Lucene search
+L

81412 matches found

CVE
CVE
•added 2026/06/25 5:24 a.m.•42 views

CVE-2026-12245

NSD version 4.13.0 and later contains a heap use-after-free in logging errors on TLS connections, which can crash the server process. The issue is triggerable by sending a DNS query over DoT and then closing the connection without reading the response, indicating a network-based impact with poten...

8.7CVSS5.8AI score0.0046EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/06/25 5:24 a.m.•16 views

CVE-2026-12245

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response...

8.7CVSS5.8AI score0.0046EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/06/25 5:24 a.m.•26 views

CVE-2026-12245

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response...

8.7CVSS5.8AI score0.0046EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/06/25 5:24 a.m.•55 views

CVE-2026-12245 Denial of DNS over TLS service by any DoT client

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response...

8.7CVSS0.0046EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/06/25 5:24 a.m.•19 views

CVE-2026-12245

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response...

8.7CVSS5.8AI score0.0046EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•27 views

PT-2026-52252

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Use-after-free bugs exist in the error paths of the nvmem core. The issue occurs when the nvmem device put function is called, potentially freeing underlying memory and resources, while...

7.8CVSS6AI score0.00125EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•37 views

PT-2026-52270

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ovl iterate merged function where the err variable is assigned the value of PTR ERRcache before verifying if cache is an error using IS ERRcache. When the operatio...

7.8CVSS6.9AI score0.00165EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•1 views

CVE-2026-55487: Origin Validation Error

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the generic peer-suffix normalizer also stripped parenthesized text from git, URL, tarball, file, and other opaque locators. Approval for one source string could therefore authorize a different attacker-controlled source whose locator...

8.8CVSS5.8AI score0.00181EPSS
SaveExploits1References6
Redos
Redos
•added 2026/06/25 12:00 a.m.•20 views

ROS-20260625-73-0021

The vulnerability in Postfix is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS5.8AI score0.00884EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/06/25 12:00 a.m.•13 views

The vulnerability of the ADF Shared Components component in the Oracle Application Development Framework allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ADF Shared Components component in the Oracle Application Development Framework is related to access control errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

9CVSS5.8AI score0.00486EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/06/25 12:00 a.m.•64 views

Linux Distros Unpatched Vulnerability : CVE-2026-53093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: Fix error pointer dereference The function brcmfchipaddcore can return an error pointer and is not checked. Add checks for error pointer. Detect...

5.5CVSS5.5AI score0.00162EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/25 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-53102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: Fix memory leak after mt76connacmcuallocstareq mt76connacmcuallocstareq allocates an skb which is expected to be freed eventually by...

5.5CVSS5.4AI score0.00162EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/06/25 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-52989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: propagate nvmettcpbuildpduiovec errors to its callers Currently, when nvmettcpbuildpduiovec detects an out-of-bounds PDU length or offset, it trigger...

9.8CVSS6AI score0.00511EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/25 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-53113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: fix memory leaks in beacon template setup The functions ath11kmacsetupbcntmplema and ath11kmacsetupbcntmplmbssid allocate memory for beacon...

5.5CVSS5.6AI score0.00172EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•14 views

PT-2026-72325

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to July 2026 Description A double free issue exists in the xfrm component of the Linux kernel. The nat keepalive send function frees the keepalive skb socket buffer whenever the IPv4 or IPv6 send helper reports an...

10CVSS5.9AI score0.00671EPSS
SaveExploits0References30
Redos
Redos
•added 2026/06/25 12:00 a.m.•10 views

ROS-20260625-73-0007

The vulnerability in gnutls is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.3CVSS5.8AI score0.0092EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•28 views

PT-2026-52267

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Arithmetic issues exist in the dma length function within the accel/ethosu component. The function calculates DMA region usage based on command stream values to update the region size...

8.8CVSS5.9AI score0.00128EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•0 views

CVE-2026-47145: Reachable Assertion

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined the network. Only devices supporting the Color Control cluster may be impacted...

7.1CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•20 views

PT-2026-52318

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the network subsystem where the skb is err queue function incorrectly identifies AF PACKET sockets as error-queue skbs because it relies solely on the PACKET OUTGOING...

9.8CVSS6AI score0.00128EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•26 views

PT-2026-52260

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu dma iova link swiotlb function when processing unaligned mappings divided into head, middle, and trailer parts. If the middle section is empty due to a lack ...

5.5CVSS6AI score0.00121EPSS
SaveExploits0
Rows per page
Query Builder