Lucene search
+L

5072 matches found

CVE
CVE
•added 2026/05/12 1:28 p.m.•56 views

CVE-2026-40020

CVE-2026-40020 affects dovecot via IMAP SETACL: an attacker can inject the "anyone" permission into a user’s dovecot-acl file even when imap_acl_allow_anyone=no, causing folders to be spammed to all users. Impact is limited to spamming, not unauthorized data access. Multiple vendors have referenc...

4.3CVSS5.8AI score0.0029EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•25 views

ksmbd 缓冲区错误漏洞

ksmbd is an open-source CIFS/SMB3 server created by Namjae Jeon for the Linux kernel. It implements the SMB/CIFS protocol within the kernel space, used for sharing files and IPC services over a network. ksmbd has a buffer error vulnerability, which stems from remote memory corruption in the ACL...

6.1AI score0.00179EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•40 views

PT-2026-40453

Name of the Vulnerable Software and Affected Versions Linux ksmbd affected versions not specified Description A remote memory corruption issue exists in the ACL inheritance path. Remote clients with directory creation permissions can trigger a heap out-of-bounds read and subsequent heap corruptio...

8.8CVSS5.9AI score0.00179EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•22 views

PT-2026-40028

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.4-1.1 Description An attacker can use the IMAP SETACL command to inject the anyone permission into a user's dovecot-acl file, bypassing the imap acl allow anyone=no configuration. This allows folders to be spammed...

6.5CVSS5.8AI score0.00427EPSS
SaveExploits0References30
CVE
CVE
•added 2026/05/11 4:02 p.m.•60 views

CVE-2026-33356

CVE-2026-33356 affects Meari IoT Cloud MQTT Broker deployments using EMQX 4.x. The issue is that authenticated low-privilege users can subscribe to global wildcard topics and access telemetry from devices they don’t own, because subscribe authorization is not enforced at per-device scope, while p...

7.7CVSS5.8AI score0.00354EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/05/11 2:13 p.m.•24 views

SUSE CVE-2026-45191

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...

7.5CVSS5.8AI score0.00484EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/05/11 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-45190

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a...

5.7AI score0.00484EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/10 9:30 p.m.•26 views

EUVD-2026-28998

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

5.8AI score0.00484EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/10 9:16 p.m.•40 views

CVE-2026-45190

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

6.5CVSS0.00484EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/10 9:16 p.m.•19 views

CVE-2026-45191

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...

6.5CVSS0.00484EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/10 9:16 p.m.•12 views

AZL-86414 CVE-2026-45190 affecting package perl-Net-CIDR-Lite 0.22-2

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

5.9AI score0.00484EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/10 9:16 p.m.•10 views

AZL-86417 CVE-2026-45191 affecting package perl-Net-CIDR-Lite 0.22-2

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...

5.9AI score0.00484EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/10 8:15 p.m.•17 views

CVE-2026-45191 Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...

5.8AI score0.00484EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/05/10 8:15 p.m.•26 views

CVE-2026-45191

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...

5.8AI score0.00484EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/10 8:15 p.m.•10 views

CVE-2026-45190 Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

6.5CVSS5.9AI score
SaveExploits0References7
CVE
CVE
•added 2026/05/10 8:15 p.m.•49 views

CVE-2026-45190

The Net::CIDR::Lite Perl module (versions before 0.24 ) fails to properly validate IP address and CIDR mask inputs. The vulnerability exists because inputs containing trailing newlines or non-ASCII digit characters can pass initial validators but are subsequently re-encoded by the parser into dif...

5.8AI score0.00484EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/05/10 8:15 p.m.•23 views

CVE-2026-45190

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

5.8AI score0.00484EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/10 12:00 a.m.•22 views

PT-2026-39538

Name of the Vulnerable Software and Affected Versions Net::CIDR::Lite versions prior to 0.24 Description Net::CIDR::Lite for Perl fails to properly validate IP address and CIDR mask inputs. Inputs containing non-ASCII digit characters or a trailing newline pass validation but are re-encoded by th...

6.5CVSS5.8AI score0.00484EPSS
SaveExploits0References26
Tenable Nessus
Tenable Nessus
•added 2026/05/09 12:00 a.m.•14 views

Unity Linux 20.1070e Security Update: aide (UTSA-2026-017376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017376 advisory. AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buff...

7.8CVSS7.4AI score0.00493EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/05/08 1:41 p.m.•15 views

CVE-2026-43350

In the Linux kernel, the following vulnerability has been resolved: smb: client: require a full NFS mode SID before reading mode bits parsedacl treats an ACE SID matching sidunixNFSmode as an NFS mode SID and reads sid.subauth2 to recover the mode bits. That assumes the ACE carries three...

7.6CVSS5.7AI score0.00398EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder