Lucene search
K

10009 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.4 views

CVE-2020-10234

The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. If the user provides a NULL entry for the dwIoControlCode parameter, a kernel panic aka BSOD follows. The IOCTL codes can be found in the dispatch function:...

6.8CVSS6.8AI score0.00505EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:26 a.m.5 views

CVE-2023-4163

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command...

4.4CVSS6.8AI score0.00029EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:13 a.m.4 views

CVE-2022-31100

rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial of Service attack. This happens when the expression contains a multi-byte UTF-8 code point in a string literal or after a backslash, because rulex tries to...

6.5CVSS7AI score0.0042EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:44 a.m.5 views

CVE-2022-23495

go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project. A ProtoNode may be modified in such a way as to cause various encode errors which will trigger a panic on common method calls that don't allow for error returns. A ProtoNode...

7.5CVSS6.6AI score0.02643EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/01/09 12:23 a.m.3 views

SUSE CVE-2026-21895

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

3.3CVSS6.9AI score0.00016EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2026/01/09 12:0 a.m.4 views

openSUSE Security Advisory (SUSE-SU-2026:0067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.00014EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:0 a.m.3 views

SUSE SLES15 / openSUSE 15 Security Update : podman (SUSE-SU-2026:0067-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0067-1 advisory. - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size...

5.3CVSS6.3AI score0.00014EPSS
Exploits0References4
NVD
NVD
added 2026/01/08 2:15 p.m.4 views

CVE-2026-21895

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS0.00016EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/08 2:6 p.m.22 views

CVE-2026-21895 rsa crate has potential panic on a prime being equal to 1

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS0.00016EPSS
Exploits0References2
OSV
OSV
added 2026/01/08 2:6 p.m.3 views

CVE-2026-21895 rsa crate has potential panic on a prime being equal to 1

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS6.4AI score0.00016EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/08 2:6 p.m.3 views

CVE-2026-21895 rsa crate has potential panic on a prime being equal to 1

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS6.5AI score0.00016EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/08 2:6 p.m.4 views

EUVD-2026-1033

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS6.3AI score0.00016EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/08 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-21895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.3 views

RSA 安全漏洞

RSA is a Rust library open-sourced by Rust Crypto. A security vulnerability exists in versions of RSA prior to 0.9.10 that stems from a panic when creating an RSA private key, which could lead to mishandling of errors...

6.9CVSS6.3AI score0.00016EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/07 8:34 p.m.4 views

EUVD-2026-1161

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS6.4AI score0.00675EPSS
Exploits1References4
OSV
OSV
added 2026/01/07 8:34 p.m.2 views

CVE-2025-69255 RustFS gRPC GetMetrics deserialization panic enables remote DoS

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS6.8AI score0.00675EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/07 8:34 p.m.3 views

CVE-2025-69255 RustFS gRPC GetMetrics deserialization panic enables remote DoS

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS6.6AI score0.00675EPSS
Exploits1References2
CVE
CVE
added 2026/01/07 8:34 p.m.8 views

CVE-2025-69255

CVE-2025-69255 affects RustFS, a Rust-based distributed object storage system. The vulnerability lies in the gRPC metrics endpoint GetMetrics handler: deserialization of metric_type/opts can panic when a malformed request is received, causing remote denial of service of the metrics service. Affec...

6.9CVSS6.6AI score0.00675EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/01/07 8:34 p.m.23 views

CVE-2025-69255 RustFS gRPC GetMetrics deserialization panic enables remote DoS

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics...

6.9CVSS0.00675EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2026/01/07 6:36 p.m.10 views

RustFS gRPC GetMetrics deserialization panic enables remote DoS

Summary A malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics endpoint. Details - Vulnerable code: rustfs/src/storage/tonicservice.rs:1775-1782: - MetricType and...

6.9CVSS6.8AI score0.00675EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder