Lucene search
+L

74 matches found

Cvelist
Cvelist
•added 2026/09/30 6:00 a.m.•28 views

CVE-2026-75823 WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption

The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is...

0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 6:00 a.m.•5 views

CVE-2026-75823 WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption

The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is...

5.8AI score0.0025EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 6:00 a.m.•10 views

EUVD-2026-89639

The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is...

7.4CVSS5.8AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•4 views

PT-2026-103022

The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is...

7.4CVSS5.8AI score0.0025EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/25 4:16 p.m.•12 views

ALPINE-CVE-2026-57452

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method xchacha20poly1305, requires the +sodium feature whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflo...

5.5CVSS6.1AI score0.0017EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•17 views

The vulnerability of the Crypt::NaCl::Sodium library, related to integer overflow, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the Crypt::NaCl::Sodium library is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

9.4CVSS5.9AI score0.0065EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
•added 2026/03/09 1:59 p.m.•14 views

CVE-2026-30910

Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows. Combined aead encryption, combined signature creation, and bin2hex functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer...

7.5CVSS6.2AI score0.00351EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/09 1:59 p.m.•16 views

CVE-2026-30909

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcmencryptafternm and seal functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer. Encountering this...

9.8CVSS5.8AI score0.00775EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/08 3:30 a.m.•32 views

EUVD-2026-10199

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcmencryptafternm and seal functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer. Encountering this...

5.8AI score0.00775EPSS
SaveExploits0References7
NVD
NVD
•added 2026/03/08 1:15 a.m.•19 views

CVE-2026-30909

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcmencryptafternm and seal functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer. Encountering this...

9.8CVSS0.00775EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/03/08 12:46 a.m.•4 views

CVE-2026-30909 Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcmencryptafternm and seal functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer. Encountering this...

5.7AI score0.00775EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/03/08 12:46 a.m.•35 views

CVE-2026-30909 Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcmencryptafternm and seal functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer. Encountering this...

0.00775EPSS
SaveExploits0References6
OSV
OSV
•added 2026/03/08 12:46 a.m.•15 views

CVE-2026-30909 Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcmencryptafternm and seal functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer. Encountering this...

9.8CVSS6AI score
SaveExploits0References11
CVE
CVE
•added 2026/03/08 12:46 a.m.•47 views

CVE-2026-30909

Crypt::NaCl::Sodium for Perl up to version 2.002 is affected by potential integer overflows in bin2hex, encrypt, aes256gcm_encrypt_afternm, and seal, due to output-size checks against SIZE_MAX not being performed. This can lead to integer wraparound and an undersized output buffer, with impact de...

9.8CVSS5.7AI score0.00775EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
•added 2026/03/08 12:00 a.m.•19 views

Crypt::NaCl::Sodium 安全漏洞

Crypt::NaCl::Sodium is an encryption/decryption library open source by CPAN authors. Versions of Crypt::NaCl::Sodium 2.002 and earlier contain security vulnerabilities, which stem from integer overflows and may lead to insufficient output buffer size...

9.8CVSS5.9AI score0.00775EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/03/08 12:00 a.m.•24 views

PT-2026-23893

Name of the Vulnerable Software and Affected Versions Crypt::NaCl::Sodium versions through 2.002 Description The Crypt::NaCl::Sodium library for Perl versions through 2.002 may experience integer overflows in the bin2hex, encrypt, aes256gcm encrypt afternm, and seal functions. These functions do...

9.8CVSS5.7AI score0.00775EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•3 views

CVE-2026-30910: Integer Overflow or Wraparound

Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows. Combined aead encryption, combined signature creation, and bin2hex functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer...

7.5CVSS5.9AI score0.00351EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•3 views

CVE-2026-30909: Integer Overflow or Wraparound

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcmencryptafternm and seal functions do not check that output size will be less than SIZEMAX, which could lead to integer wraparound causing an undersized output buffer. Encountering this...

9.8CVSS5.7AI score0.00775EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/24 1:44 a.m.•17 views

CVE-2026-2588

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN sizet to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems sizet is typically 32-bits while an unsigned long long is at least 64-bi...

9.1CVSS5.4AI score0.0065EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/23 12:15 a.m.•26 views

CVE-2026-2588

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN sizet to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems sizet is typically 32-bits while an unsigned long long is at least 64-bi...

9.1CVSS0.0065EPSS
SaveExploits0References3
Rows per page
Query Builder