CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1572 matches found

IBM Security Bulletins•added 2026/06/10 7:46 a.m.•16 views

Security Bulletin: IBM Cloud Pak for Data System 1.0 is affected by multiple vulnerabilities

Summary IBM Cloud Pak for Data System 1.0 CPDS 1.0 includes multiple third-party components that are affected by various security vulnerabilities. These vulnerabilities include integer overflow issues in GLib leading to heap corruption and denial of service, a write-what-where condition in the...

9.8CVSS7.4AI score0.93235EPSS

Exploits34Affected Software1

Tenable Nessus•added 2026/04/29 12:0 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-40356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gssacceptseccontext on a system...

7.5CVSS5.9AI score0.00501EPSS

Exploits1References3

ATTACKERKB•added 2026/04/28 12:0 a.m.•16 views

CVE-2026-40356

In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gssacceptseccontext on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process t...

5.9CVSS5.5AI score0.00501EPSS

Exploits1References4Affected Software1

CVE•added 2026/04/28 12:0 a.m.•83 views

CVE-2026-40355

CVE-2026-40355 affects MIT Kerberos 5 (krb5) before 1.22.3. The issue is a NULL pointer dereference in NegoEx parsing when an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing th...

7.5CVSS5.5AI score0.00507EPSS

Exploits1References5Affected Software1

CVE•added 2026/01/16 12:0 a.m.•475 views

CVE-2025-24528

CVE-2025-24528 affects MIT Kerberos 5 (krb5) up to but not including 1.22; the issue is an integer overflow in kdb_log.c during a large update resize, which can cause an out-of-bounds write and crash the kadmind daemon after authentication. Public references consistently describe the vulnerabilit...

7.1CVSS7.2AI score0.00606EPSS

Exploits0References3