Lucene search
+L

20190 matches found

RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-68098

A flaw was found in ksmbd, a Linux kernel module. The setntacldacl function, which processes Discretionary Access Control Lists DACLs, can stop copying Access Control Entries ACEs prematurely due to a size accounting overflow. This can cause a subsequent deduplication process to read beyond the...

7.1CVSS5.3AI score0.00168EPSS
SaveExploits0References8
CVE
CVE
added yesterday69 views

CVE-2026-20349

The CVE-2026-20349 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN, caused by insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can send a crafted HTTP request to the VPN service and cause the device to reload, triggering a denial-of-...

8.6CVSS5.4AI score
SaveIn wildExploits1References2
OSV
OSV
added yesterday4 views

DEBIAN-CVE-2026-73075

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

4.6CVSS5.3AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added yesterday4 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS8.3AI score0.00655EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added yesterday8 views

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

9.6CVSS5.6AI score0.00655EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added yesterday9 views

Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-28386 Vulnerability Details CVEID:CVE-2026-28386 DESCRIPTION: Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES suppo...

9.1CVSS7.3AI score0.00313EPSS
SaveExploits0Affected Software1
Nuclei
Nuclei
added yesterday92 views

Stirling-PDF SSRF via Markdown

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

9.8CVSS5.3AI score0.01999EPSS
SaveExploits1References2
Nuclei
Nuclei
added yesterday61 views

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7AI score0.01686EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added yesterday7 views

Fedora 44 : knot (2026-6f4584d9b3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f4584d9b3 advisory. new upstream release including a security fix for ACL processing Tenable has extracted the preceding description block directly from the Fedora security...

5.4AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2 days ago4 views

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

5.3CVSS7.1AI score0.00289EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago38 views

CVE-2026-18503

CVE-2026-18503 affects Python’s csv.Sniffer.sniff() when fed attacker-controlled, unbounded CSV input. The dialect sniffing process can trigger super-linear regular-expression work, leading to significant CPU consumption. The issue is triggered during normal operation of csv.Sniffer.sniff() with ...

2.4CVSS5.2AI score0.00114EPSS
SaveExploits0References9
NVD
NVD
added 2 days ago9 views

CVE-2026-68425

In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing starts reassembly for active DATA responses before the response is matched to an outstanding send. The normal match happens later, aft...

0.00163EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago19 views

CVE-2026-68425

CVE-2026-68425 in the Linux kernel relates to IB/mad RMPP receive processing. Previously, DATA responses could begin reassembly before being matched to an outstanding send, allowing an unsolicited response that routes to a kernel RMPP agent to allocate or extend RMPP receive state before full TID...

5.4AI score0.00163EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago16 views

CVE-2026-68330

CVE-2026-68330 affects the Linux kernel component for net: airoha mailbox buffers. The issue arises because airoha_npu_send_msg() always maps with DMA_TO_DEVICE, while some callers rely on the NPU to write responses back into the same buffer. On non-cache-coherent systems (e.g., EN7581 Cortex-A53...

5.7AI score0.00198EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago21 views

CVE-2026-68309

The vulnerability CVE-2026-68309 affects the Linux kernel driver for wifi mt76 (Connac) and fixes a NULL-pointer dereference in mt76_connac_mcu_uni_bss_he_tlv(). The root cause is that mt76_connac_get_he_phy_cap could return NULL, and the code may dereference the cap pointer without checking. A p...

5.2AI score0.00168EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago14 views

CVE-2026-68265

The CVE-2026-68265 entry concerns the Linux kernel DRM XE VM: a prefetch of a BO region (DRM_XE_CONSULT_MEM_ADVISE_PREF_LOC) could be treated as an index into region_to_mem_type[], with the value -1 causing an out-of-bounds access. The fix resolves the preferred BO VMAs location directly: local V...

5.4AI score0.00173EPSS
SaveExploits0References3
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-55338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset prereset only force-completes fences of MAPPED queues. A queue in any other state e.g. mid-eviction keeps its lastfence pending; after a GPU reset that fence never...

5.3AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago16 views

CVE-2026-68208

The CVE concerns the Linux kernel code in media: TI: VPE. In vip_probe_slice(), the error handling for devm_kzalloc() used PTR_ERR_OR_ZERO(), which incorrectly returns 0 on NULL and fails to signal allocation failure. The vulnerability is addressed by returning -ENOMEM when devm_kzalloc() fails. ...

5.3AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago12 views

CVE-2026-68143

CVE-2026-68143 concerns the Linux kernel net: slip subsystem. The vulnerability arises in slip_receive_buf(), which can write via rbuff after sl_realloc_bufs() updates rbuff and buffsize while holding the lock is released, creating a race with MTU changes. An MTU shrink can expose a smaller rbuff...

5.5AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-55526

In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation slreallocbufs replaces rbuff and updates buffsize while holding sl-lock. slipreceivebuf reads those fields and writes through rbuff without holding the lock. An MTU change...

5.5AI score0.00175EPSS
SaveExploits0References5
Rows per page
Query Builder