Lucene search
+L

289282 matches found

OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-74371

In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...

7.8CVSS5.8AI score0.00127EPSS
SaveExploits0References6
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-19730

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

4.2CVSS5.3AI score0.00107EPSS
SaveExploits0References6
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-74443

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without checking that header-size is large enough to contain both cmd-body an...

8.8CVSS5.4AI score0.00129EPSS
SaveExploits0References8
OSV
OSV
added yesterday5 views

UBUNTU-CVE-2026-72335

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cleanup hciaddadvmonitor publishes a new advmonitor in hdev-advmonitorsidr before the powered MSFT setup step. The MSFT offload add path can then fail either locally before the...

7.8CVSS5.7AI score0.00171EPSS
SaveExploits0References9
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-72130

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches the transfer length. In the SUCCESS1 and FAILURE1/default states, th...

9.8CVSS5.8AI score0.00728EPSS
SaveExploits0References7
OSV
OSV
added yesterday5 views

UBUNTU-CVE-2026-72135

In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential command/response interface, but their open handlers leave FMODEPREAD and FMODEPWRITE enabled. After a command leaves a response pendin...

7.8CVSS5.7AI score0.00164EPSS
SaveExploits0References11
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-72486

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...

5.5AI score0.0018EPSS
SaveExploits0References9
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-74391

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...

5.4AI score0.00168EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added yesterday3 views

CVE-2026-74556

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsitcp: Bound SCSI Response data segment to the connection buffer iscsitcphdrdissect receives the data segment of several PDU types into the fixed-size conn-data buffer, which is allocated for ISCSIDEFMAXRECVSEGLEN 819...

9.8CVSS5.4AI score0.00359EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added yesterday7 views

PT-2026-73244

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via apr dbd oracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...

9.1CVSS5.7AI score0.00362EPSS
SaveExploits0References4
OSV
OSV
added yesterday5 views

UBUNTU-CVE-2026-74270

In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE command ACCEPT and DONE are the two downcalls of the handshake genl family, both intended for use by the trusted handshake agent tlshd. ACCEPT already requires GENLADMINPERM; DONE has ...

7.8CVSS5.5AI score0.00128EPSS
SaveExploits0References8
OSV
OSV
added yesterday5 views

UBUNTU-CVE-2026-72014

In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recvdlessread receives a PDATAREPLY from a peer into the bio of an outstanding read request. The peer-supplied payload length reaches it as the signed int datasize, and...

9.8CVSS5.4AI score0.00674EPSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2 days ago3 views

CVE-2026-19963

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS7.1AI score0.01158EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2 days ago5 views

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS7.1AI score0.01158EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago14 views

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS0.01158EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago29 views

CVE-2026-19963

The CVE-2026-19963 affects Edimax EW-7478APC 1.04. The vulnerability is in the stainfo function of /goform/stainfo, where manipulation of the interface argument leads to a remote command injection. Public exploit availability and disclosure indicate potential active abuse; the vendor was contacte...

7.4CVSS7.2AI score0.01158EPSS
SaveExploits0References5
NVD
NVD
added 2 days ago6 views

CVE-2026-19960

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

7.4CVSS0.01158EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago13 views

CVE-2026-19962 Edimax EW-7478APC setWAN command injection

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

7.4CVSS0.01158EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-19962

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

7.4CVSS7.2AI score0.01158EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2 days ago24 views

CVE-2026-19962

Edimax EW-7478APC (firmware 1.04) contains a flaw in the setWAN function (/goform/setWAN). Remote attacker can inject commands by manipulating pppUserName, pptpUserName, or L2TPUserName, enabling command execution. The exploit has been published and is usable; vendor was contacted but did not res...

7.4CVSS7.1AI score0.01158EPSS
SaveExploits0References5
Rows per page
Query Builder