Lucene search
+L

54834 matches found

RedHat Linux
RedHat Linux
added 2026/07/27 3:22 a.m.18 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for...

7.8CVSS6.9AI score0.00154EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 2:37 a.m.8 views

Important: Red Hat Security Advisory: go-fdo-client security update

An update for go-fdo-client is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS6.9AI score0.00591EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/07/27 12:55 a.m.7 views

[SECURITY] Fedora 44 Update: lego-5.3.1-2.fc44

Let's Encrypt/ACME client written in Go...

8.2CVSS5.4AI score0.00147EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2026/07/27 12:0 a.m.6 views

go-fdo-client security update

1.0.0-5 - Rebuild against updated golang...

7.5CVSS6.8AI score0.00591EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/27 12:0 a.m.7 views

RHEL 10 : go-fdo-client (RHSA-2026:46394)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:46394 advisory. go-fdo-client is the device-side implementation of FIDO Device Onboard specification in Go. It provides an FDO client that interacts with FDO...

7.5CVSS6.9AI score0.00591EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.14 views

PT-2026-65090

Name of the Vulnerable Software and Affected Versions Ekushey Project Manager CRM versions prior to 5.1 Description A stored cross-site scripting issue exists where authenticated client users can inject arbitrary HTML and JavaScript. This occurs when malicious payloads are entered into the Name...

5.4CVSS5.3AI score0.00165EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/27 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-64257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b smb: client...

9.1CVSS5.4AI score0.00672EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/26 11:31 p.m.12 views

SUSE CVE-2026-56444

In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout discard-timeout 0' contrary to the suggested values, the discard-timeout branch during the serve expired logic drops an aged client reply without...

5.9CVSS5.8AI score0.00237EPSS
SaveExploits0References3
Wolfi
Wolfi
added 2026/07/25 8:23 p.m.20 views

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: hubble-ui, kube-state-metrics, cluster-api, k3s, cloud-provider-azure, openbao, metallb, azure-service-operator, kwok, istio, gatekeeper, kube-metrics-adapter, grafana, kyverno, rancher-system-agent, node-feature-discovery, cloud-provider-gcp-cloud-controller-manager...

5.2AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/07/25 4:47 p.m.9 views

SUSE CVE-2026-64257

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b "smb: client: restrict implied bcc0 exemption to responses without data area" restricted the implied bcc0 length exception to responses without a da...

9.1CVSS5.8AI score0.00672EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 4:0 p.m.7 views

SUSE CVE-2026-64379

In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parsedacl applies the server-provided subauth2 value from the NFS mode SID to cfmode without masking to 07777. Apply the correct masking,...

7.1CVSS5.7AI score0.00309EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 4:0 p.m.6 views

SUSE CVE-2026-64383

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2flush replay SMB2flush keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifssendrecv stores a replacement...

9.8CVSS5.9AI score0.00457EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 4:0 p.m.11 views

SUSE CVE-2026-64384

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change notify replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2notifyinit fails before the next send, cleanup retains the previous buffer type and...

9.8CVSS5.9AI score0.00457EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 4:0 p.m.5 views

SUSE CVE-2026-64385

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2ioctl replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2ioctlinit fails before the next send, cleanup retains the previous buffer type and fre...

9.8CVSS5.9AI score0.00457EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 4:0 p.m.6 views

SUSE CVE-2026-64386

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix queryinfo replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2queryinfoinit fails before the next send, cleanup retains the previous buffer type and...

9.8CVSS5.9AI score0.00457EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 4:0 p.m.7 views

SUSE CVE-2026-64401

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

7.8CVSS5.7AI score0.00126EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 3:59 p.m.5 views

SUSE CVE-2026-64448

In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has a long-standing quirk that accepts a response whose calculated length is one byte larger than the bytes actually received "server ca...

8.2CVSS5.8AI score0.00463EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/25 10:17 a.m.10 views

CVE-2026-64448

In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has a long-standing quirk that accepts a response whose calculated length is one byte larger than the bytes actually received "server ca...

8.2CVSS0.00463EPSS
SaveExploits0References8
NVD
NVD
added 2026/07/25 10:17 a.m.5 views

CVE-2026-64401

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

7.8CVSS0.00126EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/25 10:17 a.m.9 views

CVE-2026-64388

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership chown and group chgrp modifications were being ignored when mounting with SMB3 POSIX Extensions unless CIFSMOUNTCIFSACL or CIFSMOUNTMODEFROMSID were also explicitly...

7.8CVSS0.0012EPSS
SaveExploits0References2
Rows per page
Query Builder