Lucene search
+L

24874 matches found

Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.21 views

PT-2026-64564

In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect race mutex unlock may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly unlike spinlocks and refcounts. 12 Use a...

5.7AI score0.00177EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.25 views

PT-2026-64597

In the Linux kernel, the following vulnerability has been resolved: firmware loader: fix device reference leak in firmware upload register firmware upload register - fw create instance - device initialize After fw create instance succeeds, the lifetime of the embedded struct device is expected to...

5.8AI score0.00173EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.21 views

PT-2026-64522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the scmi regulator probe function. This happens because the function calls of find node by name, which increments the reference count of the returned...

5.3AI score0.00211EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.14 views

PT-2026-64567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the USB gadget UDC management where the lifecycles of the gadget and the udc structure are decoupled. This occurs when usb del gadget frees the udc memory whil...

5.8AI score0.00211EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-64301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls offindnodebyname which takes a reference on the returned device node. O...

5.3AI score0.00211EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/24 10:58 p.m.11 views

CGA-26P9-W832-5Q9C

Bulletin has no description...

6.5CVSS5.8AI score0.00309EPSS
SaveExploits0
OSV
OSV
added 2026/07/24 9:55 p.m.10 views

GHSA-RM67-G9CH-VXFF Poweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own

Affected software - Product: Poweradmin web front-end for PowerDNS - Version tested: master, commit 7f28c3a97 also reachable in the 4.x release line — the record-edit code is the same - Component: record editing web UI - Vulnerability type: Broken Access Control / Insecure Direct Object Reference...

8.1CVSS6AI score
SaveExploits0References8
NVD
NVD
added 2026/07/24 5:17 p.m.13 views

CVE-2026-65708

sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belonging to accounts they do not have ACL permissions for by exploiting missing authorization checks in AccountFileController...

8.6CVSS0.00221EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/24 4:16 p.m.8 views

DEBIAN-CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

7.8CVSS5.6AI score0.00117EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/24 4:16 p.m.8 views

DEBIAN-CVE-2026-64246

In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstationpoweroffinit Move ofnodeputdn after the ofmatchnode call, which still needs the node pointer. The node reference is correctly released after use...

7.8CVSS5.7AI score0.00117EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/24 4:16 p.m.19 views

CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

7.8CVSS0.00117EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/24 4:16 p.m.12 views

CVE-2026-64246

In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstationpoweroffinit Move ofnodeputdn after the ofmatchnode call, which still needs the node pointer. The node reference is correctly released after use...

7.8CVSS0.00117EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/24 4:16 p.m.10 views

DEBIAN-CVE-2026-64239

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regionsrmdirs DAMON sysfs maintains the DAMOS tried region directory objects via a linked list. When the user requests refresh of the directories, DAMON sysfs removes all the region...

7.8CVSS5.7AI score0.00116EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/07/24 4:16 p.m.17 views

CVE-2026-64246

In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstationpoweroffinit Move ofnodeputdn after the ofmatchnode call, which still needs the node pointer. The node reference is correctly released after use...

7.8CVSS5.3AI score0.00117EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/24 4:16 p.m.10 views

UBUNTU-CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

7.8CVSS5.6AI score0.00117EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/07/24 4:16 p.m.17 views

CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

7.8CVSS5.3AI score0.00117EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/24 4:14 p.m.28 views

GHSA-P5RM-JG5C-8C77 Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)

Impact Kiota generates AI plugin manifests from an OpenAPI description. When the description contains an x-ai-capabilities response semantics statictemplate or the adaptive-card extension x-ai-adaptive-card, the file reference is written into the generated manifest's...

6.1CVSS5.8AI score0.01479EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/24 3:57 p.m.36 views

CVE-2026-65708 sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController

sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belonging to accounts they do not have ACL permissions for by exploiting missing authorization checks in AccountFileController...

8.6CVSS0.00221EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/24 3:57 p.m.11 views

CVE-2026-65708 sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController

sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belonging to accounts they do not have ACL permissions for by exploiting missing authorization checks in AccountFileController...

8.6CVSS6AI score
SaveExploits0References5
EUVD
EUVD
added 2026/07/24 3:57 p.m.19 views

EUVD-2026-48714

sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belonging to accounts they do not have ACL permissions for by exploiting missing authorization checks in AccountFileController...

8.6CVSS6AI score0.00221EPSS
SaveExploits0References2
Rows per page
Query Builder