Lucene search
+L

4368 matches found

OSV
OSV
added 2026/06/25 10:34 p.m.8 views

GO-2026-5667 CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns...

9.8CVSS5.8AI score0.0051EPSS
SaveExploits1References3
OSV
OSV
added 2026/06/25 10:34 p.m.10 views

GO-2026-5628 Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData) - potential chain halt in github.com/klever-io/klever-go

Klever-Go KVM: Unauthenticated remote node crash nil-pointer DoS in klever-go P2P transaction interceptor txVersionChecker nil RawData - potential chain halt in github.com/klever-io/klever-go...

7.5CVSS5.9AI score0.00278EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/24 5:17 p.m.16 views

CVE-2026-53122

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit When using the flushoncommit mount option, we can have a deadlock between a transaction commit and a reflink operation that copied an inline exte...

5.5CVSS0.00093EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/24 4:30 p.m.11 views

CVE-2026-53122

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit When using the flushoncommit mount option, we can have a deadlock between a transaction commit and a reflink operation that copied an inline exte...

5.7AI score0.00093EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/06/24 4:30 p.m.22 views

EUVD-2026-38990

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit When using the flushoncommit mount option, we can have a deadlock between a transaction commit and a reflink operation that copied an inline exte...

5.8AI score0.00093EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/24 4:30 p.m.13 views

CVE-2026-53122 btrfs: fix deadlock between reflink and transaction commit when using flushoncommit

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit When using the flushoncommit mount option, we can have a deadlock between a transaction commit and a reflink operation that copied an inline exte...

5.8AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/06/24 4:30 p.m.51 views

CVE-2026-53122 btrfs: fix deadlock between reflink and transaction commit when using flushoncommit

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit When using the flushoncommit mount option, we can have a deadlock between a transaction commit and a reflink operation that copied an inline exte...

0.00093EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/24 4:30 p.m.33 views

CVE-2026-53122

CVE-2026-53122: Linux kernel bug in btrfs where flushoncommit can deadlock a reflink with a pending transaction commit when copying an inline extent beyond i_size. The issue arises from locking sequences between reflink/commit paths and delalloc/ordered extents, leading to a cycle where two tasks...

5.5CVSS5.8AI score0.00093EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/24 12:0 a.m.15 views

PT-2026-52016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the btrfs file system when the flushoncommit mount option is used. The issue arises during a reflink operation that copies an inline extent to an offset beyond th...

5.5CVSS5.9AI score0.00093EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/24 12:0 a.m.21 views

pgAdmin 9.x < 9.16 Read-Only Transaction Bypass (CVE-2026-12045)

The version of pgAdmin installed on the remote host is 9.x prior to 9.16. It is, therefore, affected by a read-only transaction bypass vulnerability: - The AI Assistant's executesqlquery tool accepts multi-statement payloads. A single COMMIT followed by a write-statement terminates the enclosing...

9.4CVSS6.2AI score0.00482EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/06/23 11:48 a.m.3 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Always traverse all pending catchall elements. During transaction processing, there may be more than one pending catchall element: 1. One active pending catchall element, and 1 pending element that comes as...

7.8CVSS5.3AI score0.00165EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/06/23 11:48 a.m.12 views

Astra Linux – Vulnerability in PackageKit

PackageKit is a D-Bus abstraction layer that allows users to manage packages in a secure manner using an API that works across different distributions and architectures. From version 1.0.2 to 1.3.4, PackageKit was vulnerable to a time-of-check time-of-use TOCTOU race condition involving transacti...

8.8CVSS8.1AI score0.0046EPSS
SaveExploits12References3
Github Security Blog
Github Security Blog
added 2026/06/22 11:48 p.m.15 views

@actual-app/web has CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields

Summary exportToCSV and exportQueryToCSV in packages/loot-core/src/server/transactions/export/export-to-csv.ts pass user-controlled Payee, Notes, Account, and Category strings to csv-stringify with no cast callback and no formula-prefix neutralization. Strings that begin with =, +, -, @, tab, or...

4.2CVSS5.9AI score0.00174EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/06/22 11:48 p.m.8 views

GHSA-XQJM-27PC-RVWM @actual-app/web has CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields

Summary exportToCSV and exportQueryToCSV in packages/loot-core/src/server/transactions/export/export-to-csv.ts pass user-controlled Payee, Notes, Account, and Category strings to csv-stringify with no cast callback and no formula-prefix neutralization. Strings that begin with =, +, -, @, tab, or...

4.2CVSS5.9AI score0.00174EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/06/22 7:58 p.m.25 views

AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data

Summary The Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification bypass that allows an attacker to forge webhook requests with arbitrary payment amounts and target user IDs. By supplying a valid transaction ID from a small legitimate purchase, the...

6.5CVSS6.2AI score0.00143EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/06/22 7:58 p.m.8 views

GHSA-95JH-7R58-XMXW AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data

Summary The Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification bypass that allows an attacker to forge webhook requests with arbitrary payment amounts and target user IDs. By supplying a valid transaction ID from a small legitimate purchase, the...

6.5CVSS6.2AI score0.00143EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/06/22 7:58 p.m.11 views

Insufficient Verification of Data Authenticity

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the webhook.php process. An attacker can manipulate wallet balances and gain unauthorized access to premium...

7.1CVSS5.9AI score0.00143EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/22 4:22 p.m.15 views

Security Bulletin: Multiple vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

8.7CVSS7.5AI score0.00702EPSS
SaveExploits3Affected Software2
Positive Technologies
Positive Technologies
added 2026/06/22 12:0 a.m.21 views

PT-2026-51434

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description The Authorize.Net webhook handler at 'plugin/AuthorizeNet/webhook.php' contains a signature verification bypass. An attacker can forge webhook requests by providing a valid transaction ID from a small...

6.5CVSS6.2AI score0.00143EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.8 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not call BUGON when encountering ENOMEM during the dropping of file extent items within a given range. If -ENOMEM occurs while dropping file extent items within a specified range, at btrfsDropExtents, the transaction ma...

5.5CVSS5.8AI score0.00145EPSS
SaveExploits0References2
Rows per page
Query Builder