CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

13459 matches found

Tenable Nessus•added 2026/06/28 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-8343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - ui: fix validation of VNC extended clipboard data length CVE-2026-8343 Note that Nessus relies on the presence of the...

7.1AI score

SaveExploits0References3

Tenable Nessus•added 2026/06/28 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-48002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a...

6.5CVSS7.5AI score0.00221EPSS

SaveExploits0References3

Microsoft CVE•added 2026/06/27 8:09 a.m.•11 views

Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation

...

5.5CVSS6.1AI score0.00143EPSS

SaveExploits0

Microsoft CVE•added 2026/06/27 8:08 a.m.•21 views

Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)

...

7.8CVSS5.8AI score0.00274EPSS

SaveExploits0

SUSE CVE•added 2026/06/27 2:05 a.m.•19 views

SUSE CVE-2026-13318

A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...

6.4CVSS5.9AI score0.00236EPSS

SaveExploits0References3

RedhatCVE•added 2026/06/26 5:59 p.m.•17 views

CVE-2026-52953

A flaw was found in the Linux kernel's input/output memory management unit IOMMU virtualized directed I/O VT-d subsystem. This vulnerability occurs due to an out-of-scope memory access when a QEMU process is terminated. An attacker could potentially trigger a general protection fault, leading to ...

7.1CVSS5.8AI score0.00133EPSS

SaveExploits0References4

Positive Technologies•added 2026/06/26 12:00 a.m.•30 views

PT-2026-53012

Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description Instance snapshots ignore the restricted.containers.lowlevel=block setting, which allows for arbitrary command execution on the Incus server. This occurs by abusing lowlevel hooks such as raw.l...

9.9CVSS6.3AI score0.00703EPSS

SaveExploits0