129336 matches found
CVE-2026-18593 vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...
CVE-2026-18593
Vulnerability CVE-2026-18593 affects vxcontrol PentAGI up to version 2.1.0. It targets an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl within the Tool Management Protocol Handler. The issue can be exploited remotely to cause sandbox-related problems; exploitation is descr...
firefox: thunderbird: Site isolation issue in the Networking: HTTP component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking: HTTP component...
Improper Certificate Validation
Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then...
frr: FRRouting: Denial of Service via crafted BGP UPDATE message
A flaw was found in FRRouting FRR. Missing input validation in the rfapiRibBi2Ri function allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted BGP Border Gateway Protocol UPDATE message. This vulnerability can disrupt network services managed by FRR...
ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching
A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol UDP, it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the PKMACValueVerifier.isValid and ProtectedPKIMessage.verify verification paths, where PKMACBuilder's default constructor leaves maxIterations = 0 and disables the iteration-count...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the PKMACValueVerifier.isValid and ProtectedPKIMessage.verify verification paths, where PKMACBuilder's default constructor leaves maxIterations = 0 and disables the iteration-count...
UBUNTU-CVE-2026-58062
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...
frr: FRRouting: Denial of Service via crafted BGP UPDATE message
A flaw was found in FRRouting FRR. Missing input validation in the rfapiRibBi2Ri function allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted BGP Border Gateway Protocol UPDATE message. This vulnerability can disrupt network services managed by FRR...
dovecot: Dovecot: Denial of Service via excessive IMAP bracing
A flaw was found in Dovecot. A remote attacker can exploit this vulnerability by sending excessive open braces over the Internet Message Access Protocol IMAP, leading to uncontrolled memory usage. This can cause the affected system to consume memory up to its configured limit, resulting in a Deni...
CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
CVE-2026-58062 Stapled OCSP response accepted without binding to the checked certificate
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...
UBUNTU-CVE-2026-59646
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...
CVE-2026-59647 CRMF/CMP password-MAC honours unbounded iteration count
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
CVE-2026-59647
CVE-2026-59647 : In Bouncy Castle for Java, CRMF/CMP password-MAC honors an unbounded iteration count. Affected: Java version before 1.85; Java LTS before 2.73.12; BC-FJA before bcpkix-fips 1.0.12 (1.0.x), 2.0.12 (2.0.x), and 2.1.12 (2.1.x). Root cause: unbounded iteration in password-based MAC w...
CVE-2026-59652 LDAP filter injection in legacy jdk1.4 LDAPStoreHelper
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...
CVE-2026-59652
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...
