Lucene search
K

5 matches found

OSV
OSV
added 2026/04/22 6:31 p.m.5 views

GHSA-RX8H-33GR-VHJ9 uutils coreutils' comm utility incorrectly consumes data from non-regular file inputs before performing comparison operations

The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The arefilesidentical function opens and reads from both input paths to compare content without first verifying if the paths refer to regular files. If an input pat...

4.4CVSS5.8AI score0.00023EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-35347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The arefilesidentical...

4.4CVSS5.8AI score0.00023EPSS
Exploits0References3
NVD
NVD
added 2024/08/14 3:15 p.m.25 views

CVE-2024-39792

When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.7CVSS0.01047EPSS
Exploits0References1
CVE
CVE
added 2024/08/14 2:32 p.m.99 views

CVE-2024-39792

CVE-2024-39792 : NGINX Plus configured with the MQTT pre-read module may cause memory resource exhaustion from undisclosed requests, leading to denial of service. The description notes that versions past EoTS are not evaluated. No exploits or mitigations are provided in the sources beyond this vu...

8.7CVSS7.5AI score0.01047EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/14 12:0 a.m.2 views

PT-2024-5635 · Nginx · Nginx Plus

Name of the Vulnerable Software and Affected Versions: NGINX Plus affected versions not specified Description: The issue is related to a memory exhaustion vulnerability in the NGINX Plus MQTT pre-read module. It can be exploited by undisclosed requests, leading to an increase in memory resource...

8.7CVSS9.3AI score0.01047EPSS
Exploits0References13
Rows per page
Query Builder