Lucene search
+L

76995 matches found

EUVD
EUVD
•added 2026/09/11 12:31 a.m.•14 views

EUVD-2026-75760

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...

4.3CVSS5.8AI score0.00338EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/11 12:31 a.m.•8 views

EUVD-2026-75773

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage due to a path traversal vulnerability...

8.8CVSS5.8AI score0.00638EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•14 views

PT-2026-90081

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested max payload len svc i3c master handle ibi reads the IBI payload from the RX FIFO into the IBI slot. The loop is bounded by the hardware FIFO size SVC I3C FIFO SIZE, not by the...

5.7AI score0.00215EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•14 views

PT-2026-90152

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc-sinf acpi pcc retrieve biosdata rejects SINF packages only when pcc-num sifr is strictly less than hkey-package.count, then unconditionally writes a trailing sentinel at...

5.9AI score0.00178EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•14 views

PT-2026-90470

In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk-action escaping walk pmd range If -pmd entry sets walk-action = ACTION AGAIN, the pmd none check is retried. The PMD entry may be cleared at the point of retry. In this case, if walk-ops-install pte is...

6.2AI score0.00173EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•14 views

PT-2026-90144

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk store and kek store sk store and kek store strip a trailing newline from the sysfs write before allocating the key buffer: length = count; if buflength - 1 == ' ' length--; bioscf...

6.4AI score0.00209EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•16 views

PT-2026-90338

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcp i2c smbus read stores the caller-supplied buffer pointer in mcp-rxbuf for the duration of a transfer but never clears it when the transfer finishes or times out. On...

5.9AI score0.0017EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•18 views

PT-2026-90221

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without method elm The legacy write path dispatches through a uverbs api write method, but the uverbs attr bundle passed to provider code does not have an ioctl method element. If malformed...

5.7AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•15 views

PT-2026-90413

In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh want write for early-verified SETATTR in nfsd proc setattr The BOTH TIME SET branch calls fh verify early so setattr prepare can inspect the dentry. This causes nfsd setattr to skip fh want write, so notify change ru...

5.8AI score0.00736EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•14 views

PT-2026-90369

In the Linux kernel, the following vulnerability has been resolved: ceph: reject export targets ranks = CEPH MAX MDS in mdsmap decode MDSMap export targets entries are monitor controlled. check new map uses each entry as a bit number in a fixed stack bitmap, so a rank outside the protocol namespa...

5.8AI score0.00738EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•17 views

PT-2026-90513

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

7.1CVSS5.9AI score0.0052EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•19 views

PT-2026-89804

Patch CVE-2026-16338 immediately. Learn how this 9.9 CVSS flaw allows arbitrary file write attacks in IBM DataStage and how to secure your data today. CVE202616338 IBMDataStage CyberSecurity InfoSec ArbitraryFileWrite CloudSecurity Vulnerability https://t.co/k9OgrO33Vv https://t.co/lVFSA4z6H7...

9.9CVSS5.8AI score0.0043EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•15 views

PT-2026-90147

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carries an 8-bit sensor number in-sensor num. cros ec sensorhub ring handler validates the FIFO event count, the per-read count and the ring bound...

5.8AI score0.00196EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•9 views

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : PHP vulnerabilities (USN-8743-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8743-1 advisory. It was discovered that PHP incorrectly handled backslash escaping in the...

9.8CVSS6.3AI score0.00426EPSS
SaveExploits4References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•0 views

CVE-2026-90445: Improper Limitation of a Pathname to a Restricted Directory

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

7.1CVSS6AI score0.0052EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•0 views

CVE-2026-89653: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: reject exporttargets ranks = CEPHMAXMDS in mdsmap decode MDSMap exporttargets entries are monitor controlled. checknewmap uses each entry as a bit number in a fixed stack bitmap, so a rank outside the protocol namespace can...

9.8CVSS5.8AI score0.00738EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•0 views

CVE-2026-89656: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucket...

9.8CVSS5.9AI score0.00755EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•0 views

CVE-2026-89674: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget The XDR buffer size calculation in nfsd4ffencodelayoutget has multiple errors that can result in either an out-of-bounds write or leaking uninitialized kernel memory to t...

9.8CVSS5.9AI score0.00755EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•0 views

CVE-2026-89559: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in ndlabelvalidate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. ndlabelvalidate bounds it against the config area size, but sizeofnamespacelab...

7.8CVSS5.9AI score0.00176EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•0 views

CVE-2026-89495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlmmigraterequesthandler Patch series "ocfs2/dlm: bound peer-controlled lengths in the o2dlm". The o2dlm receive handlers trust u8 length and count fields from the wire without bounding them, so a node in ...

9.8CVSS5.9AI score0.00755EPSS
SaveExploits0References1
Rows per page
Query Builder