Lucene search
K

6 matches found

UbuntuCve
UbuntuCve
added 2026/03/13 7:54 p.m.2 views

CVE-2026-31814

Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in send-window accounting, which triggers a panic in the connection state machine. This is remotely reachable over a normal...

8.7CVSS5.9AI score0.00035EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/13 7:19 p.m.2 views

CVE-2026-31814 Yamux remote Panic via malformed WindowUpdate credit

Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in send-window accounting, which triggers a panic in the connection state machine. This is remotely reachable over a normal...

8.7CVSS5.8AI score0.00035EPSS
Exploits1References1
OSV
OSV
added 2026/03/13 7:19 p.m.0 views

CVE-2026-31814 Yamux remote Panic via malformed WindowUpdate credit

Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in send-window accounting, which triggers a panic in the connection state machine. This is remotely reachable over a normal...

8.7CVSS5.8AI score0.00035EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/13 7:19 p.m.21 views

CVE-2026-31814 Yamux remote Panic via malformed WindowUpdate credit

Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in send-window accounting, which triggers a panic in the connection state machine. This is remotely reachable over a normal...

8.7CVSS0.00035EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.2 views

PT-2026-25360

Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in send-window accounting, which triggers a panic in the connection state machine. This is remotely reachable over a normal...

8.7CVSS5.8AI score0.00035EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/10/01 12:0 a.m.2 views

Spotify-for-Alfred 跨站脚本漏洞

Spotify-For-Alfred Spotifious is an open source licensed streaming music service platform by Ben Stolovitz, an individual developer. A cross-site scripting vulnerability exists in Spotify-for-Alfred versions 0.13.9 and below, which allows remote attackers to inject arbitrary web script or HTML vi...

6.1CVSS6.1AI score0.00283EPSS
Exploits1References1
Rows per page
Query Builder