Lucene search
+L

9236 matches found

UbuntuCve
UbuntuCve
added 2026/06/24 5:17 p.m.6 views

CVE-2026-53030

In the Linux kernel, the following vulnerability has been resolved: i3c: master: renesas: Fix memory leak in renesasi3ci3cxfers The xfer structure allocated by renesasi3callocxfer was never freed in the renesasi3ci3cxfers function. Use the freekfree cleanup attribute to automatically free the...

5.5CVSS5.4AI score0.00121EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/06/24 5:17 p.m.7 views

CVE-2026-53027

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

5.5CVSS5.5AI score0.00122EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/24 4:30 p.m.14 views

EUVD-2026-38993

In the Linux kernel, the following vulnerability has been resolved: md: fix arraystate=clear sysfs deadlock When "clear" is written to arraystate, mdattrstore breaks sysfs active protection so the array can delete itself from its own sysfs store method. However, mdattrstore currently drops the...

5.7AI score0.00092EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/24 4:30 p.m.12 views

CVE-2026-53125 md: fix array_state=clear sysfs deadlock

In the Linux kernel, the following vulnerability has been resolved: md: fix arraystate=clear sysfs deadlock When "clear" is written to arraystate, mdattrstore breaks sysfs active protection so the array can delete itself from its own sysfs store method. However, mdattrstore currently drops the...

5.8AI score
SaveExploits0References6
CVE
CVE
added 2026/06/24 4:30 p.m.35 views

CVE-2026-53125

CVE-2026-53125 affects the Linux kernel. When user-space writes “clear” to /sys/block/md*/md/array_state, md_attr_store() drops the mddev reference before sysfs_unbreak_active_protection(), which can cause the last kobject reference to be dropped while the mddev is still eligible for deletion. Th...

5.5CVSS5.7AI score0.00092EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/24 4:29 p.m.3 views

CVE-2026-53027

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

5.5CVSS5.2AI score0.00122EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/06/24 4:29 p.m.46 views

CVE-2026-53027 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

0.00122EPSS
SaveExploits0References5
CVE
CVE
added 2026/06/24 4:29 p.m.36 views

CVE-2026-53027

CVE-2026-53027 affects the Linux kernel's fs/ntfs3 component. A missing load of the vcn0 runs when a compressed/sparse attribute is frame-aligned can leave vcn0 in a different attribute segment than vcn, causing run_lookup_entry() to return SPARSE_LCN and triggering WARN_ON(1). The documented fix...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/06/24 4:29 p.m.9 views

CVE-2026-53027 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked When a compressed or sparse attribute has its clusters frame-aligned, vcn is rounded down to the frame start using cmask, which can result in vcn != vcn0. In this...

5.8AI score
SaveExploits0References8
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.9 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: hp-bioscfg: Fixed warnings regarding empty attribute names in kobjects. The hp-bioscfg driver attempts to register kobjects with empty names when the HP BIOS returns attributes with empty name strings. This causes...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.10 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fixed a reference leak in thermalofcmlookup. In thermalofcmlookup, trnp is obtained via ofparsephandle, but it is never released. The freedevicenode cleanup attribute is used to automatically release the node and fix...

5.5CVSS5.7AI score0.00159EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.10 views

Astra Linux – Vulnerability in hdf5

The HDF5 library from version 1.14.3 may use an uninitialized value in the H5Aattrreleasetable field within the H5Aint.c file...

9.8CVSS7.2AI score0.00951EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/24 1:16 p.m.15 views

CVE-2026-56761

hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using malformed attribute names. Attackers can craft specially crafted attribute keys containing characters like quotes or angle brackets to break html tag...

5.3CVSS0.00174EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/24 1:16 p.m.11 views

CVE-2026-12242

The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 5.17.7 via the 'banner' attribute of the adrotate shortcode. This is due to insufficient input validation and sanitization of the banner shortcode attribute before...

8.8CVSS0.00469EPSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2026/06/24 12:33 p.m.8 views

CVE-2026-12242

The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 5.17.7 via the 'banner' attribute of the adrotate shortcode. This is due to insufficient input validation and sanitization of the banner shortcode attribute before...

8.8CVSS6.2AI score0.00469EPSS
SaveExploits0References12
ATTACKERKB
ATTACKERKB
added 2026/06/24 11:53 a.m.7 views

CVE-2026-56761

hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using malformed attribute names. Attackers can craft specially crafted attribute keys containing characters like quotes or angle brackets to break html tag...

5.3CVSS6AI score0.00174EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/24 11:53 a.m.30 views

CVE-2026-56761

CVE-2026-56761 affects the hono framework prior to 4.12.14, where server-side rendering of JSX allows HTML injection through malformed attribute names. Attackers can craft attribute keys containing characters like quotes or angle brackets, breaking tag boundaries and injecting unintended attribut...

5.3CVSS6AI score0.00174EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/06/24 11:53 a.m.12 views

EUVD-2026-38757

hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using malformed attribute names. Attackers can craft specially crafted attribute keys containing characters like quotes or angle brackets to break html tag...

5.3CVSS6AI score0.00174EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/24 11:53 a.m.7 views

CVE-2026-56761 hono - HTML Injection via Improper JSX Attribute Name Handling in SSR

hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using malformed attribute names. Attackers can craft specially crafted attribute keys containing characters like quotes or angle brackets to break html tag...

5.3CVSS6.1AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/24 10:17 a.m.5 views

CVE-2026-52944

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTLSETSPARSE FSCTLSETSPARSE in fsctlsetsparse modifies the file's sparse attribute and saves it through xattr without any permission checks. This exposes two...

5.5CVSS5.4AI score0.00121EPSS
SaveExploits0References5
Rows per page
Query Builder