Lucene search
+L

8561 matches found

CNNVD
CNNVD
added 2026/06/01 12:0 a.m.18 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of ArmCode Arm Whois contains a security vulnerability. This vulnerability stems from a buffer overflow, which may allow local attackers to execute arbitrary code by overriding structured exception...

8.6CVSS6.2AI score0.00162EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.25 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of ArmCode Arm Whois contains a security vulnerability. This vulnerability stems from a stack buffer overflow, which could allow remote attackers to execute arbitrary code by providing excessive input...

9.8CVSS6.2AI score0.00923EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/30 4:17 p.m.27 views

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS0.0014EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/30 2:55 p.m.16 views

CVE-2018-25423 Arm Whois 3.11 Denial of Service via Buffer Overflow

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/30 2:55 p.m.28 views

EUVD-2018-21945

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/30 2:55 p.m.44 views

CVE-2018-25423 Arm Whois 3.11 Denial of Service via Buffer Overflow

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS0.0014EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/30 2:55 p.m.31 views

CVE-2018-25423

Arm Whois 3.11 is affected by a local denial-of-service vulnerability due to a buffer overflow when processing an oversized input string (about 700 bytes) in the IP address or domain field. The flaw allows local attackers to crash the application. No remediation, patch version, or exploit details...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.13 views

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2026/05/30 12:0 a.m.18 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of Arm Whois contains a security vulnerability; this vulnerability stems from a buffer overflow, which could allow local attackers to cause the application to crash by providing excessively long input...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/30 12:0 a.m.21 views

PT-2026-45123

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/05/28 9:11 p.m.16 views

CVE-2026-46147

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architectures. During the vCPU initialization process, a pin leak can occur, leading to a permanent loss of references to host vCPU and SVE state pages. Additionally, a concurrent process might observe a partially...

5.5CVSS5.8AI score0.00126EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/28 11:40 a.m.11 views

SUSE-SU-2026:21860-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 bsc1243603. - CVE-2024-14027: xattr: switch to CLASSfd bsc1259420. - CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when...

9.8CVSS6.6AI score0.01501EPSS
SaveExploits19References455
OSV
OSV
added 2026/05/28 10:16 a.m.27 views

UBUNTU-CVE-2026-46147

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in pkvminitvcpu Two bugs exist in the vCPU initialisation path: 1. If a check fails after hyppinsharedmem succeeds, the cleanup path jumps to 'unlock' without calling unpinhostvcp...

5.5CVSS5.7AI score0.00126EPSS
SaveExploits0References12
Cvelist
Cvelist
added 2026/05/28 9:36 a.m.39 views

CVE-2026-46147 KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in pkvminitvcpu Two bugs exist in the vCPU initialisation path: 1. If a check fails after hyppinsharedmem succeeds, the cleanup path jumps to 'unlock' without calling unpinhostvcp...

0.00126EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/05/28 9:36 a.m.13 views

CVE-2026-46147

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in pkvminitvcpu Two bugs exist in the vCPU initialisation path: 1. If a check fails after hyppinsharedmem succeeds, the cleanup path jumps to 'unlock' without calling unpinhostvcp...

5.5CVSS5.7AI score0.00126EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/05/28 3:53 a.m.16 views

SUSE CVE-2026-46055

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun due to missing termination When booting Ubuntu 26.04 with Linux 7.0-rc4 on an ARM64 Qualcomm Snapdragon X1 we see a string buffer overrun: BUG: KASAN: slab-out-of-bounds in aadfamatch...

5.5CVSS5.9AI score0.0015EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.24 views

PT-2026-44270

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Two issues exist in the vCPU initialization path of the KVM arm64 component. First, a failure occurring after hyp pin shared mem succeeds can lead to a pin leak, where pin references on...

5.5CVSS5.8AI score0.00126EPSS
SaveExploits0
EUVD
EUVD
added 2026/05/27 3:33 p.m.15 views

EUVD-2026-32342

In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in archsetshadowstackstatus allocgcs returns an error-encoded pointer on failure, which comes from dommap, not NULL. The current NULL check fails to detect errors, which could lead to using an invali...

5.8AI score0.00153EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/27 2:17 p.m.17 views

CVE-2026-46055

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun due to missing termination When booting Ubuntu 26.04 with Linux 7.0-rc4 on an ARM64 Qualcomm Snapdragon X1 we see a string buffer overrun: BUG: KASAN: slab-out-of-bounds in aadfamatch...

7.1CVSS0.0015EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/27 2:17 p.m.12 views

UBUNTU-CVE-2026-46055

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun due to missing termination When booting Ubuntu 26.04 with Linux 7.0-rc4 on an ARM64 Qualcomm Snapdragon X1 we see a string buffer overrun: BUG: KASAN: slab-out-of-bounds in aadfamatch...

7.1CVSS5.8AI score0.0015EPSS
SaveExploits0References3
Rows per page
Query Builder