CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

47 matches found

Tenable Nessus•added 2026/09/21 12:00 a.m.•14 views

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:4048-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4048-1 advisory. - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. -...

7.5CVSS6.3AI score0.00563EPSS

SaveExploits3References10

OSV•added 2026/09/07 1:54 p.m.•15 views

SUSE-SU-2026:4048-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. - CVE-2026-80230: OpenSSL pinning bypass can allow...

7.5CVSS6.2AI score0.00563EPSS

SaveExploits3References7

Vulnrichment•added 2026/09/06 5:47 p.m.•14 views

CVE-2026-80229 OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

5.9AI score0.00563EPSS

SaveExploits1References3

RedhatCVE•added 2026/08/31 5:53 a.m.•17 views

CVE-2026-62243

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

8.7CVSS7AI score0.00155EPSS

SaveExploits0References5

Hacker One•added 2026/08/25 6:11 p.m.•22 views

curl: CVE-2026-80229: OpenSSL provider use-after-free

Summary When CURLOPTSSLENGINE is set e.g. "default" on OpenSSL 3.x, osslsetprovider line 1791 allocates a per-handle OSSLLIBCTX and stores it in data-state.libctx. During TLS connection setup, SSLCTXnewex line 3750 receives this library context and embeds a pointer to it inside the newly created...

7.5CVSS6.2AI score0.00563EPSS

SaveExploits1

RedHat Linux•added 2026/06/23 12:41 p.m.•27 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl-fips-provider: openssl-fips-provider-3.0.7-1.2.hum1 aarch64, x8664 openssl-fips-provider-so-3.0.7-1.2.hum1 aarch64, x8664 openssl-fips-provider-3.0.7-1.2.hum1.src src...

7.5CVSS6.8AI score0.0103EPSS

SaveExploits0References3