Lucene search
K

2376 matches found

Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.15 views

PT-2026-39160

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior...

7.5CVSS5.8AI score0.00255EPSS
Exploits0References3
NVD
NVD
added 2026/04/29 5:16 p.m.6 views

CVE-2026-6914

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior...

7.5CVSS0.00255EPSS
Exploits0References1
OSV
OSV
added 2026/04/29 5:16 p.m.4 views

UBUNTU-CVE-2026-6914

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior...

7.5CVSS5.8AI score0.00255EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/29 4:47 p.m.35 views

CVE-2026-6914 MD5 checksum creation may cause availability loss

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior...

7.1CVSS0.00255EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.5 views

PT-2026-35956

Name of the Vulnerable Software and Affected Versions MongoDB Server versions 8.2 MongoDB Server versions 8.1 MongoDB Server versions prior to 8.0.21 MongoDB Server versions prior to 7.0.32 Description Computing the MD5 checksum of a malformed BSON Binary JSON object under specific conditions may...

7.5CVSS5.8AI score0.00255EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.4 views

EulerOS 2.0 SP10 : krb5 (EulerOS-SA-2025-2391)

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5...

5.9CVSS6.9AI score0.00276EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-15413

Malware in sbrugna...

9.8CVSS9.2AI score0.00344EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2005-4443

Malware in sbrugna...

10CVSS6.4AI score0.02819EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-43200

Malicious code in bioql PyPI...

9.1CVSS6.4AI score0.00258EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-10925

Malicious code in bioql PyPI...

5.9CVSS6.6AI score0.00276EPSS
Exploits0References16
RedhatCVE
RedhatCVE
added 2025/07/27 12:19 a.m.7 views

CVE-2025-45467

Unitree Go1 = Go120220511 is vulnerable to Insecure Permissions as the firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation...

7.1CVSS7.3AI score0.00301EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2025/07/25 12:0 a.m.5 views

CVE-2025-45467

Unitree Go1 = Go120220511 is vulnerable to Insecure Permissions as the firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation...

7.2AI score0.00301EPSS
Exploits2References2
Cvelist
Cvelist
added 2025/07/25 12:0 a.m.10 views

CVE-2025-45467

Unitree Go1 = Go120220511 is vulnerable to Insecure Permissions as the firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation...

0.00301EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.5 views

PT-2025-30849 · Unitree · Unitree Go 1

Name of the Vulnerable Software and Affected Versions: Unitree Go1 versions Go1 2022 05 11 and earlier Description: The firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that relies solely on MD5 checksums for firmware integrity validation...

7.1CVSS6.5AI score0.00301EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2025/05/30 12:0 a.m.8 views

Debian dla-4195 : krb5-admin-server - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4195 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4195-1 [email protected] https://www.debian.org/lts/security/...

5.9CVSS6.8AI score0.00276EPSS
Exploits0References4
OSV
OSV
added 2025/04/15 6:15 a.m.8 views

CVE-2025-3576

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This ma...

5.9CVSS6.6AI score0.00276EPSS
Exploits0References15
NVD
NVD
added 2025/04/15 6:15 a.m.17 views

CVE-2025-3576

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This ma...

5.9CVSS0.00276EPSS
Exploits0References16
CVE
CVE
added 2025/04/15 5:55 a.m.159 views

CVE-2025-3576

CVE-2025-3576 affects MIT Kerberos (krb5) with RC4-HMAC-MD5, enabling message spoofing via MD5 collisions in GSSAPI-protected messages. Public advisories (Red Hat, Debian, Amazon Linux, AlmaLinux, etc.) indicate the vulnerability exists in krb5 and provide remediation guidance. Impact is limited ...

5.9CVSS5.6AI score0.00276EPSS
Exploits0References16
Cvelist
Cvelist
added 2025/04/15 5:55 a.m.29 views

CVE-2025-3576 Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This ma...

5.9CVSS0.00276EPSS
Exploits0References14
RedhatCVE
RedhatCVE
added 2025/04/15 5:32 a.m.16 views

CVE-2025-3576

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This ma...

5.9CVSS5.5AI score0.00276EPSS
Exploits0References3
Rows per page
Query Builder