Lucene search
+L

97 matches found

Vulnrichment
Vulnrichment
added 2026/03/19 8:37 p.m.8 views

CVE-2026-4428 CRL Distribution Point Scope Check Logic Error in AWS-LC

A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0 or...

9.1CVSS5.8AI score0.00252EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/19 8:37 p.m.18 views

EUVD-2026-13237

A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0 or...

9.1CVSS5.7AI score0.00252EPSS
Exploits0References2
RustSec
RustSec
added 2026/03/19 12:0 p.m.9 views

CRL Distribution Point Scope Check Logic Error in AWS-LC

A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs with Issuing Distribution Point IDP extensions. Customers of AWS services do not...

9.1CVSS5.9AI score0.00252EPSS
Exploits0Affected Software1
OSV
OSV
added 2026/03/19 12:0 p.m.6 views

RUSTSEC-2026-0042 CRL Distribution Point Scope Check Logic Error in AWS-LC

A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs with Issuing Distribution Point IDP extensions. Customers of AWS services do not...

7.4CVSS5.9AI score0.00252EPSS
Exploits0References4
OSV
OSV
added 2026/03/19 12:0 p.m.5 views

RUSTSEC-2026-0048 CRL Distribution Point Scope Check Logic Error in AWS-LC

A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs with Issuing Distribution Point IDP extensions. Customers of AWS services do not...

7.4CVSS5.8AI score0.00252EPSS
Exploits0References4
RustSec
RustSec
added 2026/03/19 12:0 p.m.9 views

CRL Distribution Point Scope Check Logic Error in AWS-LC

A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs with Issuing Distribution Point IDP extensions. Customers of AWS services do not...

9.1CVSS5.8AI score0.00252EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-2171

Malware in sbrugna...

6.5CVSS6.7AI score0.01633EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-11705

Malware in sbrugna...

6.5CVSS6.7AI score0.01791EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-1145

Malicious code in bioql PyPI...

6.4CVSS6.7AI score0.01359EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/09/12 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a restriction on writing BIOs to partitioned devices that is not handled correctly, which could result in a...

5.5CVSS6.1AI score0.00138EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/09/04 2:50 p.m.11 views

postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...

3.1CVSS7AI score0.0022EPSS
Exploits0References5
OSV
OSV
added 2025/08/14 1:15 p.m.3 views

ALPINE-CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS6.7AI score0.0022EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/08/13 9:11 p.m.17 views

Security Bulletin: IBM® Db2® is vulnerable to a denial of service as the server may crash when using a specially crafted query on columnar tables in a database partitioned environment (CVE-2024-31882)

Summary IBM® Db2® is vulnerable to a denial of service as the server may crash when using a specially crafted query on columnar tables in a database partitioned environment. Vulnerability Details CVEID:CVE-2024-31882 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is...

6.5CVSS6.2AI score0.00553EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2024/04/08 12:0 a.m.9 views

Unspecified Vulnerability in Apache Pulsar (CNVD-2024-24979)

Apache Pulsar is a U.S. Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as a distributed message flow platform. The software supports multi-tenancy, persistent storage, multi-room cross-region data replication with high scalability, high...

6.4CVSS6.6AI score0.01359EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2024/04/02 9:30 p.m.30 views

Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints

This vulnerability allows authenticated users with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. These management operations should be restricted to users with the tenant admin role or superuser role. A...

6.4CVSS6.6AI score0.01359EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2024/04/02 8:15 p.m.30 views

CVE-2024-29834

This vulnerability allows authenticated users with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. These management operations should be restricted to users with the tenant admin role or superuser role. A...

6.4CVSS6.3AI score0.01359EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/04/02 7:24 p.m.12 views

CVE-2024-29834 Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints

This vulnerability allows authenticated users with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. These management operations should be restricted to users with the tenant admin role or superuser role. A...

6.4CVSS6.5AI score0.01359EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2024/04/02 6:6 p.m.30 views

CVE-2024-29834

A flaw was discovered in Apache Pulsar. This issue may allow an authenticated user with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. Additionally, the authenticated user could read, create, modify, and...

8.1CVSS6.1AI score0.01359EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/04/02 12:0 a.m.4 views

Apache Pulsar 安全漏洞

Apache Pulsar is a U.S. Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as a distributed message flow platform. The software supports multi-tenancy, persistent storage, multi-room cross-region data replication with high scalability, high...

6.4CVSS6.7AI score0.01359EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/04/02 12:0 a.m.5 views

PT-2024-2560 · Apache · Apache Pulsar

Name of the Vulnerable Software and Affected Versions: Apache Pulsar versions 2.7.1 through 2.10.6 Apache Pulsar versions 2.11.0 through 2.11.4 Apache Pulsar versions 3.0.0 through 3.0.3 Apache Pulsar versions 3.1.0 through 3.1.3 Apache Pulsar versions 3.2.0 through 3.2.1 Description: The issue i...

7.5CVSS6.9AI score0.01359EPSS
Exploits0References20
Rows per page
Query Builder