Lucene search
+L

27845 matches found

RedhatCVE
RedhatCVE
added 2026/09/11 9:29 p.m.7 views

CVE-2026-89559

A flaw was found in the Linux kernel's libnvdimm/labels component. An integer overflow vulnerability exists in the ndlabelvalidate function, where a 32-bit calculation of a namespace index field nslot can wrap around. This allows a local attacker, or an attacker with control over the storage...

7.8CVSS0.00163EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/09/11 9:28 p.m.8 views

CVE-2026-80953

A flaw was found in the Linux kernel's i3c master driver. A race condition exists where the adii3cmasterprobe function requests an interrupt and unmasks a register before a critical lock xferqueue.lock is properly initialized. This allows a pending interrupt to attempt to acquire an uninitialized...

8.4CVSS0.0018EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 9:28 p.m.5 views

CVE-2026-80946

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. The io-uring transport attempts to copy request headers directly to or from user space without proper memory validation. A local attacker could exploit this vulnerability, leading to a kernel panic and a denial of...

5.3CVSS0.00166EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 9:04 p.m.6 views

CVE-2026-89446

A flaw was found in the Linux kernel's iommufd component. When the system attempts to store an Input/Output Address Space IOAS object and the storage operation fails, the IOAS object's associated resources, such as its write lock and object reference, are not properly released. This oversight can...

4.4CVSS0.00198EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 9:03 p.m.6 views

CVE-2026-80981

A flaw was found in the Linux kernel's net/smc component. A local attacker could exploit a use-after-free vulnerability in the smcllcsrvaddlink function, where a freed memory region is improperly accessed. This can lead to memory corruption and potentially result in a denial of service DoS...

9.8CVSS0.00588EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 8:54 p.m.6 views

CVE-2026-89654

A flaw was found in the Ceph file system component of the Linux kernel. A race condition exists in the checknewmap function during session handling. This allows a local attacker to exploit a use-after-free vulnerability by freeing a session while another thread attempts to access it. This could...

9.8CVSS0.00407EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/11 8:53 p.m.7 views

CVE-2026-81016

A flaw was found in the Linux kernel. Specifically, within the AMD Platform Management Controller PMC component, the amdstbs2dinit function does not properly validate memory addresses returned by System Management Unit SMU commands. This can result in the kernel attempting to map a critical memor...

7.7CVSS0.0018EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 8:28 p.m.8 views

CVE-2026-89620

A flaw was found in the Linux kernel's HID Intel QuickSPI driver. A local attacker can exploit a heap buffer overflow by providing a specially crafted report through a hidraw SETREPORT/SETFEATURE ioctl. This allows the attacker to overflow a buffer with controlled length and content, potentially...

7.8CVSS0.00161EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/09/11 6:42 p.m.8 views

CVE-2026-89329

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

6.2CVSS0.00117EPSS
SaveExploits0
CVE
CVE
added 2026/09/11 6:42 p.m.10 views

CVE-2026-89329

A vulnerability in multipathd (part of Device-mapper-multipath ) allows a local attacker with access to the UNIX control socket to cause a Denial of Service . By sending valid commands and then ceasing to read replies, the attacker can cause the listener thread to block , resulting in legitimate ...

6.2CVSS0.00117EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/11 6:42 p.m.8 views

CVE-2026-89329 Device-mapper-multipath: local denial of service via blocking ipc send operations

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

6.2CVSS0.00117EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 6:42 p.m.9 views

EUVD-2026-76186

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

6.2CVSS0.00117EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 1:30 p.m.6 views

CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files

Quick CMS Stored XSS v6.7 Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Files - Description in the Pages Menu. Attack Vectors: Scripting A vulnerability in the...

5.4CVSS6.1AI score0.00677EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 12:10 p.m.5 views

CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Multiple cross-site scripting XSS vulnerabilites in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data in the Content Manager Menu. Attack Vectors:...

5.4CVSS6.7AI score0.00462EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/11 12:00 p.m.7 views

CVE-2026-45761

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A local attacker, by providing a specially crafted rule with mixed-case frame syntax, could trigger a heap buffer overflow. This vulnerability occur...

3.3CVSS0.0013EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 11:44 a.m.8 views

CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media

WBCE File Upload XSS - WBCE v1.6.1 Author: Sergio Description: File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: A vulnerability in Media file upload sanitation allows you to upload a PDF file with hidden XSS. POC: When logging...

5.4CVSS6AI score0.00417EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/11 11:37 a.m.5 views

CVE-2026-76920

A flaw was found in Wireshark. This vulnerability, located in the 3gpp phone log file parser, could allow a local attacker to trigger a crash by enticing a user to open a specially crafted log file. This could lead to a Denial of Service DoS. Mitigation To mitigate this issue, users should avoid...

5.5CVSS0.00095EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/09/11 10:41 a.m.4 views

CVE-2026-72099

A flaw was found in the dm-integrity component of the Linux kernel. This vulnerability arises from an error where a hashoffset variable is incremented twice, leading to incorrect memory access. A local attacker could exploit this issue to trigger a system crash, resulting in a denial of service...

7.3CVSS0.00532EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 10:32 a.m.42 views

CVE-2026-77159

A symlink-following flaw in libvirt's qemuTPMEmulatorPrepareHost() function performs a path-based chown() on the swtpm log file without validating for symbolic links. A local attacker with access to the swtpm account can replace the log file with a symlink, causing the root-level libvirtd daemon ...

5.5CVSS0.00162EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/11 10:32 a.m.5 views

CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS0.00162EPSS
SaveExploits0References4
Rows per page
Query Builder