Lucene search
+L

3302 matches found

Cvelist
Cvelist
added 2026/04/22 1:53 p.m.37 views

CVE-2026-31469 virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix UAF on dstops when IFFXMITDSTRELEASE is cleared and napitx is false A UAF issue occurs when the virtionet driver is configured with napitx=N and the device's IFFXMITDSTRELEASE flag is cleared e.g., during the...

7.8CVSS0.00135EPSS
SaveExploits0References8
CVE
CVE
added 2026/04/22 1:53 p.m.39 views

CVE-2026-31469

The CVE-2026-31469 issue affects the Linux kernel virtio_net driver, where a Use-After-Free can occur when IFF_XMIT_DST_RELEASE is cleared and napi_tx is disabled, if the network namespace is destroyed while pending skbs remain in the transmit path. The root cause is the dst_ops reference being f...

7.8CVSS5.6AI score0.00135EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2026/04/22 10:0 a.m.5 views

SUSE-SU-2026:21369-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of setuid, setgid or setgroups calls during a mailer privilege drop allows for local privilege escalation bsc1261420...

7.8CVSS5.2AI score0.00173EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/22 10:0 a.m.5 views

SUSE-SU-2026:21273-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of setuid, setgid or setgroups calls during a mailer privilege drop allows for local privilege escalation bsc1261420...

7.8CVSS5.3AI score0.00173EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/22 9:56 a.m.7 views

OPENSUSE-SU-2026:20604-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of setuid, setgid or setgroups calls during a mailer privilege drop allows for local privilege escalation bsc1261420...

7.8CVSS5.3AI score0.00173EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/22 9:31 a.m.19 views

EUVD-2026-24662

The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers adminpost action hooks for creating tables adminpostaddtable and deleting tables adminpostdeletedbtable without implementing any capability checks via...

9.1CVSS5.8AI score0.00729EPSS
SaveExploits0References14
NVD
NVD
added 2026/04/22 9:16 a.m.11 views

CVE-2026-4119

The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers adminpost action hooks for creating tables adminpostaddtable and deleting tables adminpostdeletedbtable without implementing any capability checks via...

9.1CVSS0.00729EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.4 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013648)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013648 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnlnfhookdrop when opsinit failed When the opsinit interface is invoked ...

5.6AI score0.00187EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/04/21 9:16 p.m.7 views

CVE-2026-40895

follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a cross-domain redirect 301/302/307/308, follow-redirects only strips authorization, proxy-authorization, and cookie header...

7.5CVSS5.8AI score0.00486EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/21 9:16 p.m.29 views

UBUNTU-CVE-2026-40895

follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a cross-domain redirect 301/302/307/308, follow-redirects only strips authorization, proxy-authorization, and cookie header...

7.5CVSS5.8AI score0.00486EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/21 6:36 p.m.7 views

CVE-2026-6654

A flaw was found in the thinvec component of mozilla/thin-vec. This vulnerability involves a memory management error known as a Double-Free/Use-After-Free UAF, which occurs in the IntoIter::drop and ThinVec::clear functions. When a specific error condition a panic in ptr::dropinplace is triggered...

7.3CVSS5.9AI score0.00168EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2026/04/21 1:8 p.m.8 views

kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit

In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit The following setup can trigger a WARNING in htbactivate due to the condition: !cl-leaf.q-q.qlen tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb...

7.8CVSS5.6AI score0.00168EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.4 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012969 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: don't override retval if we already lost the skb If we're redirecting the...

7.8CVSS6.4AI score0.00276EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.4 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013129 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized packets from t...

5.5CVSS5.8AI score0.00145EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.12 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006927 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized packets from t...

5.5CVSS5.8AI score0.00145EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/20 11:16 a.m.6 views

CVE-2026-6654

Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero...

7.3CVSS0.00168EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2026/04/20 11:16 a.m.8 views

CVE-2026-6654

Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero...

7.3CVSS5.8AI score0.00168EPSS
SaveExploits1References2
OSV
OSV
added 2026/04/20 11:16 a.m.6 views

UBUNTU-CVE-2026-6654

Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero...

7.3CVSS5.8AI score0.00168EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/04/20 10:5 a.m.4 views

CVE-2026-6654 Use-After-Free and Double-Free in IntoIter::drop when element drop panics

Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero...

5.8AI score0.00168EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/04/20 10:5 a.m.6 views

EUVD-2026-23832

Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero...

5.1CVSS5.8AI score0.00168EPSS
SaveExploits1References1
Rows per page
Query Builder