Lucene search
+L

4334 matches found

osv_ghsa
osv_ghsa
•added 2026/07/06 7:53 p.m.•25 views

GHSA-JCJR-RH8Q-7XQF ln: rejects non-UTF-8 source filenames in target-directory mode

In target-directory forms ln SOURCE... DIRECTORY, ln rejects source paths with non-UTF-8 filename bytes, while GNU accepts them. Breaks GNU compatibility for byte-oriented filenames on Unix filesystems. PoC: name=$printf 'bad\377'; mkdir dst; : "$name"; ln "$name" dst GNU: exit 0, creates...

3.3CVSS5.8AI score0.00121EPSS
SaveExploits1References4
PyPA
PyPA
•added 2026/07/06 8:03 a.m.•25 views

Segfault due to missing support for quantized types

ImpactThere is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1. ops which don't yet have support for quantized types added after migration to TF 2.x:pythonimport numpy as npimport tensorflow as...

5.5CVSS5.7AI score0.00325EPSS
SaveExploits1References12Affected Software1
osv_pysec
osv_pysec
•added 2026/07/06 8:03 a.m.•24 views

PYSEC-2026-950 Segfault due to missing support for quantized types

Impact There is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1. ops which don't yet have support for quantized types added after migration to TF 2.x: python import numpy as np import tensorflow as tf...

5.5CVSS5.7AI score0.00325EPSS
SaveExploits1References12
SUSE Linux
SUSE Linux
•added 2026/07/06 7:47 a.m.•21 views

Security update 5.1.4 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Security issue fixed: CVE-2022-21698: Fixed prometheus/clientgolang possible denial of service using InstrumentHandlerCounter bsc1248699 golang-github-lusitaniae-apacheexporter: Non customer facing changes...

7.5CVSS7AI score0.91969EPSS
SaveExploits3References40
osv_suse
osv_suse
•added 2026/07/06 7:47 a.m.•27 views

SUSE-SU-2026:2765-1 Security update 5.1.4 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/clientgolang possible denial of service using InstrumentHandlerCounter bsc1248699 golang-github-lusitaniae-apacheexporter: - Non customer facing changes...

7.5CVSS7AI score0.91969EPSS
SaveExploits3References17
SUSE Linux
SUSE Linux
•added 2026/07/06 7:46 a.m.•16 views

Security update 5.1.4 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Security issue fixed: CVE-2022-21698: Fixed prometheus/clientgolang possible denial of service using InstrumentHandlerCounter bsc1248699 golang-github-lusitaniae-apacheexporter: Non customer facing changes...

7.5CVSS7AI score0.91969EPSS
SaveExploits3References64
osv_suse
osv_suse
•added 2026/07/06 7:46 a.m.•22 views

SUSE-SU-2026:2764-1 Security update 5.1.4 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/clientgolang possible denial of service using InstrumentHandlerCounter bsc1248699 golang-github-lusitaniae-apacheexporter: - Non customer facing changes...

7.5CVSS7.2AI score0.91969EPSS
SaveExploits3References29
SUSE Linux
SUSE Linux
•added 2026/07/06 7:46 a.m.•22 views

Security update 5.1.4 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Security issue fixed: CVE-2022-21698: Fixed prometheus/clientgolang possible denial of service using InstrumentHandlerCounter bsc1248699 golang-github-lusitaniae-apacheexporter: Non customer facing changes...

7.5CVSS7AI score0.91969EPSS
SaveExploits3References64
osv_suse
osv_suse
•added 2026/07/06 7:46 a.m.•12 views

SUSE-SU-2026:2763-1 Security update 5.1.4 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Security issue fixed: - CVE-2022-21698: Fixed prometheus/clientgolang possible denial of service using InstrumentHandlerCounter bsc1248699 golang-github-lusitaniae-apacheexporter: - Non customer facing changes...

7.5CVSS7.2AI score0.91969EPSS
SaveExploits3References29
Tenable Nessus
Tenable Nessus
•added 2026/07/06 12:00 a.m.•25 views

RHEL 9 : compat-openssl11 (RHSA-2026:35869)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:35869 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...

8.8CVSS6.5AI score0.04002EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/02 2:21 a.m.•35 views

EUVD-2026-41233

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

8.3CVSS5.7AI score0.00371EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/01 12:00 a.m.•30 views

FreeBSD : FreeBSD -- Kernel stack disclosure in Linux compatibility layer (2355c475-74e3-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2355c475-74e3-11f1-958d-bc241121aa0a advisory. The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux...

5.5CVSS5.6AI score0.00151EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•25 views

Linux Distros Unpatched Vulnerability : CVE-2026-55964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required to have the keyCertSign key usage when a Key...

6.3CVSS5.9AI score0.0019EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2026/06/30 12:00 a.m.•29 views

FreeBSD Security Advisory - FreeBSD-SA-26:48.compat32

FreeBSD Security Advisory - The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct...

5.7AI score0.00151EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•33 views

Linux Distros Unpatched Vulnerability : CVE-2026-55961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSLPKCS7verify returning success for a degenerate certs-only PKCS7 object that contains no signer. Such an object has empty signerInfos, so the underlying...

8.2CVSS5.9AI score0.00146EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•26 views

Linux Distros Unpatched Vulnerability : CVE-2026-6091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor. An...

6.5CVSS5.9AI score0.00195EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2026/06/30 12:00 a.m.•23 views

FreeBSD-kernel -- Kernel stack disclosure in 32-bit compatibility support

Problem Description: The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. Impact: An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information...

5.5CVSS5.6AI score0.00151EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2026/06/30 12:00 a.m.•21 views

FreeBSD -- Kernel stack disclosure in Linux compatibility layer

Problem Description: The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux siginfot. It did not first zero the stack struct. Impact: An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information...

5.5CVSS5.6AI score0.00151EPSS
SaveExploits0
FreeBSD Advisory
FreeBSD Advisory
•added 2026/06/30 12:00 a.m.•19 views

FreeBSD-SA-26:47.linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:47.linux Security Advisory The FreeBSD Project Topic: Kernel stack disclosure in Linux compatibility layer Category: core Module: linux4 Announced: 2026-06-3...

5.5CVSS5.9AI score0.00151EPSS
SaveExploits0
FreeBSD Advisory
FreeBSD Advisory
•added 2026/06/30 12:00 a.m.•25 views

FreeBSD-SA-26:48.compat32

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:48.compat32 Security Advisory The FreeBSD Project Topic: Kernel stack disclosure in 32-bit compatibility support Category: core Module: kernel compat32...

5.5CVSS6AI score0.00151EPSS
SaveExploits0
Rows per page
Query Builder