Lucene search
+L

17516 matches found

Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•25 views

PT-2026-82288

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets...

5.2AI score0.0046EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/26 12:00 a.m.•15 views

EUVD-2025-210800

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets...

5.2AI score0.0046EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•12 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098796 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously s...

8.2CVSS6.7AI score0.00481EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•25 views

PT-2026-82203

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Multipath TCP MPTCP implementation where certain incoming suboptions are not properly restricted, allowing mutually exclusive suboptions to be combined. This...

9.8CVSS5.9AI score0.00403EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/08/25 9:50 p.m.•18 views

openssl: QUIC ACK-only packet retention can cause memory exhaustion

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...

7.5CVSS7AI score0.0057EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/08/25 4:26 p.m.•17 views

CVE-2026-63075

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...

7.5CVSS7.1AI score0.0057EPSS
SaveExploits0References4
osv_azl
osv_azl
•added 2026/08/25 1:19 p.m.•17 views

AZL-97938 CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

7.5CVSS7.2AI score0.0057EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/08/25 1:00 p.m.•19 views

CVE-2026-63075 QUIC ACK-only Packet Retention Can Cause Memory Exhaustion

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

7.5CVSS5.7AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/08/25 1:00 p.m.•45 views

CVE-2026-63075 QUIC ACK-only Packet Retention Can Cause Memory Exhaustion

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

0.0057EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/25 7:17 a.m.•19 views

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

8.5CVSS0.00654EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-63075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC...

7.5CVSS7.2AI score0.0057EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•11 views

CVE-2026-68960: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

8.5CVSS8.4AI score0.0061EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•8 views

CVE-2026-68959: Path Traversal: '/../filedir'

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

8.5CVSS8.1AI score0.00654EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•7 views

CVE-2026-68062: Improper Limitation of a Pathname to a Restricted Directory

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

8.5CVSS8.1AI score0.00654EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•21 views

PT-2026-81306

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description When processing QUIC traffic, the QUIC stack may retain metadata for ACK-only packets for the entire duration of a connection if a peer repeatedly sends ack-eliciting packets without...

9.8CVSS6.8AI score0.01159EPSS
SaveExploits0References85
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•3 views

CVE-2026-63075: Allocation of Resources Without Limits or Throttling

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

7.5CVSS7.3AI score0.0057EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2026/08/25 12:00 a.m.•19 views

CVE-2026-63075

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

7.5CVSS7.2AI score0.0057EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/24 5:43 p.m.•18 views

CVE-2026-74704

A flaw was found in the Linux kernel. The schcake ACK filter, responsible for processing network packets, contains a vulnerability. A remote attacker could send specially crafted malformed IP packets. This could lead to the system logging excessive warnings or, under specific configurations, caus...

8.2CVSS7.3AI score0.00443EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/24 5:17 p.m.•22 views

CVE-2025-36939

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...

10CVSS0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/24 4:38 p.m.•20 views

CVE-2025-36939

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...

10CVSS6.3AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder