Lucene search
+L

260 matches found

Debian CVE
Debian CVE
•added 2026/03/25 10:27 a.m.•20 views

CVE-2026-23335

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid = ah-scah.ahinfo.ahidx u8 rsvd4; // offset 4 - NEVER SET - LEAK ; rsvd4: 4 bytes of sta...

5.5CVSS5.8AI score0.00129EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•5 views

CVE-2026-23384: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ioniccreatecq struct ioniccqresp resp u32 cqid2; // offset 0 - PARTIALLY SET see below u8 udmamask; // offset 8 - SET resp.udmamask = vcq-udmamask u8 rsvd7; // offset 9 - NEVER SET udmamask &...

5.5CVSS5.7AI score0.00112EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-23335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid =...

5.5CVSS5.8AI score0.00129EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•5 views

CVE-2026-23335: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid = ah-scah.ahinfo.ahidx u8 rsvd4; // offset 4 - NEVER SET - LEAK ; rsvd4: 4 bytes of sta...

5.5CVSS5.7AI score0.00129EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2026/02/25 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-25988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, sometimes msl.c fails t...

7.5CVSS6.5AI score0.00494EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-0915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued networ...

7.5CVSS6.2AI score0.00618EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•11 views

MiracleLinux 4 : kernel-2.6.32-696.28.1.el6 (AXSA:2018-3099:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3099:04 advisory. hw: cpu: speculative execution permission faults handling CVE-2017-5754 Kernel: error in exception handling leads to DoS CVE-2018-8897 kernel: nfsd:...

10CVSS7.2AI score0.84172EPSS
SaveExploits17References7
Vulnrichment
Vulnrichment
•added 2026/01/15 10:08 p.m.•10 views

CVE-2026-0915 getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver...

6.3AI score0.00618EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/15 12:00 a.m.•6 views

CVE-2026-0915: Use of Uninitialized Resource

Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver...

7.5CVSS6.3AI score0.00618EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:52 a.m.•15 views

CVE-2020-10854

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Kernel stack addresses are leaked to userspace. The Samsung ID is SVE-2019-16161 January 2020...

7.5CVSS7.2AI score0.00413EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•16 views

PT-2026-27749

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel stack leak exists in the RDMA/ionic component, specifically within the ionic create cq function. The issue involves a leak of up to 11 bytes of stack memory due to uninitialized...

5.5CVSS5.7AI score0.00112EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•29 views

PT-2026-27700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel stack leak exists in the irdma create user ah function within the RDMA/irdma component. The rsvd4 member of the irdma create ah resp structure leaks 4 bytes of stack memory...

5.5CVSS5.8AI score0.00129EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•5 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989779 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain Initialize registers to avoid stack leak...

5.5CVSS5.9AI score0.00288EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•4 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989549 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain Initialize registers to avoid stack leak...

5.5CVSS5.9AI score0.00288EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/10/25 12:01 a.m.•8 views

SUSE CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

6.5CVSS6AI score0.0021EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/21 12:31 p.m.•12 views

EUVD-2022-54933

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain Initialize registers to avoid stack leak into userspace...

5.5CVSS5.9AI score0.00288EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-3260

Malware in sbrugna...

7.5CVSS7.3AI score0.00413EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/07 12:00 a.m.•8 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986343 advisory. In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix stack information leak The tty driver name is used also after registering the...

7.1CVSS5.9AI score0.00252EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-48728

Malicious code in bioql PyPI...

3.7CVSS5.2AI score0.00468EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2025/09/05 6:15 p.m.•50 views

DEBIAN-CVE-2025-39690

In the Linux kernel, the following vulnerability has been resolved: iio: accel: sca3300: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace by ensuring that the channels array is zeroed before use...

5.5CVSS5.4AI score0.0014EPSS
SaveExploits0References1
Rows per page
Query Builder