Lucene search
+L

1904 matches found

OSV
OSV
added 2026/08/21 9:31 p.m.4 views

CVE-2026-53530 ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint ratexparser::parse&str panics on the 9-byte input \verbéxé i.e. \verb followed by the non-ASCII delimiter é. When handling a \verb command, the parser slices the verbatim...

8.7CVSS5.6AI score
SaveExploits0References3
CVE
CVE
added 2026/08/21 9:31 p.m.28 views

CVE-2026-53530

RaTeX (a KaTeX-compatible math rendering engine in Rust) is vulnerable to a denial of service in ratex-parser prior to version 0.1.11 . The parser slices the \verb argument using byte indices (arg[1..arg.len() - 1] at parser.rs:910); when the delimiter is a multibyte UTF-8 character (e.g. é), the...

8.7CVSS5.4AI score0.00253EPSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2026/08/21 6:01 a.m.7 views

cups-filters security update

An update is available for cups-filters. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cups-filters package contains back ends, filters, and other software...

7.5CVSS5.6AI score0.00361EPSS
SaveExploits0
AlmaLinux
AlmaLinux
added 2026/08/20 12:00 a.m.7 views

Moderate: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PN...

7.5CVSS5.4AI score0.00361EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-62377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the...

4.3CVSS5.4AI score0.00408EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/19 5:29 p.m.8 views

CVE-2026-18140

A flaw was found in aws-smithy-json. This vulnerability allows a remote, unauthenticated attacker to cause a denial of service DoS in smithy-rs generated servers. By sending a small HTTP request containing deeply nested JSON, the attacker can trigger uncontrolled recursion in the aws-smithy-json...

8.7CVSS5.4AI score0.00436EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/18 10:17 p.m.6 views

CVE-2026-62289

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an image dimension to zero and crash or corrupt tiling results when heifimagehandlegetimagetilinghandle, 1, &tiling is called...

4.3CVSS0.00394EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/18 9:19 p.m.9 views

EUVD-2026-62188

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an image dimension to zero and crash or corrupt tiling results when heifimagehandlegetimagetilinghandle, 1, &tiling is called...

4.3CVSS5.2AI score0.00394EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/18 7:27 p.m.18 views

CVE-2026-52829 ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated IPv4 peer can deterministically terminate a synced Zebra node using the default Linux dual-stack listener configuration. The handshake path canonicalized an IPv4-mapped IPv6 PeerSocketAddr such as ::ffff:127.0.0.1 ...

7.5CVSS0.00432EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/18 7:25 p.m.18 views

CVE-2026-52731 ZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an attacker authenticated to an enabled Zebra RPC endpoint can terminate zebrad by supplying a getblocktemplate LongPollId containing multi-byte UTF-8 characters. In zebra-rpc/src/methods/types/longpoll.rs, LongPollId::fromstr...

6.5CVSS0.00376EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/18 7:24 p.m.4 views

CVE-2026-52738 ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a consensus-valid block containing a long chain of transparent self-spends to one address can permanently halt Zebra nodes. In zebra-state/src/service/finalizedstate/zebradb/transparent.rs, the finalized-state writer originally appli...

6.9CVSS5.5AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/18 7:24 p.m.18 views

CVE-2026-52738 ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a consensus-valid block containing a long chain of transparent self-spends to one address can permanently halt Zebra nodes. In zebra-state/src/service/finalizedstate/zebradb/transparent.rs, the finalized-state writer originally appli...

6.9CVSS0.00371EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.11 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101961)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101961 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning o...

7.5CVSS5.7AI score0.00426EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-72082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: elx: efct: Fix refcount leak in efcthwioabort When efcthwreqtagalloc fails in efcthwioabort, the error path returns -ENOSPC without releasing the referenc...

5.5AI score0.00215EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-72163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix NULL htransaction deref in ocfs2assuretranscredits BUG A direct write over unwritten extents can panic the kernel in ocfs2assuretranscredits when the...

5.5AI score0.0021EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/17 9:39 p.m.6 views

CVE-2026-72082

A flaw was found in the Linux kernel's SCSI Small Computer System Interface elx: efct module. This vulnerability occurs when an I/O abort operation fails to properly release a resource reference. This can lead to a permanent resource leak, which prevents subsequent attempts to abort the same I/O...

5.5CVSS5.4AI score0.00215EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/17 5:52 a.m.6 views

BIT-NODE-MIN-2026-58042

A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

5.9CVSS6.2AI score0.0046EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/17 5:52 a.m.5 views

BIT-NODE-2026-58042

A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

5.9CVSS6.2AI score0.0046EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/15 1:26 p.m.10 views

EUVD-2026-59759

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

7.5CVSS5.4AI score0.0034EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/15 1:26 p.m.12 views

CVE-2026-18549

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

5.3AI score0.0034EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder