Lucene search
K

208 matches found

OSV
OSV
added 2026/04/22 7:13 p.m.1 views

GHSA-6973-8887-87FF nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation

Impact SkipBlockProof::verify computes its quorum check using BitSet.len, then iterates BitSet indices and casts each usize index to u16 slot as u16 for slot lookup. If an attacker can get a SkipBlockProof verified where MultiSignature.signers contains out-of-range indices spaced by 65536, these...

9.6CVSS5.8AI score0.00035EPSS
Exploits0References6
EUVD
EUVD
added 2026/04/22 7:13 p.m.0 views

EUVD-2026-25054

nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation...

9.6CVSS5.7AI score0.00035EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/04/22 7:13 p.m.2 views

nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation

Impact SkipBlockProof::verify computes its quorum check using BitSet.len, then iterates BitSet indices and casts each usize index to u16 slot as u16 for slot lookup. If an attacker can get a SkipBlockProof verified where MultiSignature.signers contains out-of-range indices spaced by 65536, these...

9.6CVSS5.8AI score0.00035EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2026/04/22 7:13 p.m.4 views

CVE-2026-33471

CVE-2026-33471 affects nim i q/core-rs-albatross (Rust Nimiq PoS) prior to v1.3.0. The vulnerability arises in SkipBlockProof::verify, which checks quorum using BitSet.len() and then casts each index (slot as u16) for lookup. Attackers can craft a SkipBlockProof where out-of-range indices spaced ...

9.6CVSS5.7AI score0.00035EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/04/22 7:13 p.m.22 views

CVE-2026-33471 nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation

nimiq-block contains block primitives to be used in Nimiq's Rust implementation. SkipBlockProof::verify computes its quorum check using BitSet.len, then iterates BitSet indices and casts each usize index to u16 slot as u16 for slot lookup. Prior to version 1.3.0, if an attacker can get a...

9.6CVSS0.00035EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.0 views

PT-2026-24613

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS5.8AI score0.0003EPSS
Exploits0References4
NVD
NVD
added 2026/03/07 9:16 a.m.2 views

CVE-2026-24281

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS0.0003EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/26 12:0 a.m.2 views

openSUSE 16 Security Update : rabbitmq-server (openSUSE-SU-2026:20082-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20082-1 advisory. Changes in rabbitmq-server: Update to 4.1.5: Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now...

6.1CVSS5.8AI score0.00023EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2026/01/25 12:0 a.m.5 views

Security update for rabbitmq-server (moderate)

openSUSE security update: security update for rabbitmq-server ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20082-1 Rating: moderate References: bsc1246091 Cross-References: CVE-2025-30219 CVSS scores: CVE-2025-30219 SUSE : 6.1...

6.1CVSS6.2AI score0.00023EPSS
Exploits0References1
OSV
OSV
added 2026/01/22 2:12 p.m.1 views

SUSE-SU-2026:20126-1 Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issues: Changes in rabbitmq-server: Update to 4.1.5: Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now fully supported it previously was an experimental feature - AMQP 1.0 is now a core...

6.1CVSS5.8AI score0.00023EPSS
Exploits0References3
OSV
OSV
added 2026/01/22 1:47 p.m.2 views

OPENSUSE-SU-2026:20082-1 Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issues: Changes in rabbitmq-server: Update to 4.1.5: Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now fully supported it previously was an experimental feature - AMQP 1.0 is now a core...

6.1CVSS5.8AI score0.00023EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 8:42 a.m.6 views

CVE-2022-31198

OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Governor that use the module GovernorVotesQuorumFraction, a mechanism that determines quorum requirements as a percentage of the voting token's total supply. In affected instances, when a...

7.5CVSS6.6AI score0.00266EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-24010

Malware in sbrugna...

6.5CVSS6.5AI score0.0122EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2021-24030

Malware in sbrugna...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-24028

Malware in sbrugna...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-24011

Malware in sbrugna...

4.3CVSS4.8AI score0.00394EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-24017

Malware in sbrugna...

5.5CVSS5.5AI score0.00022EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-10123

Malware in sbrugna...

9.1CVSS8.9AI score0.0047EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2021-24029

Malware in sbrugna...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-24032

Malware in sbrugna...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References3
Rows per page
Query Builder