Lucene search
+L

9245 matches found

OSV
OSV
added 2026/06/24 9:19 p.m.8 views

CVE-2026-54158 SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view database cell renderer genAVValueHTML interpolates cell content raw in four of its branches: text, url, phone, and mAsset. A cell value like or " breaks out of its surrounding tag and runs arbitrary...

9.9CVSS6.1AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/06/24 9:19 p.m.10 views

CVE-2026-54158 SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view database cell renderer genAVValueHTML interpolates cell content raw in four of its branches: text, url, phone, and mAsset. A cell value like or " breaks out of its surrounding tag and runs arbitrary...

9.9CVSS6AI score0.00289EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/24 9:19 p.m.25 views

CVE-2026-54158

SiYuan CVE-2026-54158: A stored XSS in the attribute-view cell renderer (genAVValueHTML) can break out of its tag with crafted values in text/url/phone/mAsset, potentially leading to RCE in Electron if nodeIntegration is enabled. The issue persists in AV files under the workspace and propagates a...

9.9CVSS6AI score0.00289EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/24 8:45 p.m.14 views

CVE-2026-52944

A flaw was found in the Linux kernel's ksmbd component. This vulnerability allows a client to bypass intended permission restrictions by using the FSCTLSETSPARSE operation. Specifically, a client on a read-only share can modify a file's sparse attribute, and clients on writable shares can modify...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/24 6:32 p.m.13 views

EUVD-2026-38898

In the Linux kernel, the following vulnerability has been resolved: i3c: master: renesas: Fix memory leak in renesasi3ci3cxfers The xfer structure allocated by renesasi3callocxfer was never freed in the renesasi3ci3cxfers function. Use the freekfree cleanup attribute to automatically free the...

5.7AI score0.00121EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/24 6:32 p.m.11 views

EUVD-2026-38895

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

5.8AI score0.00122EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/24 5:25 p.m.6 views

GHSA-6C99-87FR-6Q7R OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Summary Description A deserialization of untrusted data vulnerability CWE-502 exists in OpenAM's WebAuthn authentication module. Under certain conditions, this may allow an attacker to achieve arbitrary code execution in the context of the application server. This affects OpenAM Community Edition...

9.2CVSS6.5AI score
SaveExploits0References2
NVD
NVD
added 2026/06/24 5:17 p.m.23 views

CVE-2026-53125

In the Linux kernel, the following vulnerability has been resolved: md: fix arraystate=clear sysfs deadlock When "clear" is written to arraystate, mdattrstore breaks sysfs active protection so the array can delete itself from its own sysfs store method. However, mdattrstore currently drops the...

5.5CVSS0.00092EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/24 5:17 p.m.9 views

CVE-2026-53027

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

5.5CVSS0.00122EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/06/24 5:17 p.m.6 views

CVE-2026-53030

In the Linux kernel, the following vulnerability has been resolved: i3c: master: renesas: Fix memory leak in renesasi3ci3cxfers The xfer structure allocated by renesasi3callocxfer was never freed in the renesasi3ci3cxfers function. Use the freekfree cleanup attribute to automatically free the...

5.5CVSS5.4AI score0.00121EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/06/24 5:17 p.m.7 views

CVE-2026-53027

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

5.5CVSS5.5AI score0.00122EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/24 4:30 p.m.14 views

EUVD-2026-38993

In the Linux kernel, the following vulnerability has been resolved: md: fix arraystate=clear sysfs deadlock When "clear" is written to arraystate, mdattrstore breaks sysfs active protection so the array can delete itself from its own sysfs store method. However, mdattrstore currently drops the...

5.7AI score0.00092EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/24 4:30 p.m.35 views

CVE-2026-53125

CVE-2026-53125 affects the Linux kernel. When user-space writes “clear” to /sys/block/md*/md/array_state, md_attr_store() drops the mddev reference before sysfs_unbreak_active_protection(), which can cause the last kobject reference to be dropped while the mddev is still eligible for deletion. Th...

5.5CVSS5.7AI score0.00092EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/06/24 4:30 p.m.12 views

CVE-2026-53125 md: fix array_state=clear sysfs deadlock

In the Linux kernel, the following vulnerability has been resolved: md: fix arraystate=clear sysfs deadlock When "clear" is written to arraystate, mdattrstore breaks sysfs active protection so the array can delete itself from its own sysfs store method. However, mdattrstore currently drops the...

5.8AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/24 4:29 p.m.3 views

CVE-2026-53027

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

5.5CVSS5.2AI score0.00122EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/06/24 4:29 p.m.46 views

CVE-2026-53027 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

0.00122EPSS
SaveExploits0References5
CVE
CVE
added 2026/06/24 4:29 p.m.36 views

CVE-2026-53027

CVE-2026-53027 affects the Linux kernel's fs/ntfs3 component. A missing load of the vcn0 runs when a compressed/sparse attribute is frame-aligned can leave vcn0 in a different attribute segment than vcn, causing run_lookup_entry() to return SPARSE_LCN and triggering WARN_ON(1). The documented fix...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/06/24 4:29 p.m.9 views

CVE-2026-53027 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

5.8AI score
SaveExploits0References8
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.9 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: hp-bioscfg: Fixed warnings regarding empty attribute names in kobjects. The hp-bioscfg driver attempts to register kobjects with empty names when the HP BIOS returns attributes with empty name strings. This causes...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.10 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fixed a reference leak in thermalofcmlookup. In thermalofcmlookup, trnp is obtained via ofparsephandle, but it is never released. The freedevicenode cleanup attribute is used to automatically release the node and fix...

5.5CVSS5.7AI score0.00159EPSS
SaveExploits0References2
Rows per page
Query Builder