Lucene search
K

207 matches found

Cvelist
Cvelist
added 2026/04/03 3:28 a.m.13 views

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

3.7CVSS0.00475EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/04/03 3:28 a.m.5 views

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

3.7CVSS6AI score0.00475EPSS
Exploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/03 3:28 a.m.5 views

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

3.7CVSS6AI score0.00475EPSS
Exploits0References7
CVE
CVE
added 2026/04/03 3:28 a.m.20 views

CVE-2026-35537

The CVE-2026-35537 vulnerability affects Roundcube Webmail prior to 1.5.14 and 1.6.14, where unsafe deserialization in the redis/memcache session handler can allow unauthenticated attackers to perform arbitrary file writes via crafted session data. Several advisories confirm this issue and refere...

7.5CVSS6AI score0.00475EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2026/04/03 3:28 a.m.6 views

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

7.5CVSS5.7AI score0.00475EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/03 12:0 a.m.4 views

PT-2026-29975

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

3.7CVSS6AI score0.00475EPSS
Exploits0References8
Snyk
Snyk
added 2025/12/18 10:43 p.m.2 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the ParseUDP function. An attacker can cause the application to crash or exhaust resources by sending a single crafted UDP packet with an invalid fragment sequence number. Remediation Upgrade...

7.1CVSS6.6AI score0.00387EPSS
Exploits0References2
Snyk
Snyk
added 2025/12/18 10:43 p.m.3 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the ParseUDP function. An attacker can cause the application to crash or exhaust resources by sending a single crafted UDP packet with an invalid fragment sequence number. Remediation Upgrade...

7.1CVSS6.5AI score0.00387EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-5234

Malware in sbrugna...

4.3CVSS6.4AI score0.01161EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-18100

Malware in sbrugna...

8.1CVSS8AI score0.0143EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-5235

Malware in sbrugna...

4.3CVSS6.4AI score0.01011EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-0116

Malware in sbrugna...

9.8CVSS9.2AI score0.01764EPSS
Exploits1References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-0115

Malware in sbrugna...

9.8CVSS9.2AI score0.01696EPSS
Exploits1References17
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-6340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames...

8.1CVSS7.6AI score0.0143EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-8165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A deserialization of untrusted data vulnernerability exists in rails 5.2.4.3, rails 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in...

9.8CVSS8AI score0.44398EPSS
Exploits5References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-37996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in usermemabort Commit fce886a60207 KVM: arm6...

5.5CVSS6.6AI score0.00127EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/05/30 1:26 a.m.3 views

SUSE CVE-2025-37996

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in usermemabort Commit fce886a60207 "KVM: arm64: Plumb the pKVM MMU in KVM" made the initialization of the local memcache variable in usermemabort conditional, leaving a codepath whe...

5.5CVSS6.2AI score0.00127EPSS
Exploits0References3
NVD
NVD
added 2025/05/29 2:15 p.m.10 views

CVE-2025-37996

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in usermemabort Commit fce886a60207 "KVM: arm64: Plumb the pKVM MMU in KVM" made the initialization of the local memcache variable in usermemabort conditional, leaving a codepath whe...

5.5CVSS0.00127EPSS
Exploits0References2
OSV
OSV
added 2025/05/29 2:15 p.m.2 views

UBUNTU-CVE-2025-37996

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in usermemabort Commit fce886a60207 "KVM: arm64: Plumb the pKVM MMU in KVM" made the initialization of the local memcache variable in usermemabort conditional, leaving a codepath whe...

5.5CVSS6.6AI score0.00127EPSS
Exploits0References8
Cvelist
Cvelist
added 2025/05/29 1:15 p.m.17 views

CVE-2025-37996 KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in usermemabort Commit fce886a60207 "KVM: arm64: Plumb the pKVM MMU in KVM" made the initialization of the local memcache variable in usermemabort conditional, leaving a codepath whe...

0.00127EPSS
Exploits0References2
Rows per page
Query Builder