Lucene search
+L

14437 matches found

Vulnrichment
Vulnrichment
added 2026/05/20 3:3 a.m.17 views

CVE-2026-24163

NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure...

7.5CVSS5.8AI score0.00594EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/20 12:0 a.m.12 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021545 advisory. In the Linux kernel, the following vulnerability has been resolved: platform/x86: mxm-wmi: fix memleak in mxmwmicallmxds|mx The ACPI buffer memory out.pointer return...

5.5CVSS6AI score0.00147EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/20 12:0 a.m.12 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021602)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021602 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bondsetupbyslave Commit 9eed321cde22 net: lapbether: only support...

5.5CVSS5.8AI score0.00242EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.20 views

PT-2026-42373

ydb-go-sdk's transactions are not committed using the options.WithCommit option on last call table.Transaction.Execute in transaction in github.com/ydb-platform/ydb-go-sdk...

5.8AI score
SaveExploits0References8
Packet Storm News
Packet Storm News
added 2026/05/20 12:0 a.m.14 views

FreeBSD Security Advisory - FreeBSD-SA-26:18.setcred

FreeBSD Security Advisory - The setcred2 system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is copied into a fixed-size kernel stack buffer without first validating its length. If the...

7.8CVSS6AI score0.00409EPSS
SaveExploits1
Packet Storm News
Packet Storm News
added 2026/05/20 12:0 a.m.15 views

FreeBSD Security Advisory - FreeBSD-SA-26:22.libcasper

FreeBSD Security Advisory - libcasper3 communicates with helper processes via UNIX domain sockets, and uses the select2 system call to wait for data to become available. However, it does not verify that its socket descriptor fits within select2's descriptor set size limit of FDSETSIZE 1024...

8.8CVSS5.8AI score0.00172EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2026/05/20 12:0 a.m.15 views

FreeBSD -- Stack buffer overflow via setcred(2)

Problem Description: The setcred2 system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is copied into a fixed-size kernel stack buffer without first validating its length. If the supplied li...

7.8CVSS6.2AI score0.00409EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.24 views

PT-2026-42090

Name of the Vulnerable Software and Affected Versions NVIDIA TRT-LLM affected versions not specified Description A flaw in RPC testing allows an attacker to trigger unsafe deserialization. This process, where data is converted back into an object, can be manipulated to execute arbitrary code, cau...

9.8CVSS6AI score0.00594EPSS
SaveExploits0References7
FreeBSD Advisory
FreeBSD Advisory
added 2026/05/20 12:0 a.m.8 views

FreeBSD-SA-26:18.setcred

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:18.setcred Security Advisory The FreeBSD Project Topic: Stack buffer overflow via setcred2 Category: core Module: setcred Announced: 2026-05-20 Credits: Ryan...

7.8CVSS6.4AI score0.00409EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/05/19 9:39 p.m.152 views

Exploit for Improper Handling of Length Parameter Inconsistency in Linux Linux_Kernel

🩸 CVE-2026-31635 – DirtyDecrypt Linux Kernel Local Priv...

7.5CVSS6AI score0.00817EPSS
SaveExploits4
RedHat Linux
RedHat Linux
added 2026/05/19 8:12 p.m.43 views

kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel

A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...

8.8CVSS6.2AI score0.93235EPSS
SaveExploits32References6
RedHat Linux
RedHat Linux
added 2026/05/19 6:15 p.m.19 views

google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...

9.1CVSS6.8AI score0.01557EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/05/19 1:31 p.m.26 views

kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit fails. syzbot reported a warning below 1 following a fault injection in nfsfsprocnetinit. 0 When nfsfsprocnetinit fails, /proc/net/rpc/nfs is not removed. Later, rpcprocexit...

5.5CVSS6.2AI score0.00187EPSS
SaveExploits0References5
OSV
OSV
added 2026/05/19 8:56 a.m.19 views

USN-8274-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - BTRFS file system; - Sun RPC protocol; - XFRM subsystem; CVE-2022-49033, CVE-2024-27388,...

9.8CVSS6.8AI score0.00959EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2026/05/19 1:2 a.m.138 views

Exploit for Write-what-where Condition in Linux Linux_Kernel

Dirty Frag - kernel Linux critical Vulnerability- CVE-2026-432...

8.8CVSS5.9AI score0.93235EPSS
SaveExploits34
OSV
OSV
added 2026/05/18 9:31 p.m.15 views

GHSA-67GQ-6Q8C-QQH6 Summarize contains a missing authorization vulnerability

Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2026/05/18 9:31 p.m.18 views

Summarize contains a missing authorization vulnerability

Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2026/05/18 8:16 p.m.24 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS0.00227EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/05/18 6:57 p.m.45 views

CVE-2026-45244 Summarize < 0.15.1 Unapproved Browser Automation Execution

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS0.00227EPSS
SaveExploits1References4
CVE
CVE
added 2026/05/18 6:57 p.m.70 views

CVE-2026-45244

CVE-2026-45244 affects the Summarize extension prior to version 0.15.1 . The vulnerability is a missing authorization flaw that lets attackers execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent via ...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder