Lucene search
+L

591 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/08 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-32144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing...

7.6CVSS5.9AI score0.002EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/07 1:16 p.m.4 views

DEBIAN-CVE-2026-32144

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

7.4CVSS5.9AI score0.002EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/07 1:16 p.m.9 views

CVE-2026-32144

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

7.6CVSS0.002EPSS
SaveExploits0References9
OSV
OSV
added 2026/04/07 1:16 p.m.10 views

UBUNTU-CVE-2026-32144

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

7.6CVSS5.9AI score0.002EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/04/07 1:16 p.m.10 views

CVE-2026-32144

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

7.6CVSS5.4AI score0.002EPSS
SaveExploits0References8
CVE
CVE
added 2026/04/07 12:28 p.m.62 views

CVE-2026-32144

The CVE affects Erlang OTP’s public_key OCSP validation path (pubkey_ocsp module, pkix_ocsp_validate/5) where OCSP responder verification omits cryptographic signature validation of CA-designated responders. Instead, it only checks issuer name matching and OCSPSigning EKU, enabling a maliciously ...

7.6CVSS5.9AI score0.002EPSS
SaveExploits0References9Affected Software3
OSV
OSV
added 2026/04/07 12:28 p.m.10 views

CVE-2026-32144 OCSP designated-responder authorization bypass via missing signature verification

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

7.6CVSS5.9AI score0.002EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2026/04/07 12:28 p.m.7 views

CVE-2026-32144

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

7.6CVSS5.9AI score0.002EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2026/04/07 12:28 p.m.39 views

CVE-2026-32144 OCSP designated-responder authorization bypass via missing signature verification

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

7.6CVSS0.002EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/07 12:28 p.m.9 views

EUVD-2026-19604

Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in publickey:pkixocspvalidate/5 does not verify that a CA-designated responder certificate...

7.6CVSS5.9AI score0.002EPSS
SaveExploits0References6
OSV
OSV
added 2026/04/07 12:28 p.m.8 views

EEF-CVE-2026-32144 OCSP designated-responder authorization bypass via missing signature verification

Summary Improper Certificate Validation vulnerability in Erlang OTP public\key pubkey\ocsp module allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in public\key:pkix\ocsp\validate/5 does not verify that a CA-designated responde...

7.6CVSS5.9AI score0.002EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/07 12:00 a.m.8 views

PT-2026-30815

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 27.0 through 28.4.2 and 27.3.4.10 public key versions 1.16 through 1.20.3 and 1.17.1.2 ssl versions 11.2 through 11.5.4 and 11.2.12.7 Description An issue exists in the public key pubkey ocsp module of Erlang OTP related to...

7.6CVSS5.8AI score0.002EPSS
SaveExploits0References38
GithubExploit
GithubExploit
added 2026/02/10 10:06 p.m.221 views

Exploit for Improper Input Validation in Microsoft

Laboratório SMB + Responder CVE-2024-21413https://vulners...

9.8CVSS8.1AI score0.9466EPSS
SaveExploits24
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

MiracleLinux 7 : sssd-1.15.2-50.el7.8 (AXSA:2017-2463:06)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2463:06 advisory. It was found that sssd's sysdbsearchuserbyupnres function did not sanitize requests when querying its local cache and was vulnerable to injection. In a...

8.8CVSS6.5AI score0.01499EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.7 views

CVE-2023-31127

libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. If a device supports both DHE session and PSK session with mutual authentication, the attacker may be able to establis...

9CVSS6.9AI score0.00943EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/10/27 3:32 p.m.128 views

Exploit for Deserialization of Untrusted Data in Microsoft

WSUSResponder v1.0.1 Module PowerShell de réponse à l'inc...

9.8CVSS7.8AI score0.99938EPSS
SaveExploits24
RedhatCVE
RedhatCVE
added 2025/10/23 3:14 p.m.7 views

CVE-2025-58961

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kamleshyadav CF7 Auto Responder Addon CF7-autoresponder-addon allows DOM-Based XSS.This issue affects CF7 Auto Responder Addon: from n/a through = 2.4...

7.1CVSS6.4AI score0.00226EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.10 views

EUVD-2025-35449

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kamleshyadav CF7 Auto Responder Addon CF7-autoresponder-addon allows DOM-Based XSS.This issue affects CF7 Auto Responder Addon: from n/a through = 2.4...

5.9AI score0.00226EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/22 3:15 p.m.9 views

CVE-2025-58961

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kamleshyadav CF7 Auto Responder Addon CF7-autoresponder-addon allows DOM-Based XSS.This issue affects CF7 Auto Responder Addon: from n/a through = 2.4...

7.1CVSS0.00226EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.17 views

CVE-2025-58961 WordPress CF7 Auto Responder Addon plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kamleshyadav CF7 Auto Responder Addon CF7-autoresponder-addon allows DOM-Based XSS.This issue affects CF7 Auto Responder Addon: from n/a through = 2.4...

7.1CVSS0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder