Lucene search
+L

113 matches found

EUVD
EUVD
•added 2026/10/21 3:32 a.m.•3 views

EUVD-2026-106917

Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Python's UTF-8 byte coloffset values in vyper/ast/parse.py, so multi-byte characters shift the source slices used to reconstruct later numeric literals. An attacker contributing source with...

6CVSS5.9AI score
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/12 5:17 p.m.•18 views

DEBIAN-CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

8.6CVSS6.5AI score0.00645EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/12 5:17 p.m.•11 views

CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

8.6CVSS0.00645EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/12 5:17 p.m.•10 views

CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

8.6CVSS6.5AI score0.00645EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/10/12 5:17 p.m.•4 views

UBUNTU-CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

8.6CVSS6.5AI score0.00645EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•8 views

CVE-2026-109347: Improper Control of Generation of Code

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

8.6CVSS6.5AI score0.00645EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A flaw was discovered in the Netfilter subsystem of the Linux kernel. The issue lies with the nftbyteordereval function, where the code iterates through an loop and writes to the dst array. In each iteration, 8 bytes are written, but dst is an array of u32 values; therefore, each element in the...

6.6CVSS6.7AI score0.00258EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/26 9:16 a.m.•19 views

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

9.1CVSS5.8AI score0.00259EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/26 8:34 a.m.•33 views

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

9.1CVSS5.8AI score0.00259EPSS
SaveExploits0
osv_azl
osv_azl
•added 2026/08/15 1:18 p.m.•18 views

AZL-96093 CVE-2026-74566 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

6AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/15 1:18 p.m.•25 views

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

0.00165EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/08/15 1:18 p.m.•21 views

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

6AI score0.00165EPSS
SaveExploits0References13
osv_ubuntu
osv_ubuntu
•added 2026/08/15 1:18 p.m.•15 views

UBUNTU-CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

6.2AI score0.00165EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2026/08/15 12:28 p.m.•45 views

CVE-2026-74566 keys: make keyring key-chunk byte order agree with keyring_diff_objects()

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

0.00165EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/08/15 12:28 p.m.•44 views

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

6AI score0.00165EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/08/15 12:28 p.m.•19 views

EUVD-2026-59631

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

6AI score0.00165EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/08/15 12:28 p.m.•18 views

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

6.2AI score0.00165EPSS
SaveExploits0
CVE
CVE
•added 2026/08/15 12:28 p.m.•66 views

CVE-2026-74566

In CVE-2026-74566, the Linux kernel keyring subsystem has a data-ordering defect: keyring_get_key_chunk() loads a description into the index chunk with the low-address first, while keyring_diff_objects() defines the first differing bit from the low end and folds the absolute byte index into the l...

6AI score0.00165EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/08/15 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-74566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while...

5.8AI score0.00165EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/15 12:00 a.m.•27 views

PT-2026-73018

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the keys subsystem where keyring get key chunk and keyring diff objects disagree on byte order and bit position. Specifically, keyring get key chunk loads description...

5.8AI score0.00165EPSS
SaveExploits0
Rows per page
Query Builder