Lucene search
+L

119637 matches found

OSV
OSV
added 2026/08/12 12:17 a.m.7 views

UBUNTU-CVE-2026-68435

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...

5.4AI score0.00155EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/12 12:07 a.m.35 views

CVE-2026-68440 net: txgbe: fix heap overflow when reading module EEPROM

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

7.8CVSS0.00124EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/12 12:07 a.m.43 views

CVE-2026-68440

CVE-2026-68440 affects the Linux kernel txgbe driver: when reading module EEPROM via txgbe_read_eeprom_hostif(), the function copies round_up(length, 4) bytes into an ethtool caller buffer allocated with exactly length bytes. If length is not 4-byte aligned, this causes an out-of-bounds write (he...

7.8CVSS5.3AI score0.00124EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/12 12:07 a.m.16 views

CVE-2026-68440 net: txgbe: fix heap overflow when reading module EEPROM

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

7.8CVSS5.4AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/08/12 12:07 a.m.8 views

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

5.3AI score0.00124EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/08/12 12:07 a.m.10 views

CVE-2026-68440

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

7.8CVSS5.2AI score0.00124EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/12 12:07 a.m.10 views

EUVD-2026-57048

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbereadeepromhostif always copies rounduplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

5.3AI score0.00124EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/12 12:07 a.m.12 views

EUVD-2026-57047

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925mcubsshetlv mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

5.2AI score0.00156EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/08/12 12:01 a.m.7 views

SUSE CVE-2026-19387

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

6.1CVSS6.2AI score0.00241EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.20 views

Microsoft Edge (Chromium) < 151.0.4129.78 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.78. It is, therefore, affected by multiple vulnerabilities as referenced in the August 11, 2026 advisory. - Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows...

9.6CVSS6.1AI score0.00538EPSS
SaveExploits0References79
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.9 views

SUSE SLES15 Security Update : nodejs22 (SUSE-SU-2026:3557-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3557-1 advisory. Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF an...

8.4CVSS6AI score0.005EPSS
SaveExploits1References34
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.11 views

PT-2026-71277

An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version...

6CVSS5.5AI score0.00301EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2026/08/12 12:00 a.m.7 views

Security update for chromium (critical)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21561-1 Rating: critical References: bsc1274549 Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141...

9.6CVSS5.6AI score0.00538EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.13 views

TencentOS Server 4: apr-util (TSSA-2026:0830)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0830 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.5CVSS5.5AI score0.00508EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-18663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path...

5.9CVSS5.6AI score0.00432EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.4 views

PT-2026-70954

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe read eeprom hostif always copies round uplength, 4 bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore...

7.8CVSS5.3AI score0.00124EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.11 views

PT-2026-71137

Name of the Vulnerable Software and Affected Versions binutils affected versions not specified Description Multiple Use-After-Free issues exist in the add archive element function within the GNU linker ld, a component of binutils. The problem occurs when plugin maybe claim in ld/plugin.c frees th...

5.5CVSS5.8AI score0.00116EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.9 views

AlmaLinux 9 : xorg-x11-server-Xwayland (ALSA-2026:38490)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:38490 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 X.org: xorg-x11-server: GLX contextTags Use-After-Free in...

9CVSS5.5AI score0.00269EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.11 views

MiracleLinux 9 : libreoffice-7.1.8.1-15.el9_8.2.ML.1 (AXSA:2026-1517:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1517:04 advisory. libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVE-2026-8357 Tenable has extracted the preceding...

7.8CVSS8.3AI score0.00157EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.3 views

PT-2026-71265

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gst avi demux parse strd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107...

6.6CVSS5.4AI score0.00131EPSS
SaveExploits0References5
Rows per page
Query Builder