Lucene search
+L

33 matches found

NVD
NVD
•added 2026/09/24 9:17 p.m.•15 views

CVE-2026-14443

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

8.4CVSS0.00112EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/24 8:06 p.m.•9 views

CVE-2026-14443 Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

8.4CVSS5.7AI score0.00112EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 8:06 p.m.•12 views

EUVD-2026-86457

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

8.4CVSS5.7AI score0.00112EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 8:06 p.m.•26 views

CVE-2026-14443

Brocade SANnav versions before 3.0.1a are vulnerable to incomplete log sanitization during bulk IPsec policy collection. This flaw allows extension switch pre-shared keys to be written to system logs. Attackers with read access to container logs or support archives can retrieve these keys, potent...

8.4CVSS5.7AI score0.00112EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 8:06 p.m.•34 views

CVE-2026-14443 Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

8.4CVSS0.00112EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/24 7:08 p.m.•14 views

CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 7:08 p.m.•28 views

CVE-2026-82372

Brocade SANnav versions prior to 3.0.1a are vulnerable to improper handling of sensitive data during IPsec policy creation and modification. This flaw causes pre-shared keys to be recorded in application logs, potentially exposing credentials used to secure network tunnels to individuals with rea...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 7:08 p.m.•39 views

CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

8.5CVSS0.00168EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•7 views

CVE-2026-14443: Insertion of Sensitive Information into Log File

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

8.4CVSS5.7AI score0.00112EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•7 views

CVE-2026-82372: Insertion of Sensitive Information into Log File

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0References2
Broadcom
Broadcom
•added 2026/09/22 12:00 a.m.•15 views

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

8.4CVSS5.7AI score0.00112EPSS
SaveExploits0
Broadcom
Broadcom
•added 2026/09/22 12:00 a.m.•12 views

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/08/11 3:31 p.m.•16 views

CVE-2026-68420

A flaw was found in the Linux kernel's xfrm component. A local user could trigger a stack-out-of-bounds read by configuring an outbound Internet Protocol Security IPsec policy with optional IPsec Flow Template Specification IPTFS templates. This vulnerability can lead to a system crash, resulting...

7.1CVSS5.8AI score0.00164EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/05 8:16 a.m.•11 views

UBUNTU-CVE-2026-64581

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...

7.8CVSS6.2AI score0.00117EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/05 8:09 a.m.•244 views

CVE-2026-64581

CVE-2026-64581 is a Linux kernel vulnerability in the xfrm code. The issue arises in xfrm_user_policy(), which clears the socket destination cache (sk_dst_cache) non‑atomically, allowing a race with a per‑socket policy change that can cause the same dst to be released twice, freeing the xfrm_dst ...

7.8CVSS6.1AI score0.00117EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/05/28 3:56 a.m.•27 views

SUSE CVE-2026-45905

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix iprtbug race in icmproutelookup reverse path icmproutelookup performs multiple route lookups to find a suitable route for sending ICMP error messages, with special handling for XFRM IPsec policies. The lookup sequence i...

5.5CVSS5.8AI score0.00111EPSS
SaveExploits0References18
NVD
NVD
•added 2026/05/27 2:17 p.m.•20 views

CVE-2026-45905

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix iprtbug race in icmproutelookup reverse path icmproutelookup performs multiple route lookups to find a suitable route for sending ICMP error messages, with special handling for XFRM IPsec policies. The lookup sequence i...

4.7CVSS0.00111EPSS
SaveExploits0References6
CVE
CVE
•added 2026/05/27 12:17 p.m.•53 views

CVE-2026-45905

CVE-2026-45905 is a Linux kernel networking vulnerability in the xfrm/icmp_route_lookup reverse path. The race occurs during ICMP error handling when a concurrent address change may cause ip_route_input() to return a LOCAL route with a dst that can trigger a WARN_ON in ip_rt_bug. The fix checks t...

4.7CVSS5.8AI score0.00111EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2008-1342

Malware in sbrugna...

9.3CVSS6.4AI score0.01938EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/23 3:19 a.m.•14 views

CVE-2023-2385

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=ikepolicies.htm of the component Web Management Interface. The manipulation of the argument IpsecIKEPolicy.IKEPolicyName...

4.8CVSS5.6AI score0.00649EPSS
SaveExploits1References1
Rows per page
Query Builder