Lucene search
K

89 matches found

NVD
NVD
added 2026/04/03 4:17 a.m.7 views

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

7.5CVSS0.00475EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2026/04/03 4:17 a.m.1 views

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

7.5CVSS5.9AI score0.00475EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/04/03 3:28 a.m.13 views

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

3.7CVSS0.00475EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/04/03 3:28 a.m.5 views

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

3.7CVSS6AI score0.00475EPSS
Exploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/03 12:0 a.m.4 views

PT-2026-29975

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data...

3.7CVSS6AI score0.00475EPSS
Exploits0References8
Snyk
Snyk
added 2026/02/27 3:20 a.m.3 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the handleRequestInternal function of the Session Handler component. An attacker can cause a service disruption by sending specially crafted requests remotely. Remediation There is no fixed versi...

6.5CVSS5.9AI score0.00561EPSS
Exploits1References2
EUVD
EUVD
added 2026/02/27 12:31 a.m.5 views

EUVD-2026-8941

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

5.3CVSS5.1AI score0.00561EPSS
Exploits1References5
NVD
NVD
added 2026/02/27 12:16 a.m.4 views

CVE-2026-3269

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

6.5CVSS0.00561EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/26 11:32 p.m.1 views

CVE-2026-3269

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

6.5CVSS5.3AI score0.00561EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/26 11:32 p.m.5 views

CVE-2026-3269 psi-probe PSI Probe Session ExpireSessionsController.java handleRequestInternal denial of service

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

5.3CVSS5.5AI score0.00561EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/02/26 12:0 a.m.3 views

PT-2026-22236

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

5.3CVSS4.8AI score0.00561EPSS
Exploits1References5
Snyk
Snyk
added 2026/01/05 7:43 p.m.2 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the startSessionHandler function. An attacker can cause excessive memory consumption and crash the server by sending unauthenticated HTTP requests with a specially crafted nonce a...

6.9CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2026/01/05 7:43 p.m.1 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the startSessionHandler function. An attacker can cause excessive memory consumption and crash the server by sending unauthenticated HTTP requests with a specially crafted nonce a...

6.9CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2026/01/05 7:43 p.m.1 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the startSessionHandler function. An attacker can cause excessive memory consumption and crash the server by sending unauthenticated HTTP requests with a specially crafted nonce a...

6.9CVSS7.1AI score
Exploits0References3
OSV
OSV
added 2026/01/05 7:43 p.m.1 views

GHSA-HJR9-WJ7V-7HV8 Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass

Summary A specially crafted nonce routes unauthenticated requests through the NoEncoder path, where startSessionHandler reads the entire request body without limits, allowing attacker-driven memory exhaustion and process crash. Details - server/encoders/encoders.go: EncoderFromNonce returns...

6.9CVSS6.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-1033

Name of the Vulnerable Software and Affected Versions Open5GS versions through 2.7.6 Description A flaw exists in Open5GS related to the sgwc s11 handle create session request function within the GTPv2-C F-TEID Handler component, specifically in the file src/sgwc/s11-handler.c. Manipulation of th...

5.5CVSS6.2AI score0.00167EPSS
Exploits1References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-0770

Malware in sbrugna...

5CVSS6.4AI score0.02448EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-7528

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00841EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-20195

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00498EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-1456

Malicious code in bioql PyPI...

3.7CVSS4.7AI score0.0079EPSS
Exploits0References6
Rows per page
Query Builder