Lucene search
+L

13931 matches found

EUVD
EUVD
added 2026/08/05 5:42 a.m.7 views

EUVD-2026-53093

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version...

6.5CVSS5.4AI score0.00421EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 5:42 a.m.41 views

CVE-2026-66277

CVE-2026-66277 affects Apache Qpid Proton-J up to version 0.34.1. The issue is an inability to govern the maximum number of transfer frames per incoming delivery, allowing an authenticated attacker to cause excessive resource usage and potential denial of service. The recommended remediation is t...

6.5CVSS5.4AI score0.00421EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/05 5:42 a.m.6 views

CVE-2026-66277 Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version...

6.5CVSS5.3AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/05 5:42 a.m.34 views

CVE-2026-66277 Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version...

0.00421EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2026/08/05 12:0 a.m.20 views

📄 LightFTP Server 2.3.1 Race Condition

LightFTP version 2.3.1 contains a residual race condition in the workerthreadcleanup function of ftpserv.c. The control thread reads and acts on shared per-connection state, including the worker thread id it then passes to pthreadjoin/pthreadcancel, without holding the context-MTLock mutex that t...

9.2CVSS5.6AI score0.00333EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-67592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage...

7.5CVSS5.3AI score0.00478EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/04 10:17 p.m.6 views

CVE-2026-67856

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItemsSampling, Publish, TransferSubscriptions, and DeleteSubscriptions requests...

7.5CVSS0.00422EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/08/04 4:38 p.m.34 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

No d...

7.8CVSS7.5AI score0.99907EPSS
SaveExploits237
Cvelist
Cvelist
added 2026/08/04 2:23 p.m.39 views

CVE-2026-11368 Use-after-free in Bluetooth host ATT TX completion on disconnect mid-transfer

The Bluetooth host ATT layer subsys/bluetooth/host/att.c associates each in-flight ATT TX buffer with its owning channel via the static txmetadatastorage array data-attchan = chan. When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system...

7.1CVSS0.00185EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/04 2:23 p.m.6 views

CVE-2026-11368 Use-after-free in Bluetooth host ATT TX completion on disconnect mid-transfer

The Bluetooth host ATT layer subsys/bluetooth/host/att.c associates each in-flight ATT TX buffer with its owning channel via the static txmetadatastorage array data-attchan = chan. When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system...

7.1CVSS5.7AI score
SaveExploits0References5
CVE
CVE
added 2026/08/04 12:0 a.m.48 views

CVE-2026-67856

The vulnerability CVE-2026-67856 affects the open62541 OPC UA server and is present in version 1.5.5 and earlier. The issue allows a remote attacker to cause a denial of service by sending crafted subscription-related requests, specifically CreateSubscription, CreateMonitoredItems(Sampling), Publ...

7.5CVSS5.5AI score0.00422EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/03 6:47 p.m.6 views

MGASA-2026-0319 Updated squid packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Due to a Improper Validation of Syntactic Correctness of Inputbug, Squid is vulnerable to a Out-of-bounds Read attack against the FTP gateway. CVE-2026-47729 Due to an Improper Input Validation bug, Squid is vulnerable to a Heap-based Buffer...

6.5CVSS6.5AI score0.01503EPSS
SaveExploits1References5
Mageia
Mageia
added 2026/08/03 6:47 p.m.8 views

Updated squid packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Due to a Improper Validation of Syntactic Correctness of Inputbug, Squid is vulnerable to a Out-of-bounds Read attack against the FTP gateway. CVE-2026-47729 Due to an Improper Input Validation bug, Squid is vulnerable to a Heap-based Buffer...

6.5CVSS6.5AI score0.01503EPSS
SaveExploits1References4
NVD
NVD
added 2026/08/03 5:16 p.m.9 views

CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS0.00119EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/03 5:16 p.m.4 views

UBUNTU-CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS5.5AI score0.00119EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/08/03 5:8 p.m.10 views

CVE-2026-68945

A flaw was found in Angular's HttpTransferCache component. This component, used for caching HTTP requests during server-side rendering, incorrectly generates cache keys when repeated request parameters are present, causing semantically different requests to share the same cache key. This cache-ke...

8.8CVSS5.5AI score0.00119EPSS
SaveExploits0References9
Snyk
Snyk
added 2026/08/03 3:59 p.m.7 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the HttpTransferCache used for server-side rendering, which builds the transfer-cache key by joining repeated HttpParams values with commas so that distinct parameter shapes produce the...

9.3CVSS5.4AI score0.00119EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 3:58 p.m.5 views

CVE-2026-68945 Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS5.5AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/03 3:58 p.m.48 views

CVE-2026-68945 Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

8.8CVSS0.00119EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/03 1:20 p.m.12 views

CVE-2026-69094

Admidio before 5.0.11 contains an insecure direct object reference vulnerability in the savetemporary mode of mylistfunction.php that allows authenticated users to hijack list configurations. Attackers can enumerate global list UUIDs and overwrite admin-curated global lists or other users' privat...

5.3CVSS5.5AI score0.00158EPSS
SaveExploits0References3
Rows per page
Query Builder