Lucene search
+L

27845 matches found

RedhatCVE
RedhatCVE
added 2026/09/11 9:03 p.m.5 views

CVE-2026-80981

A flaw was found in the Linux kernel's net/smc component. A local attacker could exploit a use-after-free vulnerability in the smcllcsrvaddlink function, where a freed memory region is improperly accessed. This can lead to memory corruption and potentially result in a denial of service DoS...

9.8CVSS0.00198EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 8:54 p.m.5 views

CVE-2026-89654

A flaw was found in the Ceph file system component of the Linux kernel. A race condition exists in the checknewmap function during session handling. This allows a local attacker to exploit a use-after-free vulnerability by freeing a session while another thread attempts to access it. This could...

9.8CVSS0.00162EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/11 8:53 p.m.6 views

CVE-2026-81016

A flaw was found in the Linux kernel. Specifically, within the AMD Platform Management Controller PMC component, the amdstbs2dinit function does not properly validate memory addresses returned by System Management Unit SMU commands. This can result in the kernel attempting to map a critical memor...

7.7CVSS0.00198EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 8:28 p.m.7 views

CVE-2026-89620

A flaw was found in the Linux kernel's HID Intel QuickSPI driver. A local attacker can exploit a heap buffer overflow by providing a specially crafted report through a hidraw SETREPORT/SETFEATURE ioctl. This allows the attacker to overflow a buffer with controlled length and content, potentially...

7.8CVSS0.00198EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/09/11 6:42 p.m.7 views

CVE-2026-89329

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

6.2CVSS0.00117EPSS
SaveExploits0
CVE
CVE
added 2026/09/11 6:42 p.m.10 views

CVE-2026-89329

A vulnerability in multipathd (part of Device-mapper-multipath ) allows a local attacker with access to the UNIX control socket to cause a Denial of Service . By sending valid commands and then ceasing to read replies, the attacker can cause the listener thread to block , resulting in legitimate ...

6.2CVSS0.00117EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/11 6:42 p.m.6 views

CVE-2026-89329 Device-mapper-multipath: local denial of service via blocking ipc send operations

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

6.2CVSS0.00117EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 6:42 p.m.8 views

EUVD-2026-76186

A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...

6.2CVSS0.00117EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 1:30 p.m.6 views

CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files

Quick CMS XSS Almacenado v6.7 Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross-Site Scripting XSS en Quick CMS v6.7 permiten a un atacante local ejecutar código arbitrario mediante un script manipulado para la la Descripción de Archivos en el menú de Páginas. Vectores de ataque:...

5.4CVSS6.1AI score0.00677EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 12:10 p.m.5 views

CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager

CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: Múltiples vulnerabilidades de cross-site scripting XSS en CMSmadesimple v.2.2.18 permiten a un atacante local ejecutar código arbitrario mediante un script manipulado en los datos Page Specific Metadata y Smarty del Menú de...

5.4CVSS6.7AI score0.00462EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/11 12:00 p.m.7 views

CVE-2026-45761

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A local attacker, by providing a specially crafted rule with mixed-case frame syntax, could trigger a heap buffer overflow. This vulnerability occur...

3.3CVSS0.0013EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 11:44 a.m.8 views

CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media

WBCE File Upload XSS - WBCE v1.6.1 Autor: Sergio Descripción: Vulnerabilidad de subida de archivos en WBCE v.1.6.1 que permite a un atacante local subir un archivo PDF con XSS oculto. Vectores de ataque: Una vulnerabilidad en la sanitización de la subida de archivos multimedia permite subir un...

5.4CVSS6AI score0.00417EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/11 11:37 a.m.5 views

CVE-2026-76920

A flaw was found in Wireshark. This vulnerability, located in the 3gpp phone log file parser, could allow a local attacker to trigger a crash by enticing a user to open a specially crafted log file. This could lead to a Denial of Service DoS. Mitigation To mitigate this issue, users should avoid...

5.5CVSS0.00095EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/09/11 10:41 a.m.4 views

CVE-2026-72099

A flaw was found in the dm-integrity component of the Linux kernel. This vulnerability arises from an error where a hashoffset variable is incremented twice, leading to incorrect memory access. A local attacker could exploit this issue to trigger a system crash, resulting in a denial of service...

7.3CVSS0.00532EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 10:32 a.m.40 views

CVE-2026-77159

A symlink-following flaw in libvirt's qemuTPMEmulatorPrepareHost() function performs a path-based chown() on the swtpm log file without validating for symbolic links. A local attacker with access to the swtpm account can replace the log file with a symlink, causing the root-level libvirtd daemon ...

5.5CVSS0.00162EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/11 10:32 a.m.5 views

CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS0.00162EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/11 7:59 a.m.6 views

CVE-2026-88051

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A heap out-of-bounds write vulnerability exists in the GenericVector::read function when processing a specially crafted .traineddata model. By manipulating the reserved and sizeused fields, a local attacker ca...

8.6CVSS0.00119EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 6:39 a.m.10 views

CVE-2023-44761_ConcreteCMS-Stored-XSS---Forms

ConcreteCMS XSS Almacenado v.9.2.1 Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross Site Scripting en ConcreteCMS v.9.2.1 permiten a un atacante local ejecutar código arbitrario a través de un script manipulado en los Formularios de los objetos de Datos. Vectores de ataque: Una...

5.4CVSS6AI score0.00542EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 1:43 a.m.6 views

CockpitCMS-Arbitrary-File-Upload--XSS---Assets

Cockpit CMS 2.7.0 File Upload - XSS Author: Sergio Description: File upload vulnerability in Cockpit CMS 2.7.0 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L POC: This is the software version. This is the content of the XSS inject...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/11 12:31 a.m.6 views

EUVD-2026-75802

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...

8.8CVSS0.00149EPSS
SaveExploits0References2
Rows per page
Query Builder