Lucene search
+L

196429 matches found

RedHat Linux
RedHat Linux
added yesterday4 views

kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

A flaw was found in the Linux kernel's memory management subsystem. This issue occurs when the kernel's memory allocator attempts to zero out newly allocated memory, but an incorrect check prevents the full memory region from being cleared under specific configurations. This can lead to memory no...

8.1CVSS5.4AI score0.00417EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday3 views

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service DoS for the affected system...

7.5CVSS8.3AI score0.00473EPSS
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday7 views

Malicious code in morpho-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cb58dff63faa08e128ddd0d8d38b82c0711bb60d09d19755a8e8f398fa7d511d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.4AI score
SaveExploits0References1
NVD
NVD
added yesterday6 views

CVE-2026-72694

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS0.00127EPSS
SaveExploits0References2
NVD
NVD
added yesterday6 views

CVE-2026-15565

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

7.5CVSS0.00379EPSS
SaveExploits0References2
NVD
NVD
added yesterday6 views

CVE-2026-15562

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...

7.5CVSS0.00347EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2026-68151

A flaw was found in the Linux kernel's binfmtelffdpic component. This component, which handles FDPIC ELF binaries, does not correctly process multiple PTINTERP program headers. An unprivileged local attacker can exploit this by crafting a malicious binary with more than one PTINTERP header...

5.4AI score0.00175EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-73145

A flaw was found in svxlink's asynchronous HTTP server. No limits are enforced on incoming HTTP request-line or header sizes. A remote attacker can send excessively large requests to exhaust available memory, resulting in a denial of service. Mitigation Update svxlink to version 26.05.1 or later...

5.3AI score
SaveExploits0References4
Cvelist
Cvelist
added yesterday25 views

CVE-2026-71217 Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...

7.5CVSS0.00332EPSS
SaveExploits0References3
CVE
CVE
added yesterday19 views

CVE-2026-71217

This CVE affects iperf3. The flaw arises from improper validation of control-channel JSON, where oversized numeric parameters (e.g., parallel, len) can trigger excessive stream/thread creation and large buffer allocations, leading to resource exhaustion and a Denial of Service on the affected ipe...

7.5CVSS5.6AI score0.00332EPSS
SaveExploits0References3
EUVD
EUVD
added yesterday10 views

EUVD-2026-55989

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...

7.5CVSS5.3AI score0.00347EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-34191

A flaw was found in Apache Portable Runtime Utility. This vulnerability, known as SQL Injection, occurs in the aprdbdoracle provider. A remote attacker could exploit this by injecting malicious SQL commands, potentially leading to unauthorized access, modification, or deletion of data within the...

9.1CVSS5.2AI score0.00362EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-15567

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...

7.5CVSS5.3AI score0.00347EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added yesterday6 views

CVE-2026-15565

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

7.5CVSS5.4AI score0.00379EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-15562

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...

7.5CVSS5.3AI score0.00347EPSS
SaveExploits0References4
Cvelist
Cvelist
added yesterday21 views

CVE-2026-72694 Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS0.00127EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-72694

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References3
CVE
CVE
added yesterday32 views

CVE-2026-72694

CVE-2026-72694 describes a local privilege escalation in MRTG. When MRTG runs as root and then drops privileges, a low-privileged attacker can exploit a symlink-following vulnerability in the PID file path to trick the root process into changing ownership of an arbitrary existing file to the daem...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday8 views

EUVD-2026-55977

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-72694

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References3
Rows per page
Query Builder