Lucene search
K

69 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/20 12:0 a.m.2 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021589 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings,...

5.5CVSS6.3AI score0.00049EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/04/14 1:22 a.m.3 views

CVE-2026-35040

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are statef...

5.3CVSS5.8AI score0.00182EPSS
Exploits1References1
OSV
OSV
added 2026/04/09 4:41 p.m.0 views

GHSA-3J8V-CGW4-2G6Q fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

Impact Using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are stateful and will cause failures in every second verification attempt...

5.3CVSS5.8AI score0.00182EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2026/04/09 4:41 p.m.6 views

fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

Impact Using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are stateful and will cause failures in every second verification attempt...

5.3CVSS5.9AI score0.00182EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2026/04/09 4:41 p.m.1 views

EUVD-2026-20898

fast-jwt: Stateful RegExp /g or /y causes non-deterministic allowed-claim validation logical DoS...

5.3CVSS5.9AI score0.00182EPSS
Exploits1References4
NVD
NVD
added 2026/04/09 4:16 p.m.1 views

CVE-2026-35040

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are statef...

5.3CVSS0.00182EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/04/09 2:52 p.m.2 views

CVE-2026-35040

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are statef...

5.3CVSS5.9AI score0.00182EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/09 2:52 p.m.0 views

CVE-2026-35040 fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are statef...

5.3CVSS5.8AI score0.00182EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/04/09 2:52 p.m.14 views

CVE-2026-35040 fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are statef...

5.3CVSS0.00182EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.1 views

PT-2026-31621

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are statef...

5.3CVSS5.9AI score0.00182EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2025/11/14 1:3 a.m.2 views

tracing: Do not let histogram values have some modifiers

...

5.5CVSS7.6AI score0.00049EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-5834

Malware in sbrugna...

6.5CVSS6.6AI score0.00686EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/14 12:0 a.m.8 views

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1957)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gpio: Restrict usage of GPIO chip irq members before initializationCVE-2022-49072 mmc: core: use sysfsemit instead of sprintf.CVE-2022-49267 ipv4:...

7.8CVSS7.6AI score0.00126EPSS
Exploits0References47
RedHat Linux
RedHat Linux
added 2025/05/13 8:29 a.m.2 views

Xorg: xwayland: Buffer overflow in XkbVModMaskText()

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size...

7.8CVSS6AI score0.00029EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.2 views

Xorg: xwayland: Buffer overflow in XkbVModMaskText()

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size...

7.8CVSS6AI score0.00029EPSS
Exploits0References4
NVD
NVD
added 2025/05/02 4:15 p.m.7 views

CVE-2023-53093

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings, stacktraces, graphs, symbols, syscalls, or grouped in buckets or log. Give an error if a value is set to do so. Note, the histogram cod...

5.5CVSS0.00049EPSS
Exploits0References3
OSV
OSV
added 2025/05/02 4:15 p.m.2 views

AZL-70135 CVE-2023-53093 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings, stacktraces, graphs, symbols, syscalls, or grouped in buckets or log. Give an error if a value is set to do so. Note, the histogram cod...

5.5CVSS6.2AI score0.00049EPSS
Exploits0References1
OSV
OSV
added 2025/05/02 4:15 p.m.1 views

DEBIAN-CVE-2023-53093

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings, stacktraces, graphs, symbols, syscalls, or grouped in buckets or log. Give an error if a value is set to do so. Note, the histogram cod...

5.5CVSS5.6AI score0.00049EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/05/02 4:15 p.m.2 views

CVE-2023-53093

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings, stacktraces, graphs, symbols, syscalls, or grouped in buckets or log. Give an error if a value is set to do so. Note, the histogram cod...

5.5CVSS6.2AI score0.00049EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/05/02 4:15 p.m.0 views

UBUNTU-CVE-2023-53093

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings, stacktraces, graphs, symbols, syscalls, or grouped in buckets or log. Give an error if a value is set to do so. Note, the histogram cod...

5.5CVSS6.1AI score0.00049EPSS
Exploits0References6
Rows per page
Query Builder