92 matches found
CVE-2026-121505
A flaw was found in NTPsec. A malicious Network Time Security Key Exchange NTS-KE server can cause information disclosure by sending a response record with a declared length exceeding the data received. This triggers an out-of-bounds read in the client response parser, allowing the server to...
CVE-2026-121505
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
EUVD-2026-115826
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
CVE-2026-121505 Out-of-bounds Read in NTPsec
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
CVE-2026-121505 Out-of-bounds Read in NTPsec
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
CVE-2026-121505
NTPsec versions before 1.2.4 are vulnerable to an out-of-bounds read in the nts_client_process_response_core function of the NTS-KE client response parser. A malicious NTS-KE server can trigger this by sending a record where the declared length exceeds the actual data received. This allows the se...
CVE-2026-121505: NTPsec: An out-of-bounds read in the NTS-KE client response parser (nts_client_process_response_core) in NTPsec before 1.2.4…
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
Malicious code in ke-moma (npm)
Source: amazon-inspector d055ad9b9b61ad21df044f2fa8e31497087dc013102277db91bd478f412333ef The package ke-moma was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ke-moma2 (npm)
Source: amazon-inspector 9d8703622faa5dfbd1a83aa416844cfa365266b95b4b4e2e99b597e60b26d578 The package ke-moma2 was found to contain malicious code. --- Credit: OpenSSF source...
UBUNTU-CVE-2026-78133
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...
CVE-2026-78133
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...
Wireshark read_cli_parser_preference Heap Buffer Overflow DoS
The vulnerability of the readcli parserpreference function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark is related to the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
XML External Entity (XXE) Injection
Overview tpwd/kesearch is a search extension for TYPO3, including faceting search functions. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the additionaltables configuration of the page and ttcontent indexers that accept arbitrary table and field names....
GHSA-C72X-MC2P-WV7X TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer
In TYPO3 faceted fulltext search kesearch, the file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences. This has been patche...
TYPO3 ke_search XML External Entity Injection
In TYPO3 faceted fulltext search kesearch, the OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being...
GHSA-FQ39-62GX-8HQX TYPO3 ke_search XML External Entity Injection
In TYPO3 faceted fulltext search kesearch, the OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being...
TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer
In TYPO3 faceted fulltext search kesearch, the file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences. This has been patche...
CVE-2026-46724
CVE-2026-46724 affects the Typo3 extension Faceted Search (ke_search). The file indexer does not normalize the configured directory path, allowing a backend user with permission to edit indexer configurations to index documents from arbitrary server file-system locations via path traversal. CVSS ...
CVE-2026-46723 Information Disclosure in extension "Faceted Search" (ke_search)
The additionaltables configuration of the page and ttcontent indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index...
