Lucene search
+L

213046 matches found

Cvelist
Cvelist
added 2026/08/20 9:32 p.m.34 views

CVE-2026-16936 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow...

8.8CVSS0.00116EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 9:32 p.m.16 views

CVE-2026-16936

A buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to execute arbitrary code (CVSS 8.8, scope changed). No patch version or exploit details are provided in the documents.

8.8CVSS6.3AI score0.00116EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/20 9:32 p.m.33 views

CVE-2026-16935 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use TOCTOU race condition...

7.8CVSS0.00084EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 9:32 p.m.16 views

CVE-2026-16935

A TOCTOU race condition in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to escalate privileges, yielding full confidentiality, integrity and availability impact (CVSS 7.8). No exploitation in the wild is reported; IBM support page referenced for patch guidance...

7.8CVSS5.3AI score0.00084EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/08/20 9:31 p.m.20 views

CVE-2026-16934

A local attacker with low privileges can exploit a heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 to gain elevated privileges, with high confidentiality, integrity, and availability impact. No specific exploit details or patch information are provided in the documents; monitor...

8.8CVSS5.7AI score0.00106EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/08/20 9:17 p.m.11 views

CVE-2026-76021

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.0049EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/20 9:17 p.m.10 views

DEBIAN-CVE-2026-76021

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.0049EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/20 9:17 p.m.11 views

CVE-2026-76022

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00512EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/20 9:17 p.m.9 views

CVE-2026-43798

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...

0.00145EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 8:51 p.m.38 views

CVE-2026-76022

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

0.00512EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 8:26 p.m.10 views

EUVD-2026-63587

NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1...

6.9CVSS5.2AI score0.00105EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/08/20 6:38 p.m.7 views

Laravel Backpack CRUD: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver

Summary HasUploadFields used via CrudTrait on Backpack-managed models and the withFiles uploader preserve the client-supplied file extension without validation. On installations using a public disk with php artisan storage:link, this allows an authenticated administrator to upload a file with a...

5.9AI score
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2026/08/20 6:27 p.m.7 views

mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS5.6AI score0.00129EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/20 6:16 p.m.6 views

DEBIAN-CVE-2026-73253

Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mgtlsverifycertsan and mgtlsverifycertcn functions in...

9.1CVSS5.4AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/20 6:15 p.m.8 views

CVE-2026-54481

A flaw was found in Gitea. The internal API HTTP client is configured to skip Transport Layer Security TLS certificate verification, which is an insecure practice. A remote attacker on the same network segment could exploit this vulnerability to perform man-in-the-middle MITM attacks. This allows...

7.5CVSS7.5AI score0.00294EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/20 5:53 p.m.17 views

CVE-2026-63384 Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader uses evtagdecodeint to decode an attacker-controlled uint32 payload length and returns it as a signed int. Values above INTMAX becom...

8.7CVSS5.5AI score
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/08/20 5:44 p.m.7 views

CVE-2026-74327

A flaw was found in the Linux kernel. A local attacker could trigger a null pointer dereference in the isvmareahugepages function. This occurs when findvmarea returns a NULL value, which is not properly handled before being dereferenced. Successful exploitation of this vulnerability could lead to...

5.5CVSS5.3AI score0.00173EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/20 5:41 p.m.27 views

CVE-2026-73253

Mongoose (embedded web server and network library) prior to version 7.22 is vulnerable to a TLS hostname verification bypass . The root cause is in mg_tls_verify_cert_san() and mg_tls_verify_cert_cn() (in src/tls_builtin.c), which call mg_match() — a function whose wildcard matching can cross DNS...

9.1CVSS5.1AI score0.00212EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/20 5:36 p.m.7 views

CVE-2026-73258 Mongoose: Multipart boundary/header scan logic error in mg_http_next_multipart

Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mghttpnextmultipart in src/http.c. The loops comparing sb and sb + 1, and sh2 and sh2 + 1, use an incorrect AND condition and stop...

6.5CVSS5.4AI score0.00267EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/20 5:17 p.m.9 views

CVE-2026-18282

Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...

8CVSS0.00299EPSS
SaveExploits0References2
Rows per page
Query Builder