CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

36 matches found

osv_azl•added 2026/10/08 11:17 p.m.•10 views

AZL-107850 CVE-2026-97032 affecting package prometheus-process-exporter 0.8.2-5

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

7.5CVSS5.8AI score0.0042EPSS

SaveExploits0References1

osv_azl•added 2026/10/08 11:17 p.m.•11 views

AZL-107841 CVE-2026-78669 affecting package prometheus-process-exporter 0.8.2-5

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

7.5CVSS5.8AI score0.00568EPSS

SaveExploits0References1

osv_azl•added 2026/10/08 11:17 p.m.•10 views

AZL-107844 CVE-2026-78660 affecting package prometheus-process-exporter 0.8.2-5

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

7.5CVSS5.8AI score0.00303EPSS

SaveExploits0References1

osv_azl•added 2026/10/08 11:17 p.m.•9 views

AZL-107838 CVE-2026-78659 affecting package prometheus-process-exporter 0.8.2-5

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

7.5CVSS6AI score0.0057EPSS

SaveExploits0References1

osv_azl•added 2026/10/08 11:17 p.m.•9 views

AZL-107847 CVE-2026-78663 affecting package prometheus-process-exporter 0.8.2-5

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

9.1CVSS5.9AI score0.00574EPSS

SaveExploits0References1

CBLMariner•added 2026/07/29 8:30 p.m.•21 views

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...

7.5CVSS6.4AI score0.00475EPSS

SaveExploits0

osv_azl•added 2026/07/21 8:17 p.m.•26 views

AZL-93285 CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

7.5CVSS6.2AI score0.00475EPSS

SaveExploits0References1

CBLMariner•added 2026/05/30 12:34 a.m.•23 views

CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4

CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4. A patched version of the package is available...

9.6CVSS6.1AI score0.00692EPSS

SaveExploits0

osv_azl•added 2026/05/22 4:16 p.m.•26 views

AZL-88254 CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

9.6CVSS6AI score0.00692EPSS

SaveExploits0References1

Chainguard•added 2026/05/09 1:18 a.m.•29 views

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, peerdb-flow, flux-kustomize-controller-fips, kyverno-policy-reporter-fips, prometheus-node-exporter, longhorn-instance-manager-fips, gitlab-rails-ce, otel-cli, terraform-provider-acme-fips, neuvector-scanner-fips, rancher-agent,...

6.1CVSS7.1AI score0.00333EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•21 views

GHSA-3V2C-X6Q9-F697 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•36 views

CVE-2026-39826 vulnerabilities

6.1CVSS6.9AI score0.00393EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•28 views

GHSA-2283-WF8C-RW8R vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•36 views

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: pluto-fips, spire-controller-manager-fips, peerdb-flow, flux-kustomize-controller-fips, kyverno-policy-reporter-fips, prometheus-node-exporter, longhorn-instance-manager-fips, gitlab-rails-ce, hcledit, nri-redis-fips, secretgen-controller, trust-manager-fips, otel-cl...

5.9CVSS6.7AI score0.00162EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•39 views

CVE-2026-39819 vulnerabilities

5.3CVSS6.5AI score0.00148EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•35 views

GHSA-QC64-M6C2-V4X7 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•29 views

GHSA-QF3Q-3H68-MMH2 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•60 views

CVE-2026-39836 vulnerabilities

7.5CVSS7.6AI score0.0062EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•35 views

CVE-2026-42501 vulnerabilities

7.5CVSS7.5AI score0.00285EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•35 views

GHSA-8G2R-HHVJ-MV99 vulnerabilities

5.8AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by