Lucene search
+L

1036964 matches found

EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-48841

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELDGET. Create new macros for bit manipulation in combination with manual bit manipulation being replaced with FIELDGET. The...

5.8AI score
SaveExploits0References9
EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-48789

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth OnAuth has two bugs in the shared-key authentication path. When the Privacy bit is set, rtwwepdecrypt is called without verifying that the frame is long enough t...

5.8AI score
SaveExploits0References9
EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-48800

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...

5.8AI score
SaveExploits0References9
EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-48910

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

6AI score
SaveExploits0References4
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-48875

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vepdequeue vepallocrequest wasn't initializing vrequest-udc, so cancellations on the FunctionFS AIO path were arriving in vepdequeue without a valid UDC reference. Since vrequest-udc is never actual...

5.8AI score
SaveExploits0References9
EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-49005

In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeofhdr instead of sizeofhdr in veventq read The bound-check in iommufdveventqfopsread for the normal vEVENT path uses sizeofhdr where the surrounding code uses sizeofhdr: if !veventforlosteventsheadercur &&...

5.8AI score
SaveExploits0References4
Nuclei
Nuclei
added 11 hours ago10 views

MajorDoMo - Unauthenticated RCE

MajorDoMo contains a remote code execution caused by an include order bug and lack of exit after redirect in admin panel's PHP console, letting unauthenticated attackers execute arbitrary PHP code via crafted GET requests. id: CVE-2026-27174 info: name: MajorDoMo - Unauthenticated RCE author:...

9.8CVSS6.9AI score0.06996EPSS
SaveExploits4References4
Nuclei
Nuclei
added 11 hours ago200 views

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

9.8CVSS7.8AI score0.74519EPSS
SaveExploits0References5
Nuclei
Nuclei
added 11 hours ago57 views

NexusDB <4.50.23 - Local File Inclusion

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal and local file inclusion. id: CVE-2020-24571 info: name: NexusDB 4.50.23 - Local File Inclusion author: pikpikcu severity: high description: NexusQA NexusDB before 4.50.23 allows the reading of files via ../...

7.5CVSS7.2AI score0.17959EPSS
SaveExploits1References5
Nuclei
Nuclei
added 11 hours ago125 views

NeDi 1.9C - Cross-Site Scripting

NeDi 1.9C is vulnerable to cross-site scripting because of an incorrect implementation of sanitize in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a...

6.1CVSS6.2AI score0.03442EPSS
SaveExploits0References4
EUVD
EUVD
added yesterday14 views

EUVD-2026-42650

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal...

7.7CVSS7.1AI score0.00362EPSS
SaveExploits1References5
EUVD
EUVD
added yesterday13 views

EUVD-2026-42629

Open WebUI: Cross-user model-list exposure via static cache key in getallmodels aiocache key= vs keybuilder= misuse...

5CVSS5.8AI score0.00296EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added yesterday4 views

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

6.6AI score0.00246EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday5 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

9.8CVSS6.8AI score0.0038EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday4 views

EUVD-2026-48632

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

5.7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added yesterday8 views

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

When a blob can not be opened a memory leak will occur when encoding a JNG file...

5.8AI score
SaveExploits0References3Affected Software17
Vulnrichment
Vulnrichment
added yesterday4 views

CVE-2026-15243 Improper Validation of Certificate in CAS Client

Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the client is calling matches the configured allowlist or regex. An attacker with a MITM position DNS poisoning, rogue Wi-Fi, malicious proxy, etc. can provide any CA-signed certificate for a hostname that...

7.4CVSS5.9AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added yesterday6 views

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.8CVSS7AI score0.00354EPSS
SaveExploits0References4
CVE
CVE
added yesterday10 views

CVE-2026-56391

The CVE-2026-56391 issue affects GNU coreutils, specifically the uniq utility, where out-of-bounds reads can occur when processing multibyte input with -w/--check-chars. The root cause is in find_field(), which fails to advance the input pointer correctly, inflating the computed length and causin...

4.6CVSS5.9AI score0.00135EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added yesterday8 views

Chromium: CVE-2026-16417 Uninitialized Use in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

3.1CVSS5.2AI score0.00176EPSS
SaveExploits0
Rows per page
Query Builder