Rezultati pretraživanja za 'Od datuma: 27.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-123559 | 7.5 | Zebra before 7.0.0 contains an inefficient algorithmic complexity vulnerability that allows unauthenticated peers to exhaust verification threads by submitting transactions with many transparent inputs. Attackers can relay invalid transactions with t | 2026-11-08 02:16:48 | 2026-11-08 02:16:48 |
| CVE-2026-123558 | 7.5 | Zebra zebrad before 7.0.0 contains a denial of service vulnerability that allows a malicious peer to stall checkpoint sync by cancelling the verifier rewind after a failed commit. Attackers can serve a forged block with altered authorizing data plus | 2026-11-08 02:16:47 | 2026-11-08 02:16:47 |
| CVE-2026-123557 | 5.9 | ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated remote peers to abort the node by triggering disconnection during a blocked outbound send. Malicious peers can return empty FindBlocks | 2026-11-08 02:16:47 | 2026-11-08 02:16:47 |
| CVE-2026-123556 | 5.3 | ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections at the ban threshold. Attackers can broadcast transactions locked until the current height right afte | 2026-11-08 02:16:47 | 2026-11-08 02:16:47 |
| CVE-2026-123555 | 7.5 | Zebra from 2.3.0 before 7.0.0 contains a denial of service vulnerability that allows unauthenticated peers to evade misbehavior scoring by sending transactions or blocks with invalid transparent scripts. Attackers can flood mempool with script-failin | 2026-11-08 02:16:47 | 2026-11-08 02:16:47 |
| CVE-2026-123554 | 7.5 | Zebra zebrad 6.4.0 before 7.0.0 performs quadratic work in the mempool coinbase-maturity check because Transaction::coinbase_spend_restriction() rebuilds the transaction's output list once per spent outpoint. Any connected peer can repeatedly send un | 2026-11-08 02:16:47 | 2026-11-08 02:16:47 |
| CVE-2026-123553 | 6.5 | OpenAM before 16.1.4 ships built-in identities in the Top Level Realm (demo, anonymous, wsc, wsp, SecurityTokenService and agentAuth) with passwords that are identical on every installation, publicly known, and able to authenticate. Unauthenticated r | 2026-11-08 02:16:46 | 2026-11-08 02:16:46 |
| CVE-2026-123552 | 6.5 | OpenAM before 16.1.4 contains a server-side request forgery vulnerability in certificate CRL checking that fetches CRLs from the distribution point named in a presented certificate without restricting the destination or verifying the downloaded CRL's | 2026-11-08 02:16:46 | 2026-11-08 02:16:46 |
| CVE-2026-123551 | 10.0 | OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session tokens from the notification WebSocket. Attackers can bypass the agent-only check through an unvalidated inte | 2026-11-08 02:16:46 | 2026-11-08 02:16:46 |
| CVE-2026-123550 | 9.8 | OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions on the ECP (PAOS) and HTTP-Artifact bindings when WantAssertionsSigned is false. Unauthenticated remote attackers | 2026-11-08 02:16:46 | 2026-11-08 02:16:46 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12486
Zapisa po stranici: