Lucene search
+L

322067 matches found

SUSE CVE
SUSE CVE
added 6 days ago6 views

SUSE CVE-2026-45713

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.MaxSize int field that controls the maximum allowed DATA payload size, but the field is never assigned anywhere outside test code, leaving it at Go's zero value 0 ⇒ "no limit". T...

7.5CVSS7.6AI score0.00388EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 6 days ago5 views

SUSE CVE-2026-46602

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

7.5CVSS7.7AI score0.00335EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 6 days ago5 views

SUSE CVE-2026-48025

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master key; internal/pki/ca.go:13-16 stores it. Callers at...

6.9CVSS7.5AI score0.00291EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago10 views

EUVD-2026-51241

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...

7.1CVSS5.9AI score0.00353EPSS
SaveExploits0References3
Cvelist
Cvelist
added 6 days ago32 views

CVE-2026-12932

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...

7.1CVSS0.00353EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 6 days ago10 views

CVE-2026-12932

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...

7.1CVSS5.9AI score0.00353EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 6 days ago24 views

CVE-2026-12932

CVE-2026-12932 is a memory-leak vulnerability in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0–2.6.20 and 2.7_alpha1–2.7.4 that can be exploited remotely by a flood of crafted packets to cause memory exhaustion/DoS. Public advisories/OSV entries indicate fixes in later OpenVPN releases ...

7.1CVSS5.9AI score0.00353EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 6 days ago7 views

CVE-2026-12932

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...

7.1CVSS5.9AI score0.00353EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 6 days ago5 views

SUSE CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

8.2CVSS5.6AI score0.00318EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 6 days ago5 views

SUSE CVE-2026-55078

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, POST /api/v2/files converts zip uploads to tar in memory via CreateTarFromZip, which enforced a per-entry size limit but no...

6.5CVSS7.7AI score0.00338EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 6 days ago5 views

SUSE CVE-2026-55434

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.34.2, AI Bridge provider handlers read request bodies with io.ReadAll without a maximum size so an authenticated user with AI Bridge access could se...

6.5CVSS7.7AI score0.00307EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago13 views

EUVD-2026-51239

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

6CVSS5.9AI score0.00397EPSS
SaveExploits0References3
Cvelist
Cvelist
added 6 days ago37 views

CVE-2026-12996

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

6CVSS0.00397EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 6 days ago9 views

CVE-2026-12996

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

6CVSS5.5AI score0.00397EPSS
SaveExploits0References3
CVE
CVE
added 6 days ago25 views

CVE-2026-12996

Summary: CVE-2026-12996 is a use-after-free in OpenVPN (versions 2.6.0–2.6.20 and 2.7_alpha1–2.7.4) that can allow remote authenticated peers to cause denial of service or memory leaks through crafted packets during TLS session promotion or expiry. The issue centers on the ack_write_buf handling ...

6CVSS5.9AI score0.00397EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 6 days ago7 views

CVE-2026-12996

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

6CVSS5.9AI score0.00397EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 6 days ago9 views

CVE-2026-12996

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

6CVSS5.9AI score0.00397EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 6 days ago6 views

SUSE CVE-2026-55882

Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.19.5 through 0.37.3, the Tilt HUD server mounts Go net/http/pprof handlers under /debug with no access control. When the HUD or apiserver listener is network-exposed, an unauthenticated caller can read process memor...

8.3CVSS7.8AI score0.00384EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 6 days ago7 views

CVE-2026-11885

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...

8.4CVSS5.9AI score0.00101EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago11 views

EUVD-2026-51238

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...

8.4CVSS5.9AI score0.00101EPSS
SaveExploits0References1
Rows per page
Query Builder