Lucene search
+L

10408 matches found

osv_bit
osv_bit
•added 2026/04/18 8:37 a.m.•30 views

BIT-AIRFLOW-2026-25219 Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

6.5CVSS5.9AI score0.00552EPSS
SaveExploits0References5
osv_oesa
osv_oesa
•added 2026/04/17 11:10 a.m.•16 views

OESA-2026-1983 avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared...

5.5CVSS7.3AI score0.00161EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2026/04/17 11:10 a.m.•19 views

OESA-2026-1985 avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared...

5.5CVSS7.3AI score0.00161EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2026/04/17 11:10 a.m.•26 views

OESA-2026-1986 avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared...

5.5CVSS7.3AI score0.00161EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2026/04/17 11:10 a.m.•38 views

OESA-2026-1913 systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fixes: A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine...

6.7CVSS6.1AI score0.00155EPSS
SaveExploits0References2
osv_usn
osv_usn
•added 2026/04/17 10:28 a.m.•43 views

USN-8188-1 linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - Drivers core; - Bluetooth drivers; - DMA engine...

9.8CVSS6.5AI score0.00778EPSS
SaveExploits14References85
Ubuntu
Ubuntu
•added 2026/04/17 10:28 a.m.•53 views

USN-8188-1: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - Drivers core; - Bluetooth drivers; - DMA engine...

9.8CVSS6.5AI score0.00778EPSS
SaveExploits14
osv_usn
osv_usn
•added 2026/04/17 10:20 a.m.•45 views

USN-8187-1 linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth drivers; - DMA engine subsystem; - GPU...

9.8CVSS6.3AI score0.00778EPSS
SaveExploits3References81
Ubuntu
Ubuntu
•added 2026/04/17 10:20 a.m.•32 views

USN-8187-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth drivers; - DMA engine subsystem; - GPU...

9.8CVSS6.3AI score0.00778EPSS
SaveExploits3
osv_usn
osv_usn
•added 2026/04/17 10:11 a.m.•41 views

USN-8186-1 linux-intel-iot-realtime, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth drivers; - DMA engine subsystem; - GPU...

9.8CVSS6.3AI score0.00778EPSS
SaveExploits3References82
Ubuntu
Ubuntu
•added 2026/04/17 10:03 a.m.•32 views

USN-8180-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth drivers; - DMA engine subsystem; - GPU...

9.8CVSS6.3AI score0.00778EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•11 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007312 advisory. In the Linux kernel, the following vulnerability has been resolved: can: j1939: Fix UAF in j1939skmatchfilter during setsockoptSOJ1939FILTER Lock jsk-sk to prevent U...

7.8CVSS6.7AI score0.00233EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007243)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007243 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy I/O bus devices on unregister failure after sync'ing SRCU If allocating a new instan...

7.8CVSS6.8AI score0.00243EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•17 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007311 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Stop looking for coalesced MMIO zones if the bus is destroyed Abort the walk of coalesced MM...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007214)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007214 advisory. In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix a memory leak in error handling paths If 'vmbusestablishgpadl' fails, the...

5.5CVSS5.9AI score0.00235EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•13 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007310 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Fix UAF ncm object at re-bind after usb ep transport error When ncm function i...

7.8CVSS6.8AI score0.00235EPSS
SaveExploits0References3
Fedora
Fedora
•added 2026/04/16 11:42 p.m.•21 views

[SECURITY] Fedora 44 Update: kf6-kdbusaddons-6.25.0-1.fc44

KDBusAddons provides convenience classes on top of QtDBus, as well as an API to create KDED modules...

5.8AI score
SaveExploits0
osv_usn
osv_usn
•added 2026/04/16 2:56 p.m.•46 views

USN-8180-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth drivers; - DMA engine subsystem; - GPU...

9.8CVSS6.3AI score0.00778EPSS
SaveExploits3References81
EUVD
EUVD
•added 2026/04/16 9:31 a.m.•26 views

EUVD-2026-23213

Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service...

7.1CVSS5.8AI score0.00386EPSS
SaveExploits0References13
osv_ghsa
osv_ghsa
•added 2026/04/15 3:31 p.m.•24 views

GHSA-4G48-54Q2-FG7Q Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...

6.5CVSS5.9AI score0.00552EPSS
SaveExploits0References6
Rows per page
Query Builder