Lucene search
+L

71683 matches found

Cvelist
Cvelist
•added 2026/09/11 1:52 a.m.•66 views

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

7.5CVSS0.00426EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/11 1:52 a.m.•28 views

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

7.5CVSS6.2AI score0.00426EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/09/11 1:52 a.m.•14 views

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

7.5CVSS6.2AI score0.00426EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/11 12:31 a.m.•16 views

EUVD-2026-75873

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline...

5.5AI score0.00632EPSS
SaveExploits0References4
Redos
Redos
•added 2026/09/11 12:00 a.m.•18 views

ROS-20260911-73-0119

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

8.8CVSS8.1AI score0.00361EPSS
SaveExploits0
Redos
Redos
•added 2026/09/11 12:00 a.m.•11 views

ROS-20260911-73-0161

The vulnerability of the Mojo web browser component in Google Chrome is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...

8.3CVSS7.7AI score0.00261EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•6 views

CVE-2026-89161: Free of Memory not on the Heap

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

7.8CVSS5.9AI score0.00126EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/11 12:00 a.m.•20 views

Skype for Business Server Code Execution

The vulnerability of the Skype for Business Server’s instant messaging program is related to improper external management of the file name or path. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.5AI score0.00974EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•26 views

PT-2026-89766

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.48 Description The pcre2 jit match function mishandles a previously copied subject when it is passed in as a context. This behavior can lead to an incorrect free operation, resulting in memory corruption. Memory...

8.2CVSS6.1AI score0.00394EPSS
SaveExploits4References88
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107317 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling iavfallocasqbufs/iavfallocarqbufs allocates with dmaalloccoherent...

5.5CVSS5.9AI score0.00189EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•19 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107263)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107263 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When unmounting all the dirty buffers will be flushe...

5.5CVSS5.9AI score0.00237EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•22 views

PT-2026-90293

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-io interface where non-retryable error codes BLK STS NOTSUPP and BLK STS INVAL could incorrectly cause leg failure on dm-raid1. This leads to misbehavior when...

5.7AI score0.00198EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•22 views

PT-2026-90197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-tcp module where the nvme tcp handle r2t function fails to verify the direction of the request associated with a Ready-to-Transfer R2T notification. A malicio...

7.5CVSS6.4AI score0.00413EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•22 views

PT-2026-90083

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the i3c adi driver where the adi i3c master probe function requests the IRQ and unmasks REG IRQ PENDING CMDR before initializing the controller's IBI state, transfer...

9.8CVSS6.6AI score0.00736EPSS
SaveExploits0References171
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•5 views

PT-2026-96612

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

5.7CVSS5.8AI score0.005EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•23 views

PT-2026-90442

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one out-of-bounds read exists in the ucs2 strnlen function. The function evaluates the current character before verifying if the maximum length provided by the caller has been...

5.6AI score0.00177EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•6 views

CVE-2026-89751: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

5.9AI score0.00173EPSS
SaveExploits0References1
Redos
Redos
•added 2026/09/11 12:00 a.m.•20 views

ROS-20260911-73-0120

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

8.8CVSS8AI score0.00361EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•21 views

PT-2026-90457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where improper error handling in the video register device function leads to a double-free scenario. This occurs when device register fails and both p...

7.8CVSS6.1AI score0.00169EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•22 views

PT-2026-90342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hid sensor custom add attributes function where the system fails to clean up sysfs groups if sysfs create group fails after some groups have already been created...

8.8CVSS7.5AI score0.00354EPSS
SaveExploits0
Rows per page
Query Builder