Lucene search
+L

10929 matches found

OSV
OSV
added 2026/07/17 7:42 p.m.6 views

GO-2026-6008 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

Envoy Gateway: OCI layer extraction allocates makebyte, h.Size from untrusted tar header in github.com/envoyproxy/gateway...

5.2AI score0.00044EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/17 7:32 p.m.35 views

CVE-2026-4942

CVE-2026-4942 affects IBM i releases 7.3–7.6 (5770-SS1). The issue arises in TLS negotiation where a remote attacker can craft a message to downgrade the TLS protocol to a version disabled by server configuration, leveraging an algorithm downgrade during negotiation. The IBM bulletin lists a CVSS...

7.5CVSS5.4AI score0.00253EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/17 7:32 p.m.41 views

CVE-2026-4942 IBM i is Affected by Algorithm Downgrade in Transport Layer Security []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security TLS protocol to a version disabled in the server configuration...

5.9CVSS0.00253EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/17 7:17 p.m.10 views

CVE-2026-53712

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to 3.3, a flaw in com.ongres.scram:scram-client and com.ongres.scram:scram-common allows an attacker capable of a TLS...

8.2CVSS0.00167EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/17 6:19 p.m.71 views

CVE-2026-53712

The CVE describes a vulnerability in the OnGres SCRAM library (com.ongres.scram:scram-client and scram-common) where, prior to version 3.3, a TLS MITM can silently downgrade SCRAM-SHA-256-PLUS with channel binding to SCRAM-SHA-256 without channel binding when an X.509 certificate uses modern sign...

8.2CVSS5.4AI score0.00167EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/17 2:17 p.m.16 views

CVE-2024-23573

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of...

3.7CVSS0.00155EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/17 1:42 p.m.43 views

CVE-2024-23573

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of...

3.7CVSS0.00155EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/17 1:42 p.m.21 views

CVE-2024-23573

CVE-2024-23573 affects HCL Aftermarket EPC. The vulnerability is described as the application being vulnerable to Lucky 13, making the TLS1.1/1.2 and DTLS1.0/1.2 implementations (and older SSL3.0/TLS1.0) susceptible, with potential for a man-in-the-middle. The Connected documents provide the tech...

3.7CVSS5.3AI score0.00155EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/17 1:42 p.m.22 views

EUVD-2024-55663

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of...

3.7CVSS5.3AI score0.00155EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/17 1:42 p.m.14 views

CVE-2024-23573

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of...

3.7CVSS5.3AI score0.00155EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2026/07/17 1:38 p.m.13 views

SUSE CVE-2024-10006

A vulnerability was identified in Consul and Consul Enterprise “Consul” such that using Headers in L7 traffic intentions could bypass HTTP header based access rules...

5.8CVSS7.1AI score0.00463EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/17 12:50 p.m.13 views

CVE-2026-13410 Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled

Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled. The default user agent is initialised with SSLverifymode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept the...

5.3AI score0.0026EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/17 10:10 a.m.13 views

USN-8490-2 linux-realtime, linux-realtime-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

9.8CVSS6.9AI score0.01338EPSS
SaveExploits9References62
Ubuntu
Ubuntu
added 2026/07/17 10:10 a.m.17 views

USN-8490-2: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

9.8CVSS6.9AI score0.01338EPSS
SaveExploits9
Ubuntu
Ubuntu
added 2026/07/17 10:7 a.m.30 views

USN-8490-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

9.8CVSS6.2AI score0.01338EPSS
SaveExploits9
OSV
OSV
added 2026/07/17 10:7 a.m.17 views

USN-8490-1 linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

9.8CVSS6.9AI score0.01338EPSS
SaveExploits9References62
Fedora
Fedora
added 2026/07/17 1:9 a.m.19 views

[SECURITY] Fedora 43 Update: rust-opendal-0.55.0-2.fc43

OpenDAL is an Open Data Access Layer that enables seamless interaction with diverse storage services...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/17 12:0 a.m.7 views

Oracle Linux 10 : ruby (ELSA-2026-33565)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33565 advisory. - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in...

7.6CVSS5.4AI score0.00783EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/16 11:16 p.m.8 views

CVE-2026-44452

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientHello message over TLS or QUIC and it contains a zero-length SNI extension, the h2o server runs over the zero-length hostname while trying to copy the hostname, assuming that it ...

5.9CVSS0.0025EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/16 10:54 p.m.42 views

CVE-2026-44452 h2o is vulnerable to heap overrun

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientHello message over TLS or QUIC and it contains a zero-length SNI extension, the h2o server runs over the zero-length hostname while trying to copy the hostname, assuming that it ...

5.9CVSS0.0025EPSS
SaveExploits0References2
Rows per page
Query Builder