Lucene search
K

606 matches found

NVD
NVD
added yesterday5 views

CVE-2026-8881

Version 3.0.7 of the Securly Chrome Extension uses EVPBytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no key stretching...

Exploits0References1
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-8881

Version 3.0.7 of the Securly Chrome Extension uses EVPBytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no key stretching...

5.7AI score
Exploits0References2
Cvelist
Cvelist
added yesterday16 views

CVE-2026-8881 CVE-2026-8881

Version 3.0.7 of the Securly Chrome Extension uses EVPBytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no key stretching...

Exploits0References1
CVE
CVE
added yesterday4 views

CVE-2026-8881

CVE-2026-8881 affects the Securly Chrome Extension (version 3.0.7). The crypto uses EVP_BytesToKey with MD5 and a single iteration for AES encryption, relying on an MD5 primitive that has been broken since 2004 and provides no key stretching. This weak derivation reduces the security of protected...

5.7AI score
Exploits0References1
Positive Technologies
Positive Technologies
added yesterday4 views

PT-2026-46052

Name of the Vulnerable Software and Affected Versions Securly Chrome Extension version 3.0.7 Description The software uses the EVP BytesToKey key derivation function with MD5 and a single iteration for AES encryption. MD5 is a cryptographic hash function that is no longer secure, and the use of a...

5.8AI score
Exploits0References3
CVE
CVE
added 3 days ago8 views

CVE-2025-70099

CVE-2025-70099 : The Red Hat/NVD entries describe a NULL pointer dereference in lwext4 1.0.0 within ext4_dir_en_get_name_len (include/ext4_dir.h). During directory iteration, the code may not validate the directory entry pointer before accessing name_len, allowing a segmentation fault and denial ...

7.5CVSS5.9AI score0.00038EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-45548

A NULL pointer dereference in the ext4 dir en get name len function in include/ext4 dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially crafted EXT4 filesystem image with malformed directory entries. During directory iteration, the code may fail to validat...

5.9AI score0.00038EPSS
Exploits0References4
Snyk
Snyk
added 2026/05/28 4:50 p.m.7 views

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration via the processing of cross-reference streams containing /W values set to 0 0 0 and large /Size values. An...

5.1CVSS5.8AI score0.00012EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/28 3:26 p.m.9 views

CVE-2026-46166

A flaw was found in the Linux kernel's mac80211 wireless subsystem. This vulnerability arises from unsafe list iteration during radar detection work, where a channel context can be freed while still being processed. This can lead to a use-after-free memory error. A successful exploit could result...

8.8CVSS5.8AI score0.00021EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/28 9:36 a.m.22 views

CVE-2026-46166 wifi: mac80211: use safe list iteration in radar detect work

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211dfscaccancel can cause the iterated chanctx to be freed and removed from the list. Guard against this to avoid a slab-use-after-free error...

8.8CVSS0.00021EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/28 9:36 a.m.2 views

EUVD-2026-32793

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211dfscaccancel can cause the iterated chanctx to be freed and removed from the list. Guard against this to avoid a slab-use-after-free error...

5.8AI score0.00021EPSS
Exploits0References4
CVE
CVE
added 2026/05/28 9:36 a.m.8 views

CVE-2026-46166

The CVE-2026-46166 affects the Linux kernel’s wireless subsystem (mac80211) in the radar detect work. The root cause is unsafe list iteration during radar processing, where ieee80211_dfs_cac_cancel can free the iterated chanctx and remove it from the list, causing a slab-use-after-free. A guarded...

8.8CVSS5.8AI score0.00021EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:36 a.m.5 views

CVE-2026-46166

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211dfscaccancel can cause the iterated chanctx to be freed and removed from the list. Guard against this to avoid a slab-use-after-free error...

5.8AI score0.00021EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2026/05/28 9:36 a.m.5 views

CVE-2026-46166

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211dfscaccancel can cause the iterated chanctx to be freed and removed from the list. Guard against this to avoid a slab-use-after-free error...

8.8CVSS5.7AI score0.00021EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.5 views

PT-2026-44289

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211 dfs cac cancel can cause the iterated chanctx to be freed and removed from the list. Guard against this to avoid a slab-use-after-free error...

5.8AI score0.00021EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.8 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of use of a security list iteration in the mac80211 radar detection process. This...

8.8CVSS5.8AI score0.00021EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/05/26 2:24 p.m.9 views

CVE-2026-42923

A flaw was found in Unbound's DNSSEC validator where the code path for consulting the negative cache for DS records does not honor the limit on NSEC3 hash calculations introduced in version 1.19.1. An adversary who controls a DNSSEC-signed zone can sign NSEC3 records with high iteration counts fo...

6.9CVSS5.7AI score0.00057EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2026/05/26 8:41 a.m.55 views

AI_AutoExploitGeneration

🎯 AI-POWERED AUTOMATED EXPLOIT GENERATION AEG SYSTEM Vers...

5.9AI score
Exploits0
OSV
OSV
added 2026/05/22 1:22 p.m.1 views

OESA-2026-2446 postgresql-jdbc security update

PostgreSQL JDBC Driver PgJDBC for short allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. Is an open source JDBC driver written in Pure Java Type 4, and communicates in the PostgreSQL native network protocol. Security Fixes: pgjdbc is an open...

7.5CVSS5.7AI score0.00043EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: erofs: Fixed the issue where xasretry was missing in the fscache mode. The xarray iteration only holds the RCU read lock; therefore, an XARETRYENTRY might be encountered if a process modifies the xarray concurrently. This would...

5.5CVSS5.8AI score0.00074EPSS
Exploits0References2
Rows per page
Query Builder