Lucene search
+L

5719 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/13 5:9 a.m.7 views

CVE-2026-21008

Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information...

5.1CVSS5.8AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.16 views

PT-2026-32485

Name of the Vulnerable Software and Affected Versions AC800M System 800xA versions 6.0.0x through 6.0.0303.0 AC800M System 800xA versions 6.1.0x through 6.1.0031.0 AC800M System 800xA versions 6.1.1x through 6.1.1202.0 AC800M System 800xA versions 6.2.0x through 6.2.0006.0 Symphony Plus SD Series...

7.1CVSS5.2AI score0.00184EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/13 12:0 a.m.9 views

ABB多款产品 安全漏洞

The ABB AC800M is a product of the Swiss company ABB. The ABB AC800M is a modular process controller designed for industrial automation systems. The ABB Symphony Plus SD Series consists of a series of control and I/O devices intended for industrial process control and distributed control systems...

7.1CVSS5.8AI score0.00184EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/11 7:42 a.m.11 views

SUSE-SU-2026:21217-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ringlen param bsc1252036. - CVE-2025-40018: ipvs: Defer ipvsftp unregister during netns cleanup bsc1252689. -...

7.8CVSS5.8AI score0.00481EPSS
SaveExploits8References17
Wolfi
Wolfi
added 2026/04/11 2:51 a.m.16 views

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, rabbitmq-messaging-topology-operator, aws-signer-notation-plugin, prometheus-pushgateway, argo-events, dive, nri-mongodb, newrelic-k8s-metadata-injection, rancher-helm, secrets-store-csi-driver-provider-aws, flux-source-controller, otel-cli, redka,...

7.5CVSS7.1AI score0.00355EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/10 7:22 p.m.7 views

CVE-2025-50668

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

7.5CVSS6AI score0.00408EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/10 7:22 p.m.8 views

CVE-2025-50645

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoelistopt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow...

7.5CVSS6.1AI score0.00516EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/10 4:17 a.m.10 views

CVE-2026-5466

wolfSSL's ECCSI signature verifier wcVerifyEccsiHash decodes the r and s scalars from the signature blob via mpreadunsignedbin with no check that they lie in 1, q-1. A crafted forged signature could verify against any message for any identity, using only publicly-known constants...

8.1CVSS0.00147EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/10 3:0 a.m.2 views

CVE-2026-5466

wolfSSL's ECCSI signature verifier wcVerifyEccsiHash decodes the r and s scalars from the signature blob via mpreadunsignedbin with no check that they lie in 1, q-1. A crafted forged signature could verify against any message for any identity, using only publicly-known constants...

7.6CVSS5.9AI score0.00147EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/10 3:0 a.m.47 views

CVE-2026-5466

CVE-2026-5466 affects wolfSSL’s ECCSI verifier wc_VerifyEccsiHash, which decodes r and s without validating they lie in [1, q-1]. This could allow forging a signature to verify against any message for any identity using publicly-known constants. Connected docs confirm the root cause: missing sani...

8.1CVSS5.9AI score0.00147EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.9 views

PT-2026-31862

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description The ECCSI signature verifier wc VerifyEccsiHash in wolfSSL decodes the r and s scalars from the signature blob using mp read unsigned bin without verifying that these values fall within the...

7.6CVSS5.8AI score0.00147EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/09 9:28 p.m.17 views

CVE-2026-33786

CVE-2026-33786 affects Juniper Networks Junos OS running on SRX1600, SRX2300, and SRX4300. The issue is an Improper Check for Unusual or Exceptional Conditions in the chassis control daemon (chassisd), allowing a local, low-privilege attacker to cause a complete Denial of Service. When a specific...

6.8CVSS5.9AI score0.00095EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/04/08 9:33 p.m.16 views

EUVD-2025-209358

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

6.2AI score0.00408EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/08 9:33 p.m.12 views

EUVD-2025-209323

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoelistopt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow...

6.1AI score0.00516EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/08 7:24 p.m.5 views

CVE-2025-50668

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

7.5CVSS0.00408EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.12 views

PT-2026-31400

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the s parameter in the '/web list opt.asp' API endpoint. Recommendations At the moment, there is no information about a newer version that...

7.5CVSS6AI score0.00408EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.11 views

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router produced by D-Link Corporation. The D-Link DI-8003 version 16.07.26A1 has a security vulnerability. This vulnerability stems from improper handling of the s parameter in the /weblistopt.asp endpoint, which may lead to a buffer overflow...

7.5CVSS6.2AI score0.00408EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/08 12:0 a.m.4 views

CVE-2025-50668

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

6AI score0.00408EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.5 views

PT-2026-31371

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe list opt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow...

7.5CVSS6.1AI score0.00516EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/03 12:0 a.m.11 views

Oracle Linux 8 : mysql:8.4 (ELSA-2026-6391)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-6391 advisory. mecab mecab-ipadic mysql 8.4.8-1 - Rebase to 8.4.8 Tenable has extracted the preceding description block directly from the Oracle Linux security...

6.5CVSS7.1AI score0.00337EPSS
SaveExploits0References7
Rows per page
Query Builder