Lucene search
K

76 matches found

NVD
NVD
added 2026/06/17 8:17 p.m.6 views

CVE-2026-55200

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to corrupt heap memory and achieve...

9.2CVSS0.00912EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/04/06 6:37 p.m.4 views

CVE-2026-35549

A flaw was found in MariaDB Server. When the cachingsha2password authentication plugin is installed and used by some user accounts, a low-privileged authenticated user can send a specially crafted large packet. This can cause the server to crash due to an issue with the sha256cryptr function's us...

6.5CVSS5.8AI score0.00256EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/06 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-35549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication...

6.5CVSS6AI score0.00256EPSS
Exploits0References3
NVD
NVD
added 2026/04/03 5:16 a.m.8 views

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256cryptr uses allo...

6.5CVSS0.00256EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/04/03 5:16 a.m.2 views

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256cryptr uses allo...

6.5CVSS5.9AI score0.00256EPSS
Exploits0References2
MariaDBUnix
MariaDBUnix
added 2026/04/03 5:0 a.m.12 views

CVE-2026-35549

Disclaimer: This data contains information about vulnerable...

6.5CVSS5.9AI score0.00256EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/04/03 5:0 a.m.2 views

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256cryptr uses allo...

6.5CVSS5.9AI score0.00256EPSS
Exploits0References1
CVE
CVE
added 2026/04/03 5:0 a.m.48 views

CVE-2026-35549

Summary: CVE-2026-35549 affects MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password plugin is installed and some accounts use it, a large packet can crash the server because sha256_crypt_r uses alloca. Impact: Availability is HI...

6.5CVSS5.9AI score0.00256EPSS
Exploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/04/03 5:0 a.m.9 views

CVE-2026-35549

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the cachingsha2password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256cryptr uses allo...

6.5CVSS5.8AI score0.00256EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: corosync (UTSA-2026-005515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005515 advisory. Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in orftokenendianconvert in...

9.8CVSS6.2AI score0.00433EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2011-1153

Malware in sbrugna...

4.3CVSS7.3AI score0.03277EPSS
Exploits1References32
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-1424

Malware in sbrugna...

7.5CVSS7.6AI score0.02589EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-1787

Malware in sbrugna...

7.7CVSS6.3AI score0.039EPSS
Exploits0References20
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-36049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - socket.io-parser before 3.4.1 allows attackers to cause a denial of service memory consumption via a large packet because a concatenation approach is used...

7.5CVSS7.1AI score0.02589EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/07/10 1:25 p.m.5 views

CVE-2025-27058

Memory corruption while processing packet data with exceedingly large packet...

7.8CVSS7.5AI score0.00087EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/03/23 12:0 a.m.3 views

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that originates from imprope...

8.6CVSS7.9AI score0.0098EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/02/21 8:0 p.m.56 views

K25423748: QEMU vulnerability CVE-2019-14378

Security Advisory Description ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment. CVE-2019-14378 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Statu...

8.8CVSS7.5AI score0.16658EPSS
Exploits3
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.3 views

SUSE CVE-2006-0579

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

7.5CVSS7.8AI score0.03946EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:36 a.m.4 views

SUSE CVE-2013-4387

net/ipv6/ip6output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload UFO processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service memory corruption and system crash or...

6.1CVSS7.4AI score0.02578EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:35 a.m.4 views

SUSE CVE-2013-4563

The udp6ufofragment function in net/ipv6/udpoffload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly perform a certain size comparison before inserting a fragment header, which allows remote attackers to cause a denial of service panic via a lar...

7.1CVSS5.6AI score0.03899EPSS
Exploits1References4
Rows per page
Query Builder