Lucene search
+L

18731 matches found

NVD
NVD
added 2026/08/04 8:16 a.m.12 views

CVE-2026-18753

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

9.1CVSS0.00313EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/04 7:09 a.m.14 views

EUVD-2026-52638

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

9.1CVSS5.5AI score0.00313EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/04 7:08 a.m.8 views

CVE-2026-18753

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

9.1CVSS5.5AI score0.00313EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/04 7:08 a.m.76 views

CVE-2026-18753

CVE-2026-18753 concerns GV-AS1620 Controller Firmware (GV-ASManager). The firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this private key allows attackers to decrypt HTTPS traffic and spoof the server, compromising confidenti...

9.1CVSS5.5AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/04 7:08 a.m.14 views

EUVD-2026-52637

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

9.1CVSS5.5AI score0.00313EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/04 5:28 a.m.17 views

CVE-2026-67316

A flaw was found in axios, a widely used JavaScript library for making web requests. This vulnerability, known as prototype pollution, allows an attacker to subtly alter how network requests are built if another part of the system has already been compromised. This could lead to an attacker...

7.4CVSS5.5AI score0.00354EPSS
SaveExploits1References5
NVD
NVD
added 2026/08/03 7:16 p.m.14 views

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related...

6.9CVSS0.00201EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 7:02 p.m.51 views

CVE-2026-67598 Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary TLS certificates, as CURLOPTSSLVERIFYPEER and...

9.1CVSS0.00205EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/03 5:50 p.m.13 views

EUVD-2025-210611

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

6.9CVSS5.5AI score0.00181EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 5:50 p.m.59 views

CVE-2025-15629 Weak Session Key Generation in TP-Link Omada Adoption Protocol

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

6.9CVSS0.00181EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/03 5:50 p.m.14 views

EUVD-2025-210610

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications...

8.2CVSS5.5AI score0.00222EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/03 5:49 p.m.8 views

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related...

6.9CVSS5.3AI score0.00201EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/03 5:49 p.m.76 views

CVE-2025-15544

CVE-2025-15544 describes a cryptographic weakness in the Omada device adoption process where site management credentials are transmitted using a weak hashing algorithm, potentially allowing an attacker who intercepts adoption traffic to recover valid credentials and gain unauthorized access to ma...

6.9CVSS5.3AI score0.00201EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2026/08/03 4:47 p.m.13 views

axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection

A flaw was found in axios, a widely used JavaScript library for making web requests. This vulnerability, known as prototype pollution, allows an attacker to subtly alter how network requests are built if another part of the system has already been compromised. This could lead to an attacker...

7.4CVSS5.5AI score0.00354EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/08/01 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-65981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the...

7.1CVSS5.5AI score0.00311EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/07/31 10:14 p.m.22 views

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

9.8CVSS6AI score0.00536EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/31 9:17 p.m.14 views

CVE-2026-65981

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does not verify that identity against the original allocation owner, allowing an authenticated attacker...

7.1CVSS0.00311EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/07/31 9:00 p.m.19 views

CVE-2026-65981

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does not verify that identity against the original allocation owner, allowing an authenticated attacker...

7.1CVSS5.5AI score0.00311EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/07/31 7:14 p.m.17 views

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

9.8CVSS6AI score0.00536EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/31 6:18 p.m.15 views

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

9.8CVSS6AI score0.00536EPSS
SaveExploits0References5
Rows per page
Query Builder