Lucene search
+L

217672 matches found

Cvelist
Cvelist
added 2026/07/29 1:43 p.m.120 views

CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

8.7CVSS0.00252EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/29 1:43 p.m.14 views

EUVD-2026-50330

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

8.7CVSS5.8AI score0.00252EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/29 1:43 p.m.10 views

CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

8.7CVSS5.8AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/29 1:39 p.m.19 views

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

7.8CVSS5.8AI score0.0013EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/07/29 1:24 p.m.15 views

CVE-2026-64506

A flaw was found in the Realtek 802.11ac wireless driver rtw89 within the Linux kernel. A remote attacker, within adjacent network range, could send specially crafted malformed Aggregated MAC Protocol Data Unit AMPDU frames. This incorrect handling of frames, particularly during rekey processes,...

5.8AI score0.00161EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/29 1:24 p.m.13 views

CVE-2026-64410

A flaw was found in the Linux kernel's netfilter component, specifically concerning the handling of IPIP IP-in-IP tunnel hardware offload. The system attempts to utilize hardware offload for IPIP tunnels, a feature not yet supported by existing drivers. A remote attacker could potentially exploit...

9.8CVSS5.8AI score0.0038EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/29 1:22 p.m.18 views

CVE-2026-16308

A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine JVM heap memory...

7.5CVSS5.8AI score0.00313EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/07/29 1:21 p.m.13 views

CVE-2026-41710

A flaw was found in Spring Retry. A remote attacker can craft a large number of unique requests, leading to the exhaustion of the application-wide stateful retry cache. Once the cache is full, it permanently rejects further updates, causing all subsequent stateful retries and circuit breakers in...

5.9CVSS5.8AI score0.0028EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/29 1:17 p.m.18 views

CVE-2026-14354

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored...

8.7CVSS0.00117EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/29 1:03 p.m.14 views

CVE-2026-59251

A flaw was found in Erlang/OTP's publickey application. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted X.509 certificate chain during a Transport Layer Security TLS handshake. This causes the certificate path validation process to consume excessiv...

8.7CVSS5.8AI score0.00319EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/07/29 12:58 p.m.11 views

CVE-2026-44943

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

6.9CVSS5.9AI score0.00385EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/29 12:58 p.m.13 views

EUVD-2026-50311

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

6.9CVSS5.9AI score0.00385EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/29 12:58 p.m.12 views

CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

6.9CVSS5.9AI score0.00385EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/29 12:58 p.m.123 views

CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

6.9CVSS0.00385EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/29 12:58 p.m.11 views

CVE-2026-64445

A flaw was found in the rtl8723bs Wi-Fi driver within the Linux kernel. During shared-key authentication, an attacker on an adjacent network could send a specially crafted frame. This could lead to an out-of-bounds read, potentially allowing for the disclosure of sensitive information or causing ...

8.8CVSS5.8AI score0.00316EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/29 12:37 p.m.12 views

CVE-2026-64375

A flaw was found in the Linux kernel's proc filesystem. A local attacker with low privileges could exploit a race condition within the ptracemayaccess function when handling file descriptor links. This vulnerability arises because the system performs multiple task lookups without proper...

7.8CVSS5.8AI score0.00131EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/29 12:22 p.m.12 views

CVE-2026-64491

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture usx2y us144mkii driver. This vulnerability, a Use-After-Free UAF, occurs when a USB device is disconnected, leading to a race condition where the system attempts to access memory that has already been released. This cou...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/29 12:12 p.m.12 views

CVE-2026-64519

A flaw was found in the Linux kernel's Network File System Daemon NFSD. This vulnerability allows a remote attacker to cause a Denial of Service DoS by triggering an infinite loop during layout state revocation. The issue occurs because the system repeatedly attempts to revoke a layout state...

5.5CVSS5.5AI score0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/29 11:54 a.m.47 views

CVE-2026-14354

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored...

8.7CVSS0.00117EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/29 11:54 a.m.15 views

CVE-2026-14354

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored...

8.7CVSS7.1AI score0.00117EPSS
SaveExploits0References1
Rows per page
Query Builder