Lucene search
+L

17248 matches found

OSV
OSV
added 2026/04/17 1:0 p.m.16 views

OESA-2026-1931 cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: OpenPrinting CUPS is an open source printing system for Linux and othe...

6.2CVSS5.8AI score0.00178EPSS
SaveExploits2References3
OSV
OSV
added 2026/04/17 12:59 p.m.16 views

OESA-2026-1914 systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fixes: systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is...

6.7CVSS6AI score0.00142EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.7 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cups (UTSA-2026-010663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010663 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coer...

7.8CVSS5.9AI score0.00289EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.13 views

Sparx Systems Sparx Pro Cloud Server 安全漏洞

Sparx Pro Cloud Server is a modeling and service platform developed by Australian company Sparx Systems. It supports remote access to model repositories and collaborative management. There is a security vulnerability in Sparx Pro Cloud Server, which stems from the storage of local user passwords ...

9.3CVSS5.8AI score0.0038EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/04/16 11:28 p.m.8 views

SUSE CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5CVSS6AI score0.0021EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/04/16 6:45 p.m.9 views

CVE-2026-30656

A flaw was found in fio Flexible I/O Tester. A local user could exploit this vulnerability by providing a specially crafted job file that includes the fdppli option without an argument. This leads to a NULL pointer dereference, which occurs when the program attempts to access a memory location th...

7.5CVSS5.7AI score0.00278EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/16 2:2 a.m.4 views

CVE-2026-3428

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS5.8AI score0.00074EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/16 2:0 a.m.33 views

CVE-2026-1880

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS0.00139EPSS
SaveExploits1References1
CVE
CVE
added 2026/04/16 2:0 a.m.43 views

CVE-2026-1880

The CVE-2026-1880 entry concerns an Incorrect Permission Assignment for a Critical Resource in the ASUS DriverHub update process. The vulnerability arises from improper protection of required execution resources during the validation phase, enabling a local user to make unprivileged modifications...

5.4CVSS6AI score0.00139EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/04/16 2:0 a.m.10 views

EUVD-2026-23155

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS6AI score0.00139EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/16 2:0 a.m.6 views

CVE-2026-1880

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS6AI score0.00139EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups (UTSA-2026-007174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007174 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coer...

7.8CVSS6.2AI score0.00289EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.8 views

PT-2026-33245

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center华硕大厅 allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use TOC-TOU during the update process, where an unexpected payload is substitut...

5.4CVSS5.8AI score0.00074EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.12 views

PT-2026-33244

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS6AI score0.00139EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/15 8:16 p.m.3 views

DEBIAN-CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5.5CVSS5.6AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/15 6:58 p.m.49 views

CVE-2026-40916 Gimp: gimp: denial of service due to stack buffer overflow in tim image loader

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5CVSS0.0021EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/04/15 6:58 p.m.6 views

CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5.5CVSS5.6AI score0.0021EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/04/15 6:58 p.m.2 views

CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5CVSS6AI score0.0021EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/15 1:16 p.m.9 views

CVE-2026-4134

During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated privileges...

7.3CVSS0.00114EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/15 1:16 p.m.9 views

CVE-2026-1636

A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated privileges...

6.7CVSS0.00126EPSS
SaveExploits0References1
Rows per page
Query Builder