Lucene search
+L

15568 matches found

CVE
CVE
added 2026/07/19 3:39 p.m.22 views

CVE-2026-64078

The CVE-2026-64078 entry concerns a Linux kernel netfilter/x_tables issue that was resolved by introducing and using xtables_unregister_table_exit (replacing xt_unregister_table()) and adding a second-stage helper to unlink the dying table from the list, free hook ops, and emit an audit notificat...

7.8CVSS5.4AI score0.00127EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/19 3:39 p.m.22 views

CVE-2026-64077

The CVE-2026-64077 issue concerns the Linux kernel netfilter ebtables component, resolved by moving to a two-stage removal scheme. The root cause is an incompatibility in ebt_table layout that prevents reusing xt helpers. As a remediation, table->ops assignment is now performed while the ebt m...

7.8CVSS5.4AI score0.00127EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/19 3:39 p.m.13 views

EUVD-2026-45650

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for xtables, follow same pattern in ebtables. We can't reuse xt helpers: ebttable struct layout is incompatible. table-ops assignment is now done while...

5.4AI score0.00127EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/19 2:56 p.m.32 views

CVE-2026-64006 netfilter: nf_tables: fix dst corruption in same register operation

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix dst corruption in same register operation For lshift and rshift, the shift operations are performed in a loop over 32-bit words. The loop calculates the shifted value and write it to dst, and then...

0.00171EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/19 2:56 p.m.10 views

EUVD-2026-45571

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...

5.4AI score0.00166EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/19 2:56 p.m.44 views

CVE-2026-63998 ethtool: module: call ethnl_ops_complete() on module flash errors

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...

0.00166EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/19 2:56 p.m.21 views

CVE-2026-63998

The CVE-2026-63998 entry relates to the Linux kernel: during ethtool module handling, ethnl_ops_begin() may be followed by a failed validate() that incorrectly skips ethnl_ops_complete(), potentially leaving an imbalance in operation lifecycle handling on module flash errors. The issue is describ...

5.4AI score0.00166EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/19 12:2 p.m.9 views

CVE-2026-63820

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fsreaddatalargefolio can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is...

5.3AI score0.00145EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/19 12:2 p.m.9 views

CVE-2026-63819

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fsgetnodefoliora kernel BUG at fs/f2fs/file.c:845! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller 0 PREEMPTfull Hardware name: QEMU...

7.8CVSS5.2AI score0.00119EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.13 views

PT-2026-61323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf tables component where destination corruption occurs during same register operations. For lshift and rshift operations, the system performs shifts in ...

5.4AI score0.00171EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.16 views

PT-2026-61126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bdev pseudo-filesystem, an internal kernel filesystem that should not be accessible to userspace. A kernel NULL pointer dereference occurs when userspace attempts ...

9.8CVSS5.2AI score0.0069EPSS
SaveExploits0References78
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.15 views

PT-2026-61315

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool module where the ethnl ops complete function is not called when validate fails, despite ethnl ops begin having already been executed. This occurs during...

5.1AI score0.00166EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.15 views

PT-2026-61384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the list of subrequests attached to stream-subrequests is accessed without locks by the functions netfs collect read results and netfs collec...

9.8CVSS5.1AI score0.0038EPSS
SaveExploits0
Veracode
Veracode
added 2026/07/18 4:50 p.m.10 views

Authentication Bypass

netlicensing-mcp is vulnerable to Authentication Bypass. The vulnerability is due to the API key middleware failing to enforce authentication and falling back to the server operator's API key, which allows an unauthenticated attacker to invoke privileged MCP operations under the operator's identi...

5.9AI score
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/07/18 2:17 p.m.18 views

CVE-2023-54366

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.8CVSS0.00277EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/18 1:10 p.m.37 views

CVE-2024-58367

SurrealDB before 2.0.4 has an improper authorization flaw in field permissions during SELECT, UPDATE, and DELETE, allowing an authorized user to leak protected field values through techniques such as SELECT VALUE, field aliasing, function arguments, WHERE filters, RETURN BEFORE, and SET clause re...

7.1CVSS5.2AI score0.00215EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/18 1:10 p.m.12 views

CVE-2023-54366

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.8CVSS5.3AI score0.00277EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/18 1:10 p.m.10 views

CVE-2023-54366 SurrealDB before 1.0.1 Insecure Default Table Permissions

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.8CVSS5.3AI score0.00277EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/18 1:10 p.m.20 views

CVE-2023-54366

CVE-2023-54366 affects SurrealDB prior to 1.0.1, where default table permissions are set to FULL instead of NONE. This misconfiguration allows attackers with database access or unauthenticated users on publicly exposed instances to perform uncontrolled SELECT, CREATE, UPDATE, and DELETE operation...

8.8CVSS5.3AI score0.00277EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/18 1:10 p.m.7 views

CVE-2023-54366 SurrealDB before 1.0.1 Insecure Default Table Permissions

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.7CVSS5.3AI score
SaveExploits0References4
Rows per page
Query Builder