Lucene search
+L

56140 matches found

CVE
CVE
added 2026/05/26 5:18 p.m.38 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a race-condition vulnerability in a kernel module (CVE-2026-24199) that could allow a local attacker to trigger a denial-of-service. The issue is addressed in the NVIDIA security bulletin and corresponding driver updates; Linux branch R595 includes CVE-202...

4.7CVSS5.8AI score0.00092EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/05/26 4:58 p.m.18 views

EUVD-2026-31904

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module modmemcache...

7.5CVSS5.8AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/26 4:56 p.m.18 views

CVE-2026-8852

IBM HTTP Server (8.5 and 9.0) is affected by CVE-2026-8852, with denial of service via the optional mod_fastcgi module. The IBM bulletin confirms this alongside other IBM HTTP Server CVEs and provides remediation guidance: upgrade to the minimal fix pack level and apply the interim fix PH71265, o...

7.5CVSS5.8AI score0.00197EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/05/26 4:56 p.m.15 views

EUVD-2026-31896

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module modfastcgi module...

7.5CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/26 4:54 p.m.9 views

CVE-2026-8850 IBM HTTP Server is affected by multiple vulnerabilities

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module modibmupload...

7.5CVSS5.8AI score0.0038EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/26 4:54 p.m.20 views

CVE-2026-8850

IBM HTTP Server 8.5 and 9.0 are affected by a denial-of-service through the optional module mod_ibm_upload. The NVD entry lists a CVSS 3.1 base score of 7.5 (HIGH) with network attack vector and no user interaction required, indicating the issue can be triggered remotely and could impact availabi...

7.5CVSS5.8AI score0.0038EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/26 4:54 p.m.42 views

CVE-2026-8850 IBM HTTP Server is affected by multiple vulnerabilities

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module modibmupload...

7.5CVSS0.0038EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/26 2:54 p.m.16 views

SUSE-SU-2026:2079-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: 'go tool...

7.5CVSS6AI score0.00813EPSS
SaveExploits0References25
OSV
OSV
added 2026/05/26 9:58 a.m.9 views

CLSA-2026-1779789531 Fix CVE(s): CVE-2026-9256

SECURITY UPDATE: fix heap buffer overflow in ngxhttprewritemodule with overlapping captures - debian/patches/CVE-2026-9256.patch: fix heap buffer overflow in ngxhttprewritemodule with overlapping captures - CVE-2026-9256...

9.2CVSS6AI score0.09884EPSS
SaveExploits4References1
OSV
OSV
added 2026/05/26 9:48 a.m.10 views

CLSA-2026-1779788913 Fix CVE(s): CVE-2026-9256

SECURITY UPDATE: fix heap buffer overflow in ngxhttprewritemodule with overlapping captures - debian/patches/CVE-2026-9256.patch: fix heap buffer overflow in ngxhttprewritemodule with overlapping captures - CVE-2026-9256...

9.2CVSS6AI score0.09884EPSS
SaveExploits4References1
RedHat Linux
RedHat Linux
added 2026/05/26 9:24 a.m.10 views

rsync: Rsync: Out of bounds array access via negative index

An out of bounds read flaw has been discovered in rsync. A malicious client acting as the receiver of an rsync file transfer can trigger an OOB read via a negative array index. The rsync client requires at least read access to the remote rsync module to trigger the issue...

4.3CVSS5.7AI score0.00319EPSS
SaveExploits0References6
CloudLinux
CloudLinux
added 2026/05/26 9:21 a.m.15 views

nginx: Fix of CVE-2026-9256

CVE-2026-9256: fix heap buffer overflow with overlapping captures in ngxhttprewritemodule...

9.2CVSS6AI score0.09884EPSS
SaveExploits4
RedHat Linux
RedHat Linux
added 2026/05/26 6:6 a.m.22 views

kernel: proc: fix UAF in proc_get_inode()

In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in procgetinode Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde-procops don't belong to /proc, it belongs to a module, therefore dereferencing it after /proc entry has been registered...

7.8CVSS6.4AI score0.002EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/05/26 5:39 a.m.35 views

rsync: Rsync: Out of bounds array access via negative index

An out of bounds read flaw has been discovered in rsync. A malicious client acting as the receiver of an rsync file transfer can trigger an OOB read via a negative array index. The rsync client requires at least read access to the remote rsync module to trigger the issue...

4.3CVSS5.7AI score0.00319EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/05/26 5:6 a.m.12 views

rsync: Rsync: Out of bounds array access via negative index

An out of bounds read flaw has been discovered in rsync. A malicious client acting as the receiver of an rsync file transfer can trigger an OOB read via a negative array index. The rsync client requires at least read access to the remote rsync module to trigger the issue...

4.3CVSS5.7AI score0.00319EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/05/26 2:12 a.m.12 views

CVE-2026-22678

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting...

5.4CVSS5.9AI score0.00221EPSS
SaveExploits0References1
Mageia
Mageia
added 2026/05/26 1:55 a.m.23 views

Updated nginx packages fix security vulnerabilities

NGINX ngxquicmodule vulnerability. CVE-2026-40460 NGINX ngxhttpsslmodule vulnerability. CVE-2026-40701 NGINX ngxhttpproxyv2module vulnerability. CVE-2026-42926 NGINX ngxhttpcharsetmodule vulnerability. CVE-2026-42934 NGINX ngxhttprewritemodule vulnerability. CVE-2026-42945 NGINX ngxhttpscgimodule...

9.2CVSS6AI score0.61469EPSS
SaveExploits43References2
OSV
OSV
added 2026/05/26 1:55 a.m.18 views

MGASA-2026-0156 Updated nginx packages fix security vulnerabilities

NGINX ngxquicmodule vulnerability. CVE-2026-40460 NGINX ngxhttpsslmodule vulnerability. CVE-2026-40701 NGINX ngxhttpproxyv2module vulnerability. CVE-2026-42926 NGINX ngxhttpcharsetmodule vulnerability. CVE-2026-42934 NGINX ngxhttprewritemodule vulnerability. CVE-2026-42945 NGINX ngxhttpscgimodule...

9.2CVSS5.8AI score0.61469EPSS
SaveExploits43References3
EUVD
EUVD
added 2026/05/26 1:6 a.m.21 views

EUVD-2025-209927

The GDPR cookies module for Backdrop CMS before 1.x-1.3.5 doesn't sufficiently protect visitors from Cross Site Scripting XSS if a malicious value has been provided for the optional 'Info content' field for the YouTube service. This is mitigated by the fact that an attacker must have a role with...

1.8CVSS5.7AI score0.00264EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/26 12:18 a.m.114 views

CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. readtar reads each entry's payload with $handle-read$$data, $block, where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that...

0.00437EPSS
SaveExploits0References2
Rows per page
Query Builder