026/09/06 6:17 p.m.•12 views

AZL-99807 CVE-2026-80231 affecting package mysql 8.0.46-1

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References1
osv-azl
osv-azl
•added 2026/09/06 6:17 p.m.•11 views

AZL-99831 CVE-2026-80231 affecting package rust 1.75.0-30

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References1
osv-azl
osv-azl
•added 2026/09/06 6:17 p.m.•9 views

AZL-99855 CVE-2026-80231 affecting package rust 1.90.0-10

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References1
osv-alpine
osv-alpine
•added 2026/09/06 6:17 p.m.•6 views

ALPINE-CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References1
CVE
CVE
•added 2026/09/06 5:48 p.m.•108 views

CVE-2026-80231

A vulnerability in libcurl allows the library to incorrectly reuse an existing HTTPS connection for a given hostname when there is a mismatch in the Native CA Store setting (CURLSSLOPT_NATIVE_CA) compared to the initial connection. Additionally, research indicates a related issue where a TLS sess...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2026/09/06 5:48 p.m.•66 views

CVE-2026-80231 native CA store conn reuse

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

0.00898EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/09/06 5:48 p.m.•16 views

EUVD-2026-72169

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.2AI score0.00898EPSS
SaveExploits1References3
Mend
Mend
•added 2026/09/06 5:48 p.m.•6 views

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting "CURLSSLOPTNATIVECA" than when the connection was created...

8.7CVSS7.2AI score0.00898EPSS
SaveExploits1References7
osv-cve
osv-cve
•added 2026/09/06 5:48 p.m.•16 views

CVE-2026-80231 native CA store conn reuse

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/09/06 5:48 p.m.•14 views

CVE-2026-80231 native CA store conn reuse

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.1AI score0.00898EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/09/06 5:48 p.m.•20 views

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/06 7:18 a.m.•16 views

ublockdnsclient v0.3.1

uBlockDNS Client uBlockDNS Client is an independent project and is not affiliated with, endorsed by, or related to uBlock Origin or its maintainer. uBlockDNS Client brings DNS-level ad and tracker blocking to your entire device. It uses community-maintained filter lists such as EasyList and...

6.2AI score
SaveExploits0References4
Rows per page
Query Builder