Lucene search
+L

37785 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.21 views

OpenSSL 3.0.0 < 3.0.22 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.0.22. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.22 advisory. - Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and...

9.1CVSS6.2AI score0.0133EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-14457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured...

7.5CVSS5.8AI score0.00984EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-78148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of...

6.9CVSS5.9AI score0.0054EPSS
SaveExploits0References3
Amazon
Amazon
added 2026/08/25 12:00 a.m.9 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors CVE-2026-53393 In th...

9.4CVSS5AI score0.00529EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-55371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions...

6.9CVSS5.5AI score0.00117EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/08/25 12:00 a.m.4 views

The vulnerability of the `udp_sock_create6()` function in the `include/net/udp_tunnel.h` module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the udpsockcreate6 function in the include/net/udptunnel.h module of the Linux kernel is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.3AI score0.00129EPSS
SaveExploits0References12Affected Software3
OSV
OSV
added 2026/08/25 12:00 a.m.4 views

UBUNTU-CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

7.5CVSS5.6AI score0.0133EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2026/08/25 12:00 a.m.12 views

OpenSSL -- Multiple vulnerabilities

The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...

9.8CVSS5.3AI score0.0133EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/25 12:00 a.m.16 views

CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.9AI score0.00984EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.15 views

PT-2026-81494

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 18.7.9 iPadOS versions prior to 26.5 Description A null pointer dereference occurs due to insufficient input validation, which may allow an application to cause...

5.5CVSS5.9AI score0.00104EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/08/25 12:00 a.m.5 views

The vulnerability of the file_thp_enabled() function in the mm/huge_memory.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the filethpenabled function in the mm/hugememory.c module of the Linux kernel’s memory management subsystem is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

7CVSS4.5AI score0.00119EPSS
SaveExploits0References10Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-63076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before...

7.5CVSS6AI score0.0133EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/25 12:00 a.m.4 views

UBUNTU-CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS5.8AI score0.00984EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/24 6:17 p.m.9 views

CVE-2026-71922

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...

8.7CVSS0.00469EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.11 views

CVE-2026-71920

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vulnerability via a crafted request to cra...

6.9CVSS0.00392EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:16 p.m.11 views

CVE-2026-13213

The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...

5.3CVSS0.0017EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 5:43 p.m.8 views

CVE-2026-74706

A flaw was found in the Linux kernel's bnge driver. During the setup of an auxiliary device, if the allocation of a specific resource auxrdev fails, the subsequent release process attempts to access an unallocated memory region. This results in a NULL pointer dereference, which can lead to a syst...

5.5CVSS5.3AI score0.00156EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 5:43 p.m.7 views

CVE-2026-74702

A flaw was found in the vhost-scsi component of the Linux kernel. This vulnerability allows a local attacker to cause a denial of service DoS by changing virtio feature bits after the vhost-scsi endpoint has been activated. Specifically, enabling the T10-PI feature after setup can lead to an...

8.8CVSS5.2AI score0.00127EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 5:17 p.m.8 views

CVE-2026-74684

A flaw was found in the Linux kernel's net: tap module. A NULL pointer dereference can occur in the tapgetuserxdp function when processing an XDP buffer with a GSO virtio-net header and a zero protocol. This can be triggered by a malicious guest in a virtualized environment, leading to a system...

7.1CVSS5.6AI score0.00138EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/24 5:10 p.m.21 views

CVE-2026-13213

Zephyr RTOS Bluetooth Hearing Access Service (HAS) GATT server (subsys/bluetooth/audio/has.c) contains a NULL-pointer dereference in security_changed(). The connection-callback set is installed unconditionally via BT_CONN_CB_DEFINE, so the callback fires before the application calls bt_has_regist...

5.3CVSS5.6AI score0.0017EPSS
SaveExploits0References2
Rows per page
Query Builder