Lucene search
K

8706 matches found

RedhatCVE
RedhatCVE
added 2026/03/06 7:51 a.m.2 views

CVE-2024-57854

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand function, which is not suitable fo...

9.1CVSS5.8AI score0.00015EPSS
Exploits0References1
Redos
Redos
added 2026/03/06 12:0 a.m.3 views

ROS-20260306-73-0004

A vulnerability in the mtd component of the Linux operating system kernel is related to improper resource initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.8AI score0.0007EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/03/06 12:0 a.m.2 views

PT-2026-23695

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files li...

6.9CVSS5.9AI score0.00063EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/06 12:0 a.m.1 views

PT-2026-30182

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a use-after-free issue within the nd async device register function during asynchronous initialization. This occurred when device add failed, leading to a drop...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References44
Redos
Redos
added 2026/03/06 12:0 a.m.3 views

ROS-20260306-73-0009

A vulnerability in the ath11kcorehalt function of the drivers/net/wireless/ath/ath11k/core.c module of the Linux operating system kernel is related to corruption of a node in the arvifs list as a result of incorrect resource initialization. Exploitation of the vulnerability could allow an attacke...

5.5CVSS5.8AI score0.0011EPSS
Exploits0
OSV
OSV
added 2026/03/05 2:21 p.m.2 views

SUSE-RU-2026:20683-1 Recommended update for shim

This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shimstartimage: fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory -...

6.7CVSS5.8AI score0.00021EPSS
Exploits1References6
OSV
OSV
added 2026/03/05 9:12 a.m.1 views

RLSA-2026:3477 Moderate: gnutls security update

The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Stack-based Buffer Overflow in gnutlspkcs11tokeninit Function CVE-2025-9820 gnutls: GnuTLS: Denial of Service vi...

5.3CVSS5.8AI score0.00059EPSS
Exploits1References3
NVD
NVD
added 2026/03/05 3:15 a.m.4 views

CVE-2024-57854

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand function, which is not suitable fo...

9.1CVSS0.00015EPSS
Exploits0References3
OSV
OSV
added 2026/03/05 3:15 a.m.2 views

CVE-2024-57854

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand function, which is not suitable fo...

9.1CVSS5.8AI score0.00015EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/05 2:18 a.m.25 views

CVE-2024-57854 Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand function, which is not suitable fo...

0.00015EPSS
Exploits0References2
CVE
CVE
added 2026/03/05 2:18 a.m.4 views

CVE-2024-57854

CVE-2024-57854 affects Net::NSCA::Client (Perl) up to version 0.009002. The issue comes from using a non-cryptographically secure random number generator for IVs: v0.003 migrated to Data::Rand::Obscure, which relies on Perl’s rand() and is not suitable for cryptographic purposes. The connected de...

9.1CVSS5.9AI score0.00015EPSS
Exploits0References3Affected Software1
Amazon
Amazon
added 2026/03/05 12:0 a.m.7 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Reinit blkgiostatset after clearing in blkcgresetstats CVE-2023-53421 In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomapwritedelallocsca...

8.8CVSS6.4AI score0.00037EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005636)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005636 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cakeinit fails When the default qdisc is cak...

5.5CVSS6.7AI score0.00017EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:0 a.m.1 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005720 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cakeinit fails When the default qdisc is cak...

5.5CVSS5.9AI score0.00017EPSS
Exploits0References4
NVD
NVD
added 2026/03/04 6:16 p.m.4 views

CVE-2026-20065

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in the binder...

5.8CVSS0.00033EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/04 5:48 p.m.23 views

CVE-2026-20065 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in the binder...

5.8CVSS0.00033EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/04 5:48 p.m.3 views

CVE-2026-20065 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in the binder...

5.8CVSS6AI score0.00033EPSS
Exploits0References1
Ubuntu
Ubuntu
added 2026/03/04 3:34 p.m.5 views

USN-8074-1: Linux kernel (Azure) vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...

9.8CVSS7AI score0.00452EPSS
Exploits10
EUVD
EUVD
added 2026/03/04 3:30 p.m.1 views

EUVD-2026-9409

In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a few places in the Classmate laptop driver, code using the accel object may run before that object's address is stored in the driver data of the input device usi...

5.8AI score0.0001EPSS
Exploits0References8
OSV
OSV
added 2026/03/04 3:16 p.m.1 views

DEBIAN-CVE-2026-23237

In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a few places in the Classmate laptop driver, code using the accel object may run before that object's address is stored in the driver data of the input device usi...

5.5CVSS5.2AI score0.0001EPSS
Exploits0References1
Rows per page
Query Builder