Lucene search
+L

355 matches found

CVE
CVE
•added 2026/04/08 2:54 p.m.•76 views

CVE-2026-33753

CVE-2026-33753 affects the Python library rfc3161-client (prior to 1.0.6). The vulnerability arises in the library’s signature verification when extracting the leaf certificate from an unordered PKCS#7 bag of certificates, enabling an attacker to append a forged certificate that matches the targe...

7.5CVSS5.9AI score0.00205EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/08 2:54 p.m.•10 views

CVE-2026-33753 Improper Certificate Validation in rfc3161-client

rfc3161-client is a Python library implementing the Time-Stamp Protocol TSP described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw i...

6.2CVSS5.9AI score0.00205EPSS
SaveExploits1References1
OSV
OSV
•added 2026/04/08 2:54 p.m.•14 views

CVE-2026-33753 Improper Certificate Validation in rfc3161-client

rfc3161-client is a Python library implementing the Time-Stamp Protocol TSP described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw i...

6.2CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•11 views

PT-2026-31325

Name of the Vulnerable Software and Affected Versions rfc3161-client versions prior to 1.0.6 Description An authorization bypass issue exists in rfc3161-client's signature verification. An attacker can impersonate a trusted TimeStamping Authority TSA by exploiting a flaw in how the library extrac...

7.5CVSS5.8AI score0.00205EPSS
SaveExploits1References16
RedhatCVE
RedhatCVE
•added 2026/04/02 5:04 a.m.•18 views

CVE-2026-3776

The application does not validate the presence of required appearance AP data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/01 3:31 a.m.•19 views

EUVD-2026-17753

The application does not validate the presence of required appearance AP data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/01 2:16 a.m.•11 views

CVE-2026-3776

The application does not validate the presence of required appearance AP data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a...

5.5CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/01 1:40 a.m.•49 views

CVE-2026-3776

CVE-2026-3776 is a null pointer dereference in Foxit PDF Editor/Reader when handling stamp annotations that lack appearance (AP) data. The affected code dereferences the related object without checking for null/valid AP data, allowing a crafted PDF to crash the application and cause a denial of s...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2026/04/01 1:40 a.m.•63 views

CVE-2026-3776 Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation

The application does not validate the presence of required appearance AP data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a...

5.5CVSS0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/01 1:40 a.m.•11 views

CVE-2026-3776 Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation

The application does not validate the presence of required appearance AP data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/01 1:40 a.m.•10 views

CVE-2026-3776

The application does not validate the presence of required appearance AP data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•4 views

CVE-2026-3776: NULL Pointer Dereference

The application does not validate the presence of required appearance AP data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a...

5.5CVSS5.6AI score0.00148EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/01 12:00 a.m.•20 views

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have security vulnerabilities. These vulnerabilities stem from the lack of verification of the...

5.5CVSS5.8AI score0.00148EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/01 12:00 a.m.•13 views

PT-2026-29436

The application does not validate the presence of required appearance AP data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2
Circl
Circl
•added 2026/03/21 11:53 a.m.•14 views

CVE-2026-4511

creationtimestamp| type| source ---|---|--- 2026-03-21 11:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhkxu7klvb2u...

6.5CVSS6.7AI score0.00393EPSS
SaveExploits0References1
Circl
Circl
•added 2026/02/24 9:02 p.m.•18 views

CVE-2026-26222

creationtimestamp| type| source ---|---|--- 2026-02-24 21:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn2ua7ygg2v 2026-02-25 03:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfnouj34hn2w 2026-02-25 03:00:37+00:00| seen|...

10CVSS5.8AI score0.01527EPSS
SaveExploits0References3
Amazon
Amazon
•added 2026/02/19 12:00 a.m.•25 views

Important: edk2

Issue Overview: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. CVE-2025-68160 When using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths,...

7.5CVSS6.5AI score0.00958EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•20 views

PT-2026-37513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel NULL pointer dereference occurs in the xscale ethernet component. The function ixp4xx get ts info calls ixp46x ptp find unconditionally, even though PTP Precision Time Protocol...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0
Circl
Circl
•added 2026/02/12 7:10 p.m.•11 views

GHSA-2F2X-8MWP-P2GC

creationtimestamp| type| source ---|---|--- 2026-02-12 19:10:24+00:00| seen| https://gist.github.com/alon710/65570bea1d8bf7bce8ccfbb01e9a80b6...

5.1AI score
SaveExploits0References1
Circl
Circl
•added 2026/02/11 1:55 p.m.•20 views

CVE-2026-0595

creationtimestamp| type| source ---|---|--- 2026-02-11 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmweqeno2j...

7.3CVSS5.8AI score0.00258EPSS
SaveExploits0References1
Rows per page
Query Builder