Lucene search
+L

638 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/10 12:00 a.m.•21 views

EulerOS 2.0 SP12 : python-pyasn1 (EulerOS-SA-2026-2561)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from...

7.5CVSS6.5AI score0.00771EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/07/07 4:03 p.m.•29 views

pyasn1 has a DoS vulnerability in decoder

SummaryAfter reviewing pyasn1 v0.6.1 a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. DetailsThe integer issue can be found in the decoder as reloid += subId 7 + nextSubId,:...

7.5CVSS6.6AI score0.00771EPSS
SaveExploits0References10Affected Software1
OSV
OSV
•added 2026/07/07 4:03 p.m.•18 views

PYSEC-2026-1810 pyasn1 has a DoS vulnerability in decoder

Summary After reviewing pyasn1 v0.6.1 a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. Details The integer issue can be found in the decoder as reloid += subId 7 + nextSubId,:...

7.5CVSS6.7AI score0.00771EPSS
SaveExploits0References10
NVD
NVD
•added 2026/06/24 9:16 p.m.•24 views

CVE-2026-52812

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone /// but per-repo authorization lives in the lfsobject table keyed repoid, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repoid, oid r...

7.1CVSS0.00236EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/06/24 8:32 p.m.•31 views

EUVD-2026-39083

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone /// but per-repo authorization lives in the lfsobject table keyed repoid, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repoid, oid r...

7.1CVSS5.9AI score0.00236EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/24 12:00 a.m.•3 views

CVE-2026-52812: Insufficient Verification of Data Authenticity

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone / / / but per-repo authorization lives in the lfsobject table keyed repoid, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repoid, oid...

7.1CVSS5.8AI score0.00236EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/06/22 8:56 p.m.•27 views

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-pyasn1) security update

An update for python-pyasn1 is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.7AI score0.00771EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/06/22 8:56 p.m.•24 views

pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID

A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service DoS f...

7.5CVSS6.7AI score0.00771EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/06/20 2:35 a.m.•26 views

SUSE CVE-2026-12044

SQL injection in pgAdmin 4 across every dialog template that renders COMMENT ON ... IS '' for a user-supplied description field. The Jinja templates for Domains and their constraints, Foreign Tables, Languages, and Event Triggers, plus the Views OID-lookup query, interpolated the description...

8.8CVSS7.7AI score0.00709EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/18 11:37 p.m.•71 views

CVE-2026-12044 pgAdmin 4: SQL injection in COMMENT ON ... IS '<description>' rendering across dialog templates

SQL injection in pgAdmin 4 across every dialog template that renders COMMENT ON ... IS '' for a user-supplied description field. The Jinja templates for Domains and their constraints, Foreign Tables, Languages, and Event Triggers, plus the Views OID-lookup query, interpolated the description...

8.8CVSS0.00709EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•37 views

PT-2026-50810

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 1.0 through 9.15 Description SQL injection is possible across multiple dialog templates that render descriptions for Domains, Foreign Tables, Languages, and Event Triggers, as well as the Views OID-lookup query. The issue...

9CVSS8.1AI score0.00709EPSS
SaveExploits0References42
Tenable Nessus
Tenable Nessus
•added 2026/06/12 12:00 a.m.•27 views

EulerOS Virtualization 2.13.1 : python-pyasn1 (EulerOS-SA-2026-2387)

According to the versions of the python-pyasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

7.5CVSS6.3AI score0.00931EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/06/12 12:00 a.m.•25 views

EulerOS Virtualization 2.13.0 : python-pyasn1 (EulerOS-SA-2026-2416)

According to the versions of the python-pyasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

7.5CVSS6.3AI score0.00931EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:00 a.m.•20 views

EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-2262)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from...

7.5CVSS6.5AI score0.00771EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:00 a.m.•21 views

EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-2225)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from...

7.5CVSS6.5AI score0.00771EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/06 3:15 p.m.•62 views

CVE-2026-11435 Jinher OA nextselectplan.aspx sql injection

A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor...

7.5CVSS0.00259EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/06/03 2:36 a.m.•29 views

SUSE CVE-2024-27355

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service CPU consumption for decodeOID...

7.5CVSS7.1AI score0.00569EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/02 1:37 a.m.•37 views

SUSE CVE-2026-46344

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a...

5.3CVSS5.8AI score0.00305EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/29 6:08 p.m.•19 views

CVE-2026-46344

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a...

5.3CVSS5.8AI score0.00305EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/05/29 6:08 p.m.•57 views

CVE-2026-46344 liboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called with a...

5.3CVSS0.00305EPSS
SaveExploits0References2
Rows per page
Query Builder