Lucene search
+L

155 matches found

Cvelist
Cvelist
•added 2026/07/30 10:01 p.m.•47 views

CVE-2026-63362 o6 Automation open62541 Integer Underflow

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

8.2CVSS0.01822EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/07/30 10:01 p.m.•11 views

CVE-2026-63362 o6 Automation open62541 Integer Underflow

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

8.2CVSS5.8AI score0.01822EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/07/30 10:01 p.m.•14 views

CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

8.2CVSS5.9AI score0.01822EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
•added 2026/07/30 10:01 p.m.•26 views

CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

8.2CVSS5.8AI score0.01822EPSS
SaveExploits0
OSV
OSV
•added 2026/07/30 10:01 p.m.•16 views

CVE-2026-63362 o6 Automation open62541 Integer Underflow

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

8.2CVSS5.5AI score
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/30 12:00 a.m.•2 views

CVE-2026-63362: Integer Underflow (Wrap or Wraparound)

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

8.2CVSS5.6AI score0.01822EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•22 views

PT-2026-66618

Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description An unsigned integer underflow occurs in the PubSub signature verification path. This flaw allows a remote attacker to trigger a denial of service by sending a specially crafted UDP packet...

8.2CVSS5.5AI score0.01822EPSS
SaveExploits0References9
EUVD
EUVD
•added 2026/07/21 9:32 p.m.•30 views

EUVD-2026-46373

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

5.2AI score0.00142EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/21 8:17 p.m.•15 views

CVE-2026-64617

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

3.8CVSS0.00142EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/21 7:07 p.m.•11 views

CVE-2026-64617 Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

5.7AI score0.00142EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/21 7:07 p.m.•37 views

CVE-2026-64617 Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

0.00142EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/21 7:07 p.m.•13 views

CVE-2026-64617

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

5.2AI score0.00142EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/21 7:07 p.m.•36 views

CVE-2026-64617

The Data::PubSub::Shared Perl module (versions before 0.07 ) contains a vulnerability where it creates a world-readable mmap backing file. The root cause is the use of open(path, O_RDWR|O_CREAT, 0666) in pubsub.h without the O_EXCL or O_NOFOLLOW flags. Under a default umask of 022, the file is cr...

3.8CVSS5.7AI score0.00142EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-64617: Incorrect Permission Assignment for Critical Resource

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

3.8CVSS5.7AI score0.00142EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/07/21 12:00 a.m.•14 views

The vulnerability of the DaprPubSubConsumer class in the camel-dapr component of the Apache Camel framework allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the DaprPubSubConsumer class in the camel-dapr framework of the Apache Camel framework is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...

6.5CVSS6.5AI score0.00682EPSS
SaveExploits1References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 12:18 p.m.•25 views

Malicious code in @athena-ui-components/pubsub-bridge (npm)

--- -= Per source details. Do not edit below this line.=-...

5.9AI score
SaveExploits0References1
OSV
OSV
•added 2026/07/07 12:18 p.m.•26 views

MAL-2026-7047 Malicious code in @athena-ui-components/pubsub-bridge (npm)

--- -= Per source details. Do not edit below this line.=-...

6.1AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/07/06 10:35 a.m.•14 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the DaprPubSubConsumer process. An attacker can redirect or exfiltrate messages and bypass intended routing and topic-level access controls by publishing specially crafted CloudEvents with manipulated...

8.1CVSS6.5AI score0.00682EPSS
SaveExploits1References2
OSV
OSV
•added 2026/07/06 9:30 a.m.•12 views

GHSA-583R-F84W-33G7 Apache Camel-Dapr: The Dapr Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers

Improper Input Validation, Unintended Proxy or Intermediary 'Confused Deputy' vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer DaprPubSubConsumer copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the...

6.5CVSS6.7AI score0.00682EPSS
SaveExploits1References14
OSV
OSV
•added 2026/07/06 8:10 a.m.•13 views

CVE-2026-49086 Apache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to influence internal behaviour

Improper Input Validation, Unintended Proxy or Intermediary 'Confused Deputy' vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer DaprPubSubConsumer copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the...

6.5CVSS6.2AI score
SaveExploits0References5
Rows per page
Query Builder