Lucene search
+L

14433 matches found

FreeBSD
FreeBSD
added 2026/05/20 12:0 a.m.15 views

FreeBSD -- Stack buffer overflow via setcred(2)

Problem Description: The setcred2 system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is copied into a fixed-size kernel stack buffer without first validating its length. If the supplied li...

7.8CVSS6.2AI score0.00409EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/05/19 9:39 p.m.152 views

Exploit for Improper Handling of Length Parameter Inconsistency in Linux Linux_Kernel

🩸 CVE-2026-31635 – DirtyDecrypt Linux Kernel Local Priv...

7.5CVSS6AI score0.00817EPSS
SaveExploits4
RedHat Linux
RedHat Linux
added 2026/05/19 8:12 p.m.43 views

kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel

A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...

8.8CVSS6.2AI score0.93235EPSS
SaveExploits32References6
RedHat Linux
RedHat Linux
added 2026/05/19 6:15 p.m.18 views

google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...

9.1CVSS6.8AI score0.01557EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/05/19 1:31 p.m.26 views

kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit fails. syzbot reported a warning below 1 following a fault injection in nfsfsprocnetinit. 0 When nfsfsprocnetinit fails, /proc/net/rpc/nfs is not removed. Later, rpcprocexit...

5.5CVSS6.2AI score0.00187EPSS
SaveExploits0References5
OSV
OSV
added 2026/05/19 8:56 a.m.19 views

USN-8274-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - BTRFS file system; - Sun RPC protocol; - XFRM subsystem; CVE-2022-49033, CVE-2024-27388,...

9.8CVSS6.8AI score0.00959EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2026/05/19 1:2 a.m.138 views

Exploit for Write-what-where Condition in Linux Linux_Kernel

Dirty Frag - kernel Linux critical Vulnerability- CVE-2026-432...

8.8CVSS5.9AI score0.93235EPSS
SaveExploits34
OSV
OSV
added 2026/05/18 9:31 p.m.15 views

GHSA-67GQ-6Q8C-QQH6 Summarize contains a missing authorization vulnerability

Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2026/05/18 9:31 p.m.18 views

Summarize contains a missing authorization vulnerability

Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2026/05/18 8:16 p.m.24 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS0.00227EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/05/18 6:57 p.m.45 views

CVE-2026-45244 Summarize < 0.15.1 Unapproved Browser Automation Execution

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS0.00227EPSS
SaveExploits1References4
CVE
CVE
added 2026/05/18 6:57 p.m.70 views

CVE-2026-45244

CVE-2026-45244 affects the Summarize extension prior to version 0.15.1 . The vulnerability is a missing authorization flaw that lets attackers execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent via ...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/18 6:57 p.m.11 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/05/18 6:57 p.m.36 views

EUVD-2026-30796

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References4
OSV
OSV
added 2026/05/18 12:8 a.m.14 views

OSV-2026-764 Heap-use-after-free in JS_DefineProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513811188 Crash type: Heap-use-after-free READ 8 Crash state: JSDefineProperty buildbacktrace JSCallInternal...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/18 12:0 a.m.32 views

PT-2026-41723

Name of the Vulnerable Software and Affected Versions Summarize versions prior to 0.15.1 Description A missing authorization issue allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. By using malicious page or...

5.4CVSS5.9AI score0.00227EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2026/05/17 11:15 p.m.11 views

CVE-2026-8770 continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal

A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations/lsTool.ts of the component JSON-RPC Server. Such manipulation of the argument dirPath leads to path traversal. An attack has to be approached locally. The...

4.8CVSS5.4AI score0.00258EPSS
SaveExploits1References4
Debian
Debian
added 2026/05/17 3:53 p.m.34 views

[BSA-134] Security Update for jq

ChangZhuo Chen uploaded new packages for jq which fixed the following security problems: CVE-2026-32316 jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvpstringappend and jvpstringcopyreplacebad functions, where concatenating strings...

8.2CVSS6.2AI score0.00559EPSS
SaveExploits12
OSV
OSV
added 2026/05/17 1:17 p.m.9 views

SUSE-SU-2026:1899-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. - CVE-2026-46300: net: skbuff: propagate shared-frag marker...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits51References11
Redos
Redos
added 2026/05/16 12:0 a.m.16 views

ROS-20260516-73-0002

A vulnerability in the RxRPC module of the Linux operating system kernel is related to writing outside buffer boundaries. Exploitation of the vulnerability allows an attacker to cause a denial of service...

7.8CVSS6.2AI score0.92855EPSS
SaveExploits21
Rows per page
Query Builder