Lucene search
+L

14381 matches found

OSV
OSV
•added 2026/01/26 11:03 a.m.•12 views

SUSE-SU-2026:20168-1 Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39963: iouring: fix incorrect iokiocb reference in iolinkskb bsc1251982. - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437....

9.8CVSS5.8AI score0.00432EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/01/26 12:00 a.m.•8 views

GLSA-202601-01 : inetutils: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202601-01 inetutils: Remote Code Execution The telnetd server invokes /usr/bin/login normally running as root passing the value of the USER environment variable received from the client as the last parameter. If the client supply ...

9.8CVSS8.1AI score0.98984EPSS
SaveExploits68References3
OSV
OSV
•added 2026/01/24 2:15 a.m.•10 views

DEBIAN-CVE-2026-24401

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonica...

6.5CVSS5.3AI score0.00296EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/24 2:15 a.m.•14 views

UBUNTU-CVE-2026-24401

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonica...

6.5CVSS5.8AI score0.00296EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/24 1:25 a.m.•6 views

CVE-2026-24401

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonica...

6.5CVSS5.9AI score0.00296EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/24 12:00 a.m.•0 views

CVE-2026-24401: Uncontrolled Recursion

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonica...

6.5CVSS6.6AI score0.00296EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/01/23 5:26 p.m.•224 views

Exploit for CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd - Remote Authenticati...

9.8CVSS6.4AI score0.98984EPSS
SaveExploits68
NVD
NVD
•added 2026/01/23 4:15 p.m.•68 views

CVE-2026-22980

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4endgrace Writing to v4endgrace can race with server shutdown and result in memory being accessed after it was freed - reclaimstrhashtbl in particularly. We cannot hold nfsdmutex across the nfsd4endgrac...

7.8CVSS0.00149EPSS
SaveExploits0References8
NVD
NVD
•added 2026/01/23 4:15 p.m.•16 views

CVE-2026-22989

In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlockfilesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4revokestates acce...

5.5CVSS0.00132EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/01/23 4:15 p.m.•13 views

CVE-2026-22989

In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlockfilesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4revokestates acce...

5.5CVSS5.7AI score0.00132EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2026/01/23 3:24 p.m.•48 views

CVE-2026-22980 nfsd: provide locking for v4_end_grace

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4endgrace Writing to v4endgrace can race with server shutdown and result in memory being accessed after it was freed - reclaimstrhashtbl in particularly. We cannot hold nfsdmutex across the nfsd4endgrac...

7.8CVSS0.00149EPSS
SaveExploits0References7
OSV
OSV
•added 2026/01/23 11:10 a.m.•11 views

OESA-2026-1227 net-snmp security update

Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6. The suite includes: Security Fixes: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd...

9.8CVSS5.8AI score0.4236EPSS
SaveExploits2References2
Amazon
Amazon
•added 2026/01/23 12:00 a.m.•9 views

Important: net-snmp

Issue Overview: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2...

9.8CVSS6.2AI score0.4236EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2026/01/23 12:00 a.m.•8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: net-snmp (UTSA-2026-004932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004932 advisory. net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause...

9.8CVSS5.9AI score0.4236EPSS
SaveExploits2References4
GithubExploit
GithubExploit
•added 2026/01/22 2:27 p.m.•203 views

Exploit for CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd Remote Authentication By...

9.8CVSS5.9AI score0.98984EPSS
SaveExploits68
SUSE Linux
SUSE Linux
•added 2026/01/22 12:20 p.m.•11 views

Security update for net-snmp

This update for net-snmp fixes the following issues: CVE-2025-68615: Fixed snmptrapd buffer overflow bsc1255491. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for...

9.2CVSS5.8AI score0.4236EPSS
SaveExploits2References4
Fedora
Fedora
•added 2026/01/22 1:15 a.m.•15 views

[SECURITY] Fedora 42 Update: mariadb11.8-11.8.5-1.fc42

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

7CVSS7AI score0.0052EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•11 views

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26935)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26935 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs...

5.5CVSS6.5AI score0.00242EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•13 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-22025)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22025 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfsd: put dlstid if fail to queue dlreca...

7.5CVSS6.6AI score0.00571EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/21 2:43 p.m.•8 views

CVE-2025-13878

Malformed BRID/HHIT records can cause named to terminate unexpectedly. This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17, 9.21.12 through 9.21.16, 9.18.40-S1 through 9.18.43-S1, and 9.20.13-S1 through 9.20.17-S1...

7.5CVSS5.3AI score0.09218EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder