Lucene search
+L

25037 matches found

Positive Technologies
Positive Technologies
added 2026/04/01 12:00 a.m.22 views

PT-2026-29516

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description A flaw exists in Corosync where a remote, unauthenticated attacker can exploit a wrong return value vulnerability in the membership commit token sanity check. This is achieved by sending a...

8.2CVSS5.9AI score0.00994EPSS
SaveExploits2References69
CNNVD
CNNVD
added 2026/04/01 12:00 a.m.12 views

Ericsson Packet Core Controller 安全漏洞

Ericsson Packet Core Controller is a packet core controller developed by the Swedish company Ericsson. Versions of Ericsson Packet Core Controller prior to version 1.38 contained security vulnerabilities. These vulnerabilities could lead to service degradation if attackers sent a large number of...

5.3CVSS5.9AI score0.00363EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/01 12:00 a.m.8 views

PT-2026-29507

Ericsson Packet Core Controller PCC versions prior to 1.38 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation...

5.3CVSS5.8AI score0.00363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/01 12:00 a.m.8 views

PT-2026-29476

A regression in the way hashes were calculated caused rules containing the address range syntax x.x.x.x - y.y.y.y that only differ in the address ranges involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the...

5.9AI score0.0025EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/03/31 2:47 p.m.13 views

[SECURITY] Fedora 44 Update: rust-scx_rusty-0.5.4-8.fc44

A multi-domain, BPF / user space hybrid scheduler used within schedext, which is a Linux kernel feature which enables implementing kernel thread schedulers in BPF and dynamically loading them. https://github.com/sched-ext/scx/tree/main...

6.5CVSS5.9AI score0.00379EPSS
SaveExploits1
Fedora
Fedora
added 2026/03/31 2:47 p.m.15 views

[SECURITY] Fedora 44 Update: rust-scx_layered-0.0.6-8.fc44

A highly configurable multi-layer BPF / user space hybrid scheduler used within schedext, which is a Linux kernel feature which enables implementing kernel thread schedulers in BPF and dynamically loading them. https://github.com/sched-ext/scx/tree/main...

6.5CVSS5.9AI score0.00379EPSS
SaveExploits1
OSV
OSV
added 2026/03/31 12:16 p.m.11 views

UBUNTU-CVE-2026-24028

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential...

8.2CVSS5.8AI score0.01028EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/31 12:04 p.m.8 views

CVE-2026-27853 Out-of-bounds write when rewriting large DNS packets

An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535...

5.9CVSS6AI score
SaveExploits0References5
CVE
CVE
added 2026/03/31 11:57 a.m.36 views

CVE-2026-24028

CVE-2026-24028 affects dnsdist, a DNS load balancer. The issue arises when custom Lua code parses DNS packets with newDNSPacketOverlay, causing an out-of-bounds read that can crash the process and potentially disclose memory. Connected advisories confirm the vulnerability and list it among multip...

8.2CVSS5.9AI score0.01028EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/03/31 11:57 a.m.17 views

CVE-2026-24028

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential...

8.2CVSS5.8AI score0.01028EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/31 11:57 a.m.5 views

CVE-2026-24028

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential...

5.3CVSS5.9AI score0.01028EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/03/31 11:57 a.m.7 views

CVE-2026-24028 Out-of-bounds read when parsing DNS packets via Lua

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential...

5.3CVSS6AI score
SaveExploits0References5
EUVD
EUVD
added 2026/03/31 11:57 a.m.10 views

EUVD-2026-17401

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential...

5.3CVSS5.9AI score0.01028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/31 11:57 a.m.36 views

CVE-2026-24028 Out-of-bounds read when parsing DNS packets via Lua

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential...

5.3CVSS0.01028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/31 11:57 a.m.7 views

CVE-2026-24028 Out-of-bounds read when parsing DNS packets via Lua

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential...

5.3CVSS5.9AI score0.01028EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/31 11:18 a.m.420 views

Exploit for CVE-2014-8361

Vuln Scanner - Advanced Network Security Scanner !Licenseht...

10CVSS7.4AI score0.99999EPSS
SaveExploits441
Veracode
Veracode
added 2026/03/31 9:31 a.m.8 views

Improper Input Validation

github.com/eclipse/paho.mqtt.golang is vulnerable to improper input validation. The vulnerability is due to unsafe conversion of string length from int32/int64 to int16 without overflow checks, which allows an attacker to craft oversized UTF-8 inputs that cause packet corruption or unintended dat...

6.3CVSS7.2AI score0.0022EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/31 12:00 a.m.5 views

SUSE SLES15 Security Update : kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:1132-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1132-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: -...

9.8CVSS6.6AI score0.00617EPSS
SaveExploits0References25
Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.15 views

PT-2026-36447

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Google Chrome affected versions not specified Description A bug in the Linux kernel's regsafe function occurs when rold-reg-range is BEYOND PKT END and rcur-reg-range is N, potentially causing the...

8.5CVSS5.5AI score0.00135EPSS
SaveExploits0
OSV
OSV
added 2026/03/30 4:15 p.m.9 views

CVE-2026-5124 osrg GoBGP BGP Header bgp.go BGPHeader.DecodeFromBytes access control

A security vulnerability has been detected in osrg GoBGP up to 4.3.0. Affected is the function BGPHeader.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component BGP Header Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The...

6.3CVSS5.1AI score
SaveExploits0References8
Rows per page
Query Builder