Lucene search
+L

77 matches found

RedhatCVE
RedhatCVE
•added 2026/10/02 12:53 a.m.•12 views

CVE-2026-73636

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

8.1CVSS6AI score0.00412EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/26 12:00 a.m.•16 views

openSUSE 16 Security Update : perl-Authen-SASL (openSUSE-SU-2026:21946-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21946-1 advisory. This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in...

9.8CVSS6AI score0.00468EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/24 9:10 a.m.•9 views

OPENSUSE-SU-2026:21946-1 Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/24 9:10 a.m.•6 views

SUSE-SU-2026:23913-1 Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•23 views

SUSE SLED15 / SLES15 Security Update : perl-Authen-SASL (SUSE-SU-2026:4302-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4302-1 advisory. This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepte...

9.8CVSS6AI score0.00468EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/09/23 11:37 a.m.•18 views

Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

9.1CVSS5.9AI score0.00468EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/23 11:37 a.m.•8 views

SUSE-SU-2026:4302-1 Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•12 views

SUSE SLES12 Security Update : perl-Authen-SASL (SUSE-SU-2026:4280-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4280-1 advisory. This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified...

9.8CVSS6AI score0.00468EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/09/22 8:32 a.m.•13 views

Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

9.1CVSS5.9AI score0.00468EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/22 8:32 a.m.•11 views

SUSE-SU-2026:4280-1 Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/06 5:46 p.m.•52 views

CVE-2026-86219

The Authen::SASL::Perl::DIGEST_MD5 component in Perl (versions before 2.2100 ) is vulnerable to a replay attack due to an unverified nonce in the server_step function. While server_start generates a fresh nonce, the system fails to compare the returned value against the original challenge. Conseq...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/05 12:00 a.m.•21 views

PT-2026-86414

Name of the Vulnerable Software and Affected Versions AVideo affected versions not specified Description A path traversal issue exists in the 'notify.ffmpeg.json.php' endpoint. Unauthenticated attackers can write files to arbitrary locations within the application root and subdirectories by...

9.8CVSS5.9AI score0.00714EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/08/26 12:00 a.m.•41 views

CVE-2025-61479

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...

0.00243EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/07 7:25 a.m.•56 views

CVE-2026-15239 Simple CAPTCHA with Cloudflare Turnstile < 1.42.0 - Unauthenticated Turnstile Protection Bypass via Reusable Forminator Cache Key

The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 does not bind its Turnstile validation cache to the single-use challenge token in its Forminator integration, instead keying it to an attacker-controlled, reusable request value, allowing unauthenticated attackers to solv...

5.3CVSS0.00158EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/04 4:16 p.m.•23 views

CVE-2026-24084

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...

7.5CVSS0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/04 3:07 p.m.•16 views

CVE-2026-24084 Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...

7.5CVSS5.8AI score0.0025EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/04 3:07 p.m.•18 views

CVE-2026-24084

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...

7.5CVSS5.8AI score0.0025EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/04 3:07 p.m.•19 views

EUVD-2026-52735

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...

7.5CVSS5.8AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/04 3:07 p.m.•49 views

CVE-2026-24084 Insecure Security Identifier Mechanism in Multi-Mode Call Processor

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...

7.5CVSS0.0025EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/04 3:07 p.m.•134 views

CVE-2026-24084

Technical details about CVE-2026-24084 are not publicly available in the provided documents. Monitor for updates from the listed sources; current entries only state a weak configuration related to UE security capability replay verification.

7.5CVSS5.8AI score0.0025EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder