Lucene search
+L

83597 matches found

NVD
NVD
added 2026/08/05 12:18 p.m.11 views

CVE-2026-71256

nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbsreaddeviceidentificationbasic / recvreaddeviceidentificationres in nanomodbus.c. A fixed 3-element stack array order3 = 0,1,2 maps object IDs to buffer indices. The server-supplied objectid fiel...

9.8CVSS0.00307EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/05 11:44 a.m.40 views

CVE-2026-71256 nanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via object_id

nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbsreaddeviceidentificationbasic / recvreaddeviceidentificationres in nanomodbus.c. A fixed 3-element stack array order3 = 0,1,2 maps object IDs to buffer indices. The server-supplied objectid fiel...

9.8CVSS0.00307EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/05 11:44 a.m.9 views

EUVD-2026-53333

nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbsreaddeviceidentificationbasic / recvreaddeviceidentificationres in nanomodbus.c. A fixed 3-element stack array order3 = 0,1,2 maps object IDs to buffer indices. The server-supplied objectid fiel...

9.8CVSS5.8AI score0.00307EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/05 11:44 a.m.6 views

CVE-2026-71256 nanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via object_id

nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbsreaddeviceidentificationbasic / recvreaddeviceidentificationres in nanomodbus.c. A fixed 3-element stack array order3 = 0,1,2 maps object IDs to buffer indices. The server-supplied objectid fiel...

9.8CVSS5.6AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/05 11:44 a.m.9 views

CVE-2026-71256

nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbsreaddeviceidentificationbasic / recvreaddeviceidentificationres in nanomodbus.c. A fixed 3-element stack array order3 = 0,1,2 maps object IDs to buffer indices. The server-supplied objectid fiel...

9.8CVSS5.6AI score0.00307EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/05 11:44 a.m.68 views

CVE-2026-71256

nanoMODBUS v1.23.0 is affected by an out-of-bounds stack read that enables a wild-pointer write via object_id handling in nanomodbus.c (nmbs_read_device_identification_basic()/recv_read_device_identification_res). A fixed 3-element array order maps object_id to buffer indices; server-provided obj...

9.8CVSS5.6AI score0.00307EPSS
SaveExploits0References2
F5 Networks
F5 Networks
added 2026/08/05 9:1 a.m.11 views

K000162792: Numpy vulnerabilities CVE-2021-34141, CVE-2021-33430, CVE-2021-41496, CVE-2021-41495

Security Advisory Description CVE-2021-34141 An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely...

5.5CVSS6.6AI score0.01561EPSS
SaveExploits4
NVD
NVD
added 2026/08/05 8:16 a.m.8 views

CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

7.8CVSS0.00118EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/05 8:16 a.m.5 views

CVE-2026-64569

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

0.00156EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/05 8:16 a.m.5 views

CVE-2026-55998

The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...

5.3CVSS0.00205EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/05 8:16 a.m.7 views

UBUNTU-CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

7.8CVSS5.3AI score0.00118EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/05 8:9 a.m.35 views

CVE-2026-64575 bpf: tcp: fix double sock release on batch realloc

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

7.8CVSS0.00118EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/05 8:9 a.m.55 views

CVE-2026-64575

CVE-2026-64575 affects the Linux kernel’s BPF TCP iterator. The issue is a double release of socket resources during batch reallocation in bpf_iter_tcp_batch, where on realloc failure the code returns ERR_PTR() and leaves cur_sk

7.8CVSS5.4AI score0.00118EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/05 8:9 a.m.9 views

EUVD-2026-53269

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

5.4AI score0.00118EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/05 8:8 a.m.9 views

EUVD-2026-53263

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

5.4AI score0.00156EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/05 8:8 a.m.49 views

CVE-2026-64569

In CVE-2026-64569, on Linux kernel builds with CONFIG_INET=n, mpls_valid_fib_dump_req() dereferences NULL when handling RTM_GETROUTE dumps for AF_MPLS because tb[RTA_OIF] is passed to nla_get_u32() without checking presence, and the path bypasses ip_valid_fib_dump_req(). This can allow an unprivi...

5.4AI score0.00156EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/08/05 8:8 a.m.9 views

CVE-2026-64569

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

5.4AI score0.00156EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/08/05 7:51 a.m.49 views

CVE-2026-55998

The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...

5.3CVSS5.5AI score0.00205EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/05 7:51 a.m.7 views

CVE-2026-55998 Cluster Existence Oracle via Unauthenticated Import Endpoint

The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...

5.3CVSS5.3AI score
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/08/05 12:30 a.m.9 views

SUSE CVE-2026-67304

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer...

8.7CVSS5.5AI score0.00354EPSS
SaveExploits0References3
Rows per page
Query Builder