Lucene search
+L

68713 matches found

NVD
NVD
added 2026/08/19 11:16 p.m.9 views

CVE-2026-76928

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

7.5CVSS0.00274EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2026/08/19 11:16 p.m.13 views

CVE-2026-76928

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

7.5CVSS7.3AI score0.00274EPSS
SaveExploits1References3
OSV
OSV
added 2026/08/19 11:16 p.m.9 views

UBUNTU-CVE-2026-76928

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

7.5CVSS5.5AI score0.00274EPSS
SaveExploits1References4
CVE
CVE
added 2026/08/19 11:00 p.m.76 views

CVE-2026-76928

Wireshark's X.509IF protocol dissector crashes via a NULL pointer dereference in versions 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 7.5 HIGH; network-based DoS requiring no authentication. Affected users should upgrade to a patched release; see wnpa-sec-2026-87 for details.

7.5CVSS5.3AI score0.00274EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/08/19 11:00 p.m.44 views

CVE-2026-76928 NULL Pointer Dereference in Wireshark

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

7.5CVSS0.00274EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2026/08/19 11:00 p.m.9 views

CVE-2026-76928

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

7.5CVSS5.4AI score0.00274EPSS
SaveExploits1
NVD
NVD
added 2026/08/19 9:16 p.m.15 views

CVE-2026-54738

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realipremoteaddr reads the first value of X-Forwarded-For as the client address used by rawipkey in crates/utils/src/ratelimit/mod.rs. Lemmy's bundled docker/nginx.conf uses...

6.5CVSS0.00428EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/19 8:27 p.m.14 views

EUVD-2026-62850

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realipremoteaddr reads the first value of X-Forwarded-For as the client address used by rawipkey in crates/utils/src/ratelimit/mod.rs. Lemmy's bundled docker/nginx.conf uses...

6.5CVSS5.4AI score0.00428EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/19 8:27 p.m.34 views

CVE-2026-54738 Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realipremoteaddr reads the first value of X-Forwarded-For as the client address used by rawipkey in crates/utils/src/ratelimit/mod.rs. Lemmy's bundled docker/nginx.conf uses...

6.5CVSS0.00428EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/19 8:27 p.m.27 views

CVE-2026-54738

Lemmy , a fediverse link aggregator and forum, is vulnerable to rate limit bypass via X-Forwarded-For header spoofing in versions prior to 0.19.19 and 1.0.0-beta.1 . The root cause is that actix-web's ConnectionInfo::realip_remote_addr reads the first value of X-Forwarded-For as the client addres...

6.5CVSS5.4AI score0.00428EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/19 8:27 p.m.34 views

CVE-2026-54738 Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realipremoteaddr reads the first value of X-Forwarded-For as the client address used by rawipkey in crates/utils/src/ratelimit/mod.rs. Lemmy's bundled docker/nginx.conf uses...

6.5CVSS5.6AI score
SaveExploits0References10
EUVD
EUVD
added 2026/08/19 7:29 p.m.18 views

EUVD-2026-62721

Etherpad is a real-time collaborative editor. From 2.1.0 until 3.1.0, Etherpad uses the attacker-controlled x-proxy-path request header in src/node/hooks/express/admin.ts when substituting paths into HTML, JavaScript, and CSS under /admin without sanitization, Vary: x-proxy-path, or Cache-Control...

6.1CVSS5.3AI score0.00523EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/19 7:29 p.m.37 views

CVE-2026-55087 Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect)

Etherpad is a real-time collaborative editor. From 2.1.0 until 3.1.0, Etherpad uses the attacker-controlled x-proxy-path request header in src/node/hooks/express/admin.ts when substituting paths into HTML, JavaScript, and CSS under /admin without sanitization, Vary: x-proxy-path, or Cache-Control...

6.1CVSS0.00523EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/19 6:03 p.m.9 views

RLSA-2026:56936 Important: mysql:8.4 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026...

8.4CVSS7.8AI score0.00466EPSS
SaveExploits0References31
RedHat Linux
RedHat Linux
added 2026/08/19 4:23 p.m.12 views

Important: Red Hat Security Advisory: mysql:8.4 security, bug fix, and enhancement update

An update for the mysql:8.4 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.4CVSS7.8AI score0.00466EPSS
SaveExploits0References31
RedHat Linux
RedHat Linux
added 2026/08/19 4:23 p.m.16 views

mysql: X Plugin unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...

7.2CVSS6.9AI score0.00378EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/19 4:23 p.m.15 views

mysql: X Plugin unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...

8.2CVSS6.7AI score0.00275EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/19 1:17 p.m.31 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.53 security and extras update

Red Hat OpenShift Container Platform release 4.18.53 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...

7.5CVSS5.7AI score0.00544EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2026/08/19 12:15 p.m.10 views

mysql: X Plugin unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...

7.2CVSS5.1AI score0.00378EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/19 12:15 p.m.10 views

mysql: X Plugin unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...

8.2CVSS5AI score0.00275EPSS
SaveExploits0References6
Rows per page
Query Builder