Lucene search
+L

8633 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•8 views

CVE-2025-62342: Insufficient Session Expiration

HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...

6.4CVSS5.8AI score0.00188EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•28 views

PT-2026-82416

Name of the Vulnerable Software and Affected Versions Spring AMQP version 4.1.0 Spring AMQP versions 4.0.0 through 4.0.4 Spring AMQP versions 3.2.0 through 3.2.12 Spring AMQP versions 2.4.18 and earlier Description A single hostile AMQP message can cause the entire consumer JVM to terminate via a...

6.6CVSS5.8AI score0.00446EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•34 views

PT-2026-82504

Name of the Vulnerable Software and Affected Versions HCL IntelliOps Event Management IEM affected versions not specified Description Improper handling of user sessions may prevent sessions from being fully terminated after a logout or deletion process occurs. Recommendations At the moment, there...

6.4CVSS5.7AI score0.00188EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/26 8:17 p.m.•15 views

CVE-2026-26446

Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...

7.5CVSS0.00488EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/08/26 4:08 a.m.•20 views

kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check

A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...

8.2CVSS7.4AI score0.00971EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•18 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098890)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098890 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily...

7.1CVSS6.1AI score0.00164EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-79778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transpo...

6CVSS5.9AI score0.00285EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•18 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098902)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098902 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before findtablelock updatecounters and...

7.1CVSS6.4AI score0.00131EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/26 12:00 a.m.•45 views

CVE-2026-26446

Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...

0.00488EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/26 12:00 a.m.•19 views

CVE-2026-26446

The Stomper 5e2741e software is vulnerable to a Denial of Service (DoS) condition. The flaw occurs when a broker attempts to send data to a client whose TCP connection has already been closed by the peer; this triggers a SIGPIPE signal, causing the server process to terminate immediately. Any una...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References2
Wolfi
Wolfi
•added 2026/08/25 8:26 p.m.•25 views

GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, infinispan-operator, redis-operator, juicefs-csi-driver, op-geth, etcd, opentelemetry-collector-contrib, verticadb-operator, cloudflared, jitsucom-bulker, amazon-cloudwatch-agent, guac, emissary, kubernetes, rancher-telemetry, kubevela...

5.8AI score
SaveExploits0
NVD
NVD
•added 2026/08/25 8:17 p.m.•11 views

CVE-2026-65367

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

5.5CVSS0.00143EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/25 7:24 p.m.•36 views

CVE-2026-65367

A null pointer dereference vulnerability exists in iOS and iPadOS versions prior to 18.7.9 and 26.5 . The root cause is insufficient input validation , which could allow an application to trigger an unexpected system termination (crash). This issue is resolved in versions 18.7.9 and 26.5 through ...

5.5CVSS5.5AI score0.00143EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2026/08/25 7:24 p.m.•36 views

CVE-2026-65367

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

0.00143EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/25 7:24 p.m.•14 views

CVE-2026-65367

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

5.5AI score0.00143EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/25 7:24 p.m.•12 views

EUVD-2026-65742

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

5.2AI score0.00143EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/25 7:24 p.m.•14 views

EUVD-2026-65741

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory...

5.6AI score0.00171EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/08/25 7:24 p.m.•12 views

CVE-2026-64705

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory...

6AI score0.00171EPSS
SaveExploits1References4
CVE
CVE
•added 2026/08/25 7:24 p.m.•41 views

CVE-2026-64705

A buffer overflow in the HFS kernel extension allows an app to cause unexpected system termination or write to kernel memory . The root cause is an unbounded bcopy loop in hfs_getxattr_internal (and hfs_setxattr_internal) triggered by crafted extended attributes on an HFS+ disk image , where the ...

5.5CVSS6AI score0.00171EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/08/25 3:16 p.m.•41 views

CVE-2026-79778 rclone before v1.75.0 Denial of Service via TUS nil-response panic

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates...

6CVSS0.00285EPSS
SaveExploits0References2
Rows per page
Query Builder