Lucene search
+L

4095 matches found

OSV
OSV
added 2026/07/19 2:56 p.m.5 views

CVE-2026-64006 netfilter: nf_tables: fix dst corruption in same register operation

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix dst corruption in same register operation For lshift and rshift, the shift operations are performed in a loop over 32-bit words. The loop calculates the shifted value and write it to dst, and then...

5.5AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63959

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpcimaxim: validate header NDO against RXBYTECNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven data objects but whose body carries fewer than that. Check for this, an...

5.3AI score0.002EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.6 views

CVE-2026-63959

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpcimaxim: validate header NDO against RXBYTECNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven data objects but whose body carries fewer than that. Check for this, an...

5.2AI score0.002EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.36 views

CVE-2026-63959 usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpcimaxim: validate header NDO against RXBYTECNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven data objects but whose body carries fewer than that. Check for this, an...

0.002EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/19 2:55 p.m.19 views

CVE-2026-63959

The CVE-2026-63959 vulnerability affects the Linux kernel USB Type-C support (tcpm/tcpci_maxim). A broken/malicious USB-C port could transmit a CRC-valid frame where the header advertises up to seven data objects but the body carries fewer, causing the driver to read from uninitialized stack memo...

5.3AI score0.002EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/19 2:55 p.m.29 views

CVE-2026-63957

The CVE-2026-63957 issue affects the Linux kernel USB serial safe_serial implementation. The vulnerability is a memory corruption risk when using a small endpoint, arising from an inadequately sized bulk-out buffer; in safe mode, a malicious device reporting a smaller size could lead to user-cont...

5.7AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63957 USB: serial: safe_serial: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

5.7AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63957

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

5.6AI score0.00211EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.29 views

CVE-2026-63957 USB: serial: safe_serial: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

0.00211EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63956

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a...

5.4AI score0.00211EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.30 views

CVE-2026-63956 USB: serial: cypress_m8: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a...

0.00211EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.7 views

CVE-2026-63915

In the Linux kernel, the following vulnerability has been resolved: nfc: hci: fix out-of-bounds read in HCP header parsing Both nfchcirecvfromllc and ncihcidatareceivedcb read packet-header from skb-data at function entry without first checking that the buffer holds at least one byte. A malicious...

8.8CVSS5.4AI score0.00345EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.16 views

CVE-2026-63908

In the Linux kernel, the following vulnerability has been resolved: Input: atmelmxtts - fix boundary check in mxtpreparecfgmem When a configuration file provides an object size that is larger than the driver's known mxtobjsizeobject, the driver intends to discard the extra bytes. The loop iterate...

5.4AI score0.00211EPSS
SaveExploits0
OSV
OSV
added 2026/07/19 2:55 p.m.5 views

CVE-2026-63899 USB: serial: mxuport: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size...

5.5AI score
SaveExploits0References11
Cvelist
Cvelist
added 2026/07/19 2:55 p.m.31 views

CVE-2026-63898 USB: serial: mct_u232: fix memory corruption with small endpoint

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

0.00211EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/19 2:55 p.m.8 views

CVE-2026-63898

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increas...

5.4AI score0.00211EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.10 views

PT-2026-61274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the USB serial safe mode when a malicious device reports a bulk-out buffer size smaller than eight bytes. This can lead to user-controlled slab corruption,...

5.5AI score0.00211EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/19 12:0 a.m.8 views

MiracleLinux 9 : golang-1.26.3-1.el9_8 (AXSA:2026-1288:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1288:06 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity...

7.5CVSS5.4AI score0.00813EPSS
SaveExploits0References12
EUVD
EUVD
added 2026/07/18 1:10 p.m.50 views

EUVD-2025-210491

SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instan...

7.1CVSS5.3AI score0.00266EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/18 1:10 p.m.41 views

CVE-2025-71391 SurrealDB before 2.2.2 Denial of Service via /sql endpoint

SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instan...

7.1CVSS0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder