Lucene search
+L

667 matches found

SUSE CVE
SUSE CVE
added 2026/07/07 2:30 a.m.15 views

SUSE CVE-2026-14404

Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. Chromium security severity: Medium...

6.5CVSS6AI score0.00266EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:00 a.m.21 views

Linux Distros Unpatched Vulnerability : CVE-2026-14759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file...

7.8CVSS4.7AI score0.00222EPSS
SaveExploits1References2
Redos
Redos
added 2026/07/02 12:00 a.m.13 views

ROS-20260702-73-0025

The vulnerability of the nicreateattrlist function in the fs/ntfs3/frecord.c file of the NTFS file system in the Linux operating system is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6AI score0.00145EPSS
SaveExploits0
CVE
CVE
added 2026/07/01 3:11 p.m.44 views

CVE-2026-24264

CVE-2026-24264 affects NVIDIA Triton Inference Server for Linux. The security bulletin documents that an attacker can cause improper handling of highly compressed data, with the impact being denial of service . The vulnerability is addressed by updating to Triton Server r26.04 or later . Affected...

7.5CVSS5.8AI score0.00721EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/01 2:56 p.m.13 views

CVE-2026-24246

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure...

7.8CVSS5.8AI score0.00431EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/01 12:00 a.m.20 views

PT-2026-54714

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge for Linux affected versions not specified Description An issue exists where an attacker could cause deserialization of untrusted data. Deserialization is the process of converting a data format, such as JSON or XML, back...

7.8CVSS6AI score0.00431EPSS
SaveExploits0References5
OSV
OSV
added 2026/06/30 11:17 p.m.13 views

DEBIAN-CVE-2026-14030

Inappropriate implementation in SplitView in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

4.2CVSS5.8AI score0.00198EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/30 11:16 p.m.13 views

CVE-2026-13810

Inappropriate implementation in Input in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

6.5CVSS6.1AI score0.00318EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/06/30 10:38 p.m.23 views

CVE-2026-13945

Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

3.1CVSS5.8AI score0.00166EPSS
SaveExploits0
CVE
CVE
added 2026/06/25 1:32 a.m.38 views

CVE-2026-8592

The vulnerability CVE-2026-8592 affects the Rapid7 InsightConnect AWK Plugin (Linux) where the process_string action constructs shell commands unsafely in the processing pipeline, enabling OS command execution via text or expression parameters. This is a remote issue with potential impact on conf...

9.8CVSS6.3AI score0.01197EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/06/25 1:32 a.m.23 views

EUVD-2026-39160

OS Command Injection vulnerability in the processstring action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline...

7.7CVSS6.3AI score0.01197EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/25 1:28 a.m.39 views

CVE-2026-8664

Summary (CVE-2026-8664): OS Command Injection in the Rapid7 InsightConnect Finger Plugin for Linux. The vulnerability arises from insufficient input validation in shell command construction, enabling authenticated attackers to execute arbitrary OS commands via the user or host parameters. Affecte...

8.8CVSS6.2AI score0.01291EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/25 12:07 a.m.13 views

CVE-2026-8659

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the apihost or apiport parameters during connection configuration due to insufficient input validation...

6CVSS6.2AI score0.01291EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/25 12:07 a.m.27 views

EUVD-2026-39152

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the apihost or apiport parameters during connection configuration due to insufficient input validation...

6CVSS6.2AI score0.01291EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/24 7:21 a.m.14 views

MAL-2026-6377 Malicious code in linux-ci-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2c5010ed5043c947b561f4359869ec7c0f6cdf219d0b2aa35c039e36812a01 On require, index.js performs a Linux platform check, then decodes a base64-obfuscated URL https://api.ingress-hub.com/cdn/assets/update.pkg and...

5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/06/17 1:38 a.m.249 views

CVE-2026-12463

The CVE-2026-12463 entry corresponds to an UXSS vulnerability in Google Chrome on Linux, caused by an inappropriate implementation in Views that allowed a compromised renderer to inject arbitrary scripts/HTML via a crafted HTML page. Affected product is Chrome on Linux, with the issue present pri...

4.7CVSS5.6AI score0.00133EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/12 10:16 p.m.11 views

CVE-2025-14098 Avira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable file

Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux...

7.8CVSS5.8AI score0.00122EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/12 10:11 p.m.16 views

CVE-2025-7010 Avast antivirus stack overflow when scanning a malformed PDF file

Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, an...

5.5CVSS5.5AI score0.00113EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/12 12:00 a.m.26 views

PT-2026-49014

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to VPS 25021310 AVG Antivirus versions prior to VPS 25021310 Norton Antivirus versions prior to VPS 25021310 Avast One versions prior to VPS 25021310 Avast Business Antivirus versions prior to VPS 25021310...

7.8CVSS5.7AI score0.00146EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/12 12:00 a.m.38 views

PT-2026-49010

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to VPS 25040308 AVG Antivirus versions prior to VPS 25040308 Norton Antivirus versions prior to VPS 25040308 Avast One versions prior to VPS 25040308 Avast Business Antivirus versions prior to VPS 25040308...

7.8CVSS5.7AI score0.00146EPSS
SaveExploits0References3
Rows per page
Query Builder