Lucene search
+L

674 matches found

Cvelist
Cvelist
•added 2026/04/15 3:18 a.m.•48 views

CVE-2026-6328 XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux QUIC protocol implementation, packet processing module, STREAM frame handler modules allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3...

8.3CVSS0.00225EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•24 views

PT-2026-33006

Name of the Vulnerable Software and Affected Versions XQUIC versions prior to 1.8.3 Description Improper input validation and improper verification of cryptographic signatures in the QUIC protocol implementation, specifically within the packet processing module and STREAM frame handler modules,...

8.3CVSS5.4AI score0.00225EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/04/09 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-34941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contains a vulnerability where when transcoding a UTF-16 string to...

8.1CVSS5.7AI score0.00464EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/07 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2019-25656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to trigger a structured exception handler...

8.6CVSS6.5AI score0.00159EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/03 8:13 p.m.•33 views

CVE-2026-5485 OS command injection in Amazon Athena ODBC driver on Linux

OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection. To...

7.8CVSS0.01146EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2026/04/01 12:00 a.m.•14 views

The vulnerability of the vpa_pmu_del() function in the arch/powerpc/perf/vpa-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the vpapmudel function in the arch/powerpc/perf/vpa-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6AI score0.00209EPSS
SaveExploits0References7Affected Software1
Nvidia
Nvidia
•added 2026/03/31 12:00 a.m.•35 views

Security Bulletin: NVIDIA BioNeMo Framework - March 2026

NVIDIA has released a software update for NVIDIA® BioNeMo Framework. To protect your system, clone or update this software to include commit e5e58c8 or later from the NVIDIA/BioNeMo Framework GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential...

9.8CVSS6AI score0.00472EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
•added 2026/03/16 11:12 p.m.•198 views

Exploit for Out-of-bounds Write in Starnight Micro_Http_Server

💥 CVE-2023-50965 — Stack Buffer Overflow Exploit Linux Proo...

9.8CVSS8.2AI score0.01534EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2026/03/13 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-22248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. From 11.0.0 t...

8.8CVSS7.7AI score0.00315EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/10 6:31 p.m.•16 views

EUVD-2026-10492

SQL Injection CWE-89 in the system configuration module in Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux allows remote attackers to execute arbitrary SQL commands and potentially achieve remote code execution via specially crafted SQL requests...

9.8CVSS6.6AI score0.00941EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
•added 2026/03/10 2:00 p.m.•62 views

KB5077474 - Description of the security update for SQL Server 2016 SP3 GDR: March 10, 2026

None None...

8.8CVSS7.4AI score0.02044EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/03/10 12:00 a.m.•18 views

Microsoft .NET 缓冲区错误漏洞

Microsoft .NET is a software framework developed by Microsoft Corporation in the United States. It focuses on agile software development, rapid application development, platform independence, and network transparency. There is a buffer error vulnerability in Microsoft .NET. Attackers can exploit...

7.5CVSS6.9AI score0.01174EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/05 6:31 p.m.•26 views

EUVD-2026-9829

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop modules allows Sniffing Attacks. This vulnerability is associated with program files src/hbbshttp/sync.Rs and program routine...

8.7CVSS5.9AI score0.00332EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/04 3:26 p.m.•49 views

CVE-2025-59784 Log Pollution - Control Characters Not Escaped

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges...

6.9CVSS0.00291EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/03/04 12:00 a.m.•13 views

The vulnerability of the ath9k_hif_usb_rx_stream() function in the drivers/net/wireless/ath/ath9k/hif_usb.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a malicious actor to cause a service failure remotely.

The vulnerability of the ath9khifusbrxstream function in the drivers/net/wireless/ath/ath9k/hifusb.c module of the Atheros/Qualcomm wireless communication adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

6.5CVSS6.1AI score0.00156EPSS
SaveExploits0References18Affected Software3
CVE
CVE
•added 2026/03/03 12:49 p.m.•44 views

CVE-2026-3351

CVE-2026-3351 : In Canonical LXD 6.6 on Linux, an improper authorization flaw in the API endpoint GET /1.0/certificates lets an authenticated, restricted user enumerate all certificate fingerprints trusted by the LXD server. The CVSS score is 5.3 (Medium); attack vector is network, with low attac...

5.3CVSS5.9AI score0.00223EPSS
SaveExploits1References3Affected Software1
GithubExploit
GithubExploit
•added 2026/02/21 4:06 p.m.•239 views

Exploit for CVE-2026-27574

CVE-2026-27574-OneUptime-RCE !Authorhttps://img.shields.io/...

9.9CVSS6.1AI score0.00616EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2026/02/18 8:52 a.m.•206 views

Exploit for Argument Injection in Gnu Inetutils

!Authorhttps://img.shields.io/badge/Author-Mohammed%20Idrees%...

9.8CVSS8.1AI score0.98984EPSS
SaveExploits68
OSV
OSV
•added 2026/02/17 8:22 p.m.•18 views

CVE-2025-33130

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack...

6.5CVSS6.1AI score0.00249EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/02/11 12:00 a.m.•25 views

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14674)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from improper neutralization of...

6.5CVSS6.9AI score0.00312EPSS
SaveExploits0References1
Rows per page
Query Builder