Lucene search
+L

2909 matches found

Positive Technologies
Positive Technologies
added 2026/05/05 12:00 a.m.16 views

PT-2026-37073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter verifier where the dst reg-id is not reset to 0 during a BPF END byte swap operation. When a register undergoes this operation, its scal...

7.8CVSS5.8AI score0.00118EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
added 2026/05/01 4:14 p.m.18 views

CVE-2026-43009

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. The verifier, responsible for ensuring the safety of BPF programs, incorrectly tracks the precision of atomic fetch operations. This error can lead to the verifier pruning execution paths that should not be considered...

7.8CVSS5.9AI score0.00127EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/01 3:16 p.m.10 views

AZL-85407 CVE-2026-43009 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrackinsn encounters a BPFSTX instruction with BPFATOMIC and BPFFETCH, the src register or r0 for BPFCMPXCHG also acts as a destination, thus receiving th...

7.8CVSS6AI score0.00127EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/01 2:15 p.m.12 views

CVE-2026-43009 bpf: Fix incorrect pruning due to atomic fetch precision tracking

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrackinsn encounters a BPFSTX instruction with BPFATOMIC and BPFFETCH, the src register or r0 for BPFCMPXCHG also acts as a destination, thus receiving th...

7.8CVSS6AI score
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2026/04/28 11:10 a.m.21 views

Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to version 1.84. Security issues fixed: CVE-2025-14813: GOSTCTR implementation unable to process more than 255 blocks correctly bsc1262225. CVE-2026-0636: LDAP injection in LDAPStoreHelper.java leads to information disclosure...

8.8CVSS5.7AI score0.00899EPSS
SaveExploits0References20
OSV
OSV
added 2026/04/24 3:54 p.m.8 views

SUSE-SU-2026:21404-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: - Update to version 1.84: - CVE-2025-14813: GOSTCTR implementation unable to process more than 255 blocks correctly bsc1262225. - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java bsc1262226. - CVE-2026-3505: Unbounded PGP...

9.9CVSS5.8AI score0.00899EPSS
SaveExploits0References11
OSV
OSV
added 2026/04/24 3:26 p.m.27 views

OPENSUSE-SU-2026:20627-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: - Update to version 1.84: - CVE-2025-14813: GOSTCTR implementation unable to process more than 255 blocks correctly bsc1262225. - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java bsc1262226. - CVE-2026-3505: Unbounded PGP...

9.9CVSS5.3AI score0.00899EPSS
SaveExploits0References10
CVE
CVE
added 2026/04/24 2:44 p.m.43 views

CVE-2026-31631

The CVE-2026-31631 issue concerns the Linux kernel’s rxrpc path, specifically a buffer overread in rxgk_do_verify_authenticator(). The vulnerability arises because the function checks the nonce before validating the buffer size, potentially reading beyond the allocated memory. A fix has been appl...

8.2CVSS5.6AI score0.00385EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/04/24 2:44 p.m.12 views

EUVD-2026-25524

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix buffer overread in rxgkdoverifyauthenticator Fix rxgkdoverifyauthenticator to check the buffer size before checking the nonce...

5.6AI score0.00385EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/23 6:33 p.m.12 views

CVE-2026-41213 @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

5.9CVSS6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/23 6:33 p.m.6 views

CVE-2026-41213 @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

5.9CVSS5.3AI score0.00259EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/23 6:33 p.m.7 views

CVE-2026-41213

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2026/04/23 6:33 p.m.24 views

EUVD-2026-25272

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/04/23 6:33 p.m.59 views

CVE-2026-41213 @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

5.9CVSS0.00259EPSS
SaveExploits1References1
CVE
CVE
added 2026/04/23 6:33 p.m.61 views

CVE-2026-41213

The CVE concerns @node-oauth/oauth2-server, a Node.js OAuth2 server module. The token exchange path accepts RFC7636-invalid code_verifier values for S256 PKCE flows (including one-character verifiers). The underlying cause is that ABNF enforcement for code_verifier is not performed during token e...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits1References1Affected Software1
Packet Storm News
Packet Storm News
added 2026/04/23 12:00 a.m.11 views

Strategic Heterogeneous Multi-Agent Architecture for Cost-Effective Code Vulnerability Detection

Automated code vulnerability detection is critical for software security, yet existing approaches face a fundamental trade-off between detection accuracy and computational cost. We propose a heterogeneous multi-agent architecture inspired by game-theoretic principles, combining cloud-based LLM...

5.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/23 12:00 a.m.26 views

PT-2026-34722

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid code verifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/04/23 12:00 a.m.25 views

@node-oauth/oauth2-server 安全漏洞

@node-oauth/oauth2-server is an open-source Node.js OAuth2 server implementation that adheres to RFC standards. @node-oauth/oauth2-server has a security vulnerability; this vulnerability stems from the token exchange path accepting an invalid codeverifier value according to RFC7636, which may lea...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits1References1
NVD
NVD
added 2026/04/22 2:16 p.m.13 views

CVE-2026-31525

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smod for INTMIN The BPF interpreter's signed 32-bit division and modulo handlers use the kernel abs macro on s32 operands. The abs macro documentation include/linux/math.h explicitl...

7.8CVSS0.00129EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/22 1:54 p.m.12 views

CVE-2026-31526 bpf: Fix exception exit lock checking for subprogs

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs processbpfexitfull passes checklock = !curframe to checkresourceleak, which is false in cases when bpfthrow is called from a static subprog. This makes checkresourceleak to skip...

5.7AI score
SaveExploits0References6
Rows per page
Query Builder