Lucene search
+L

83597 matches found

EUVD
EUVD
added 2026/08/06 12:31 a.m.13 views

EUVD-2026-53659

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.1.1 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

5.5AI score0.00117EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/06 12:16 a.m.6 views

DEBIAN-CVE-2026-67870

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...

9.8CVSS5.8AI score0.00576EPSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2026/08/06 12:7 a.m.12 views

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

5.5CVSS5.8AI score0.0013EPSS
SaveExploits0
OSV
OSV
added 2026/08/06 12:4 a.m.8 views

RLSA-2026:49870 Low: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown CVE-2025-68214 Bug Fixes and Enhancements: Possible regression with FM350GL rhel-9.8.z JIRA:Rocky...

5.5CVSS5.5AI score0.0013EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:0 a.m.10 views

RockyLinux 9 : thunderbird (RLSA-2026:49921)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49921 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

9.8CVSS5.7AI score0.00436EPSS
SaveExploits0References67
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-64598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: Fix error code in smb2aeadreqalloc The numsgs variable is a u32 so ERRPTRnumsgs doesn't work. We would have to do something similar to the previous...

8.8CVSS5.6AI score0.00282EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-64593

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: do not trim a device which is not writeable BUG There is a bug report that btrfs/242 can randomly fail with the following NULL pointer dereference: run...

5.5AI score0.00164EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 11:16 p.m.9 views

CVE-2026-19026

H5Zfilternbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cdvalues0 through cdvalues4 without validating that cdvalues is non-NULL or that cdnelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the...

6.8CVSS0.00127EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/05 11:16 p.m.6 views

DEBIAN-CVE-2026-19024

NULL pointer dereference in H5Pgetfillvalue in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and...

8.2CVSS5.3AI score0.00126EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 11:16 p.m.9 views

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS0.00117EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 11:16 p.m.7 views

CVE-2026-19024

NULL pointer dereference in H5Pgetfillvalue in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and...

8.2CVSS0.00126EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/05 11:16 p.m.5 views

UBUNTU-CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.3AI score0.00117EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/05 11:16 p.m.6 views

UBUNTU-CVE-2026-19024

NULL pointer dereference in H5Pgetfillvalue in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and...

8.2CVSS5.3AI score0.00126EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/05 10:47 p.m.59 views

CVE-2026-19026

The CVE-2026-19026 issue affects HDF5 up to v2.3.0, specifically H5Z__filter_nbit in H5Znbit.c. The code dereferences cd_values[0] through cd_values[4] without verifying that cd_values is non-NULL or that cd_nelmts >= 5, exploiting the fixed size of the filter header. This can cause a denial o...

6.8CVSS5.5AI score0.00127EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/05 10:14 p.m.62 views

CVE-2026-19024

CVE-2026-19024 affects HDF5’s H5Pget_fill_value and causes a NULL pointer dereference in versions before 2.1.1. If a dataset uses a version 1 or 2 fill value message with the defined flag and a negative size, the value can reach H5T_path_find with a NULL datatype, leading to a denial of service. ...

8.2CVSS5.5AI score0.00126EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/05 10:14 p.m.8 views

CVE-2026-19024

NULL pointer dereference in H5Pgetfillvalue in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and...

8.2CVSS5.5AI score0.00126EPSS
SaveExploits0
OSV
OSV
added 2026/08/05 10:14 p.m.10 views

CVE-2026-19024 HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message

NULL pointer dereference in H5Pgetfillvalue in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and...

8.2CVSS5.4AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/05 10:14 p.m.7 views

CVE-2026-19024 HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message

NULL pointer dereference in H5Pgetfillvalue in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and...

8.2CVSS5.3AI score0.00126EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/05 10:13 p.m.11 views

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

6.8CVSS5.4AI score0.00117EPSS
SaveExploits0
CVE
CVE
added 2026/08/05 10:13 p.m.58 views

CVE-2026-19023

The CVE describes an untrusted pointer dereference in the render_bin_output function of the h5dump tool from HDF5, caused by processing a variable-length string dataset with more than one element dumped in binary mode. Affected versions are cited as HDF5 before 2.1.1 (and related entries referenc...

6.8CVSS5.4AI score0.00117EPSS
SaveExploits0References1
Rows per page
Query Builder