27564 matches found
SUSE SLED15 / SLES15 Security Update : libtcnative-2-0 (SUSE-SU-2026:4658-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4658-1 advisory. - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM...
CVE-2026-73252
Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MGTLSBUILTIN in src/tlsbuiltin.c accepts a TLS 1.3 record whose decrypted size is exactly the 16-byte authentication tag with no plaintext or ContentType byte. In mgtlsrecvrecord, the msgsz...
OPENSUSE-SU-2026:22102-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...
heartbleed
HEARTBLEED : OpenSSL TLS HEARTBLEED VULNERABILITY OpenSSL TLS Heartbeat Extension - Memory Disclosure - Multiple SSL/TLS versions vulnerability scanner and exploit need: sudo apt-get install nmap lolcat java sudo apt install default-jre default-jdk...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31790 DESCRIPTION: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a...
K000163708: rust-openssl vulnerability CVE-2026-45784
Security Advisory Description rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipherupdateinplace in openssl/src/cipherctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers...
CVE-2014-0160
CVE-2014-0160 Lab setup using Heartbleed to leak memory from webapps This repo focuses on building a container to create an environment that can easily exploit nginx using the Heartbleed technique, focusing on: Setting up the environment using Docker Server setup diagram Demo steps Server diagram...
Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130147)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130147 advisory. A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-pat...
Rocky Linux 8 [CIQ] Security Update: compat-openssl10 / compat-openssl10-debuginfo / etc (crlsa-2026_80510)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202680510 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...
Copeland XWEB and XWEB Pro Improper Neutralization of Special Elements Used in an OS Command (CVE-2026-24695)
An OS Command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into OpenSSL argument fields within requests sent to the utility route, leading to remote code executio...
Fedora 44 : curl (2026-a06b828d65)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a06b828d65 advisory. - Fix incomplete mTLS config matching in conn reuse CVE-2026-8932 - Fix OpenLDAP SASL authentication bypass CVE-2026-13608 - Fix OpenSSL pinning...
K000163699: OpenSSL vulnerability CVE-2026-75803
Security Advisory Description Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on ...
K000163698: OpenSSL vulnerability CVE-2026-63075
Security Advisory Description Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer...
ROOT-OS-ALPINE-315-CVE-2026-84782 CVE-2026-84782 in openssl - Patched by Root
Root has patched CVE-2026-84782 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-28389 CVE-2026-28389 in openssl - Patched by Root
Root has patched CVE-2026-28389 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69419 CVE-2025-69419 in openssl - Patched by Root
Root has patched CVE-2025-69419 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-28387 CVE-2026-28387 in openssl - Patched by Root
Root has patched CVE-2026-28387 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-63072 CVE-2026-63072 in openssl - Patched by Root
Root has patched CVE-2026-63072 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...