Lucene search
+L

13244 matches found

RedHat Linux
RedHat Linux
•added 2026/07/01 9:48 a.m.•23 views

kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

A flaw was found in the Linux kernel's RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update RCU in the mlx4srqevent function. An attacker could potentially trigger an event before the srq object is fully initialized, leading to a system crash. This could resul...

7.8CVSS6.5AI score0.00144EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/07/01 3:27 a.m.•24 views

SUSE CVE-2026-41992

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression...

6.1CVSS6AI score0.00564EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•30 views

PT-2026-54642

Name of the Vulnerable Software and Affected Versions AWS Advanced JDBC Wrapper versions 3.3.0 through 4.0.0 Description Deserialization of untrusted data in the RemoteQueryCachePlugin allows an actor with write access to the shared cache infrastructure to execute arbitrary code on application...

8.8CVSS6.3AI score0.00727EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•14 views

PT-2026-55102

Impact When Ghost is behind a shared caching layer that results in cached content being shared between different visitors e.g., Fastly, Cloudflare, nginx proxy cache, and others, an unauthenticated user could send an x-ghost-preview header that altered the rendered frontend response. In affected...

9.6CVSS5.8AI score0.00446EPSS
SaveExploits0References4
OSV
OSV
•added 2026/06/30 11:39 p.m.•14 views

BIT-GHOST-2026-53943 Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header

Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared caching layer that results in cached content being shared between different visitors, an unauthenticated user could send an x-ghost-preview header that altered the rendered frontend response. In affecte...

9.6CVSS5.8AI score0.00446EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/30 11:16 p.m.•22 views

CVE-2025-71381

Hono before 4.10.2 fixed in 4.10.3 contains a flaw in its CORS middleware: when the origin is not set to "", the middleware copies the Vary header from the incoming request into the response. Because Vary is a response header that should be managed by the server, an attacker can supply arbitrary...

6.9CVSS0.00292EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/30 8:17 p.m.•16 views

CVE-2026-10140

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

9.6CVSS0.0035EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/30 8:17 p.m.•17 views

CVE-2026-10140

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

9.6CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/06/30 7:55 p.m.•19 views

EUVD-2026-40403

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

9.6CVSS5.8AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/30 7:55 p.m.•59 views

CVE-2026-10140 Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

9.6CVSS0.0035EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/30 7:55 p.m.•18 views

CVE-2026-10140 Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

9.6CVSS5.8AI score0.0035EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/30 7:55 p.m.•11 views

CVE-2026-10140

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials,...

9.6CVSS5.8AI score0.0035EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/06/30 11:34 a.m.•12 views

OPENSUSE-SU-2026:21180-1 Security update for mupdf

This update for mupdf fixes the following issues: Changes in mupdf: - Build and ship MuPDF as a shared library make shared=yes instead of static-only: New subpackage libmupdf272 carries libmupdf.so.27.2 the SONAME tracks the upstream minor.patch version. Replaced the static-only mupdf-devel-stati...

7.5CVSS6AI score0.00703EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/06/30 11:30 a.m.•34 views

kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers

A flaw was found in the Linux kernel's networking skbuff component. When skbtrycoalesce attaches paged fragments, it can lose the SKBFLSHAREDFRAG marker. This can lead to the Encapsulating Security Payload ESP input decrypting data in place over page-cache backed fragments, potentially resulting ...

8.8CVSS6.4AI score0.00182EPSS
SaveExploits7References6
EUVD
EUVD
•added 2026/06/30 11:05 a.m.•24 views

EUVD-2026-40291

Net::BitTorrent versions through 2.0.1 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG. The MSE Message Stream Encryption handshake derives its 160-bit Diffie-Hellman private key from Perl's rand, a non-cryptographic drand48-class generator seeded once per...

5.9CVSS5.8AI score0.00234EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/30 2:16 a.m.•13 views

DEBIAN-CVE-2026-58302

rtapiapp in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads shared library modules via dlopen by using a user-supplied module name. Insufficient validation of the module name allows path traversal, enabling an unprivileged local user to lo...

8.4CVSS5.9AI score0.00194EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/30 1:09 a.m.•15 views

CVE-2026-58302

rtapiapp in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads shared library modules via dlopen by using a user-supplied module name. Insufficient validation of the module name allows path traversal, enabling an unprivileged local user to lo...

8.4CVSS5.9AI score0.00194EPSS
SaveExploits0References5
FreeBSD Advisory
FreeBSD Advisory
•added 2026/06/30 12:00 a.m.•20 views

FreeBSD-SA-26:44.posixshm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:44.posixshm Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in POSIX largepage objects Category: core Module: posixshm Announced:...

8.8CVSS5.9AI score0.00503EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•14 views

PT-2026-71930

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description An issue exists in the implementation of largepage shared memory objects where pages were not explicitly wired. When the sendfile2 function transmits such an object using the SF NOCACHE flag,...

8.8CVSS7.3AI score0.00503EPSS
SaveExploits0References9
Packet Storm News
Packet Storm News
•added 2026/06/30 12:00 a.m.•16 views

FreeBSD Security Advisory - FreeBSD-SA-26:44.posixshm

FreeBSD Security Advisory - Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile2 transmitted such an object with the SFNOCACHE flag, it freed the underlying pages after transmission even though existing mappings still referred to them. Separately, certain...

5.8AI score0.00503EPSS
SaveExploits0
Rows per page
Query Builder