Lucene search
+L

5 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/19 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-112063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAMHi that allows malicious XMPP servers to overflow a 128-byte stack buffer...

6CVSS6.3AI score0.00283EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/09/17 9:33 p.m.•14 views

Incorrect Implementation of Authentication Algorithm

Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm due to improper validation in the SCRAM authentication process. An attacker can intercept authentication handshakes and obtain the client proof by injecting a crafted...

6.3CVSS5.8AI score0.00321EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/17 9:17 p.m.•13 views

CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

6.3CVSS0.00321EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 12:12 a.m.•23 views

EUVD-2026-19888

RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests...

8.1CVSS5.8AI score0.0021EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/07 12:00 a.m.•24 views

PT-2026-30990

RedwoodSDK is a server-first React framework. From 1.0.0-beta.50 to 1.0.5, erver functions exported from "use server" files could be invoked via GET requests, bypassing their intended HTTP method. In cookie-authenticated applications, this allowed cross-site GET navigations to trigger...

8.1CVSS5.8AI score0.0021EPSS
SaveExploits0References3
Rows per page
Query Builder