Lucene search
+L

6951 matches found

CVE
CVE
•added 2026/09/16 1:02 p.m.•17 views

CVE-2026-73175

Nozomi Networks Labs identified a CWE-400 (Uncontrolled Resource Consumption) vulnerability in the OPC UA gateway component of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware V1.06.01 . An adjacent unauthenticated attacker can exhaust the server session pool by opening mult...

7.1CVSS5.7AI score0.00262EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/16 1:02 p.m.•43 views

CVE-2026-73175

Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacent unauthenticated attacker to exhaust the server session pool and cause a complete denial of...

7.1CVSS0.00262EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/16 1:02 p.m.•8 views

EUVD-2026-80724

Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacent unauthenticated attacker to exhaust the server session pool and cause a complete denial of...

7.1CVSS5.7AI score0.00262EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/16 1:02 p.m.•11 views

CVE-2026-73175

Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacent unauthenticated attacker to exhaust the server session pool and cause a complete denial of...

7.1CVSS5.8AI score0.00262EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 11:16 a.m.•9 views

CVE-2026-89865

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers stage their transfer in a DMAPOOLSIZE 256-byte bounce buffer obtained from dmapoolalloc, which does not zero the allocation. They initialize...

0.00211EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/15 3:18 p.m.•7 views

CVE-2026-91988 atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP

atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary command and argument values that are spawned as local subprocesses by...

9.2CVSS6.1AI score
SaveExploits0References4
OSV
OSV
•added 2026/09/14 1:20 p.m.•5 views

OPENSUSE-SU-2026:21849-1 Security update for kimi-code

This update for kimi-code fixes the following issues: Changes in kimi-code: Update to version 0.42.0: Add an experimental Updates panel with paginated progress messages from the main agent and subagents, enabled with KIMICODEEXPERIMENTALNOTIFYUSER=1 Turn the subagent model pool, Remote Control an...

7.5CVSS5.5AI score0.00931EPSS
SaveExploits2References4
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•7 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dm thin: Use the pmd-root from the last transaction when commit fails. Recently, we discovered a problem with a softlockup in the dm thin pool’s btree lookup code due to corrupted metadata. Kernel panic – not syncing: Softlockup:...

5.5CVSS6AI score0.0016EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability in Jackson-Databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource...

8.1CVSS7.4AI score0.04186EPSS
SaveExploits1References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: A race condition in qmanDestroyFQ has been fixed. When QMANFQFLAGDYNAMICFQID is set, there is a race condition between the state of fqtablefq-idx and the process of freeing/allocating resources from the pool. The...

4.7CVSS5.6AI score0.00094EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•6 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2 – Clearing the BM pool before initialization. The register values persist after booting the kernel using kexec, which results in a kernel panic. Therefore, it is necessary to clear the BM pool registers before...

5.5CVSS5.6AI score0.0022EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in netcdf

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write attacks when opening an XML file after exhausting the memory pool...

8.1CVSS7.6AI score0.01178EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•14 views

Astra Linux – Vulnerability in Wayland

An internal reference count is maintained on the buffer pool; this count increments every time a new buffer is created from the pool. The reference count is stored as an integer. On LP64 systems, this can lead to an overflow if the client creates a large number of wlshm buffer objects, or if it...

6.6CVSS6.9AI score0.00317EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in libvirt

A NULL pointer dereference was detected in the libvirt API, which was introduced in the upstream version 3.10.0 and fixed in libvirt 6.0.0. This issue relates to the retrieval of a storage pool based on its target path. More specifically, this flaw affects storage pools created without a target...

6.5CVSS6.8AI score0.02363EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•12 views

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: stratix10-svc – A potential resource leak has been fixed in svccreatememorypool. svccreatememorypool is only called from stratix10svcdrvprobe. Most of the resources within the probe are managed, but this memremap call i...

5.5CVSS5.8AI score0.00145EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “Reapply ‘drm/qxl: simplify qxlfencewait’” This change reverts the commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reported: “I tried running my tests on my virtual machines, but the tests failed upon boot-up...

5.5CVSS6.1AI score0.00164EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•5 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pagepool: Avoid infinite loops when scheduling delayed workers. We noticed that the kworker in pagepoolreleaseretry was waking up repeatedly and infinitely in production. This issue was caused by a buggy driver, which resulted in...

5.5CVSS6AI score0.00301EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•7 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: dm thin: Fixed the ABBA deadlock between shrinkslab and dmpoolabortmetadata. The following concurrent processes: P1drop cache P2kworker dropcachessysctlhandler dropslab shrinkslab downread&shrinkerrwsem - LOCK A doshrinkslab...

5.5CVSS6AI score0.0015EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: Fixed an integer overflow in ghesestatuspoolinit. The variable numghes was changed from int to unsigned int, preventing an overflow and causing subsequent vmalloc calls to fail. The overflow occurs in...

5.5CVSS6.4AI score0.00217EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in netcdf

The ezxmltoxml function in ezxml 0.8.6 and earlier is vulnerable to out-of-band OOB writes when opening an XML file after exhausting the memory pool...

8.1CVSS7.2AI score0.01178EPSS
SaveExploits1References2
Rows per page
Query Builder