Lucene search
+L

61273 matches found

Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•13 views

PT-2026-103356

🚨 CVE-2026-47497 NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor GSP tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalati...

7.8CVSS5.8AI score0.00101EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•14 views

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird (ALMALINUX9.2:CLSA-2026:1782404883)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782404883 advisory. - Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37...

5.4CVSS6AI score0.00164EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•14 views

CVE-2026-91860: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution vulnerability exists in the deep merge helpers of Vaadin Charts and Vaadin Component Base. Merging an object the application does not control into a chart configuration or into a component's i18n property writes onto Object.prototype, making the injected properties visible t...

6.3CVSS5.9AI score0.00467EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•16 views

PT-2026-103274

A prototype pollution vulnerability exists in the deep merge helpers of Vaadin Charts and Vaadin Component Base. Merging an object the application does not control into a chart configuration or into a component's i18n property writes onto Object.prototype, making the injected properties visible t...

6.3CVSS5.9AI score0.00467EPSS
SaveExploits0References8
Redos
Redos
•added 2026/09/30 12:00 a.m.•23 views

ROS-20260930-73-0016

The vulnerability of the dmaengine kernel component of the operating system is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00212EPSS
SaveExploits0
Redos
Redos
•added 2026/09/30 12:00 a.m.•18 views

ROS-20260930-73-0023

The vulnerability of the ASoC kernel component of the operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

5.5CVSS6.6AI score0.00204EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•13 views

Rocky Linux 9.6 [TuxCare] Security Update: java-21-openjdk / java-21-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778051357)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778051357 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE...

8.3CVSS5.9AI score0.01095EPSS
SaveExploits2References11
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-100780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4,...

8.8CVSS6.1AI score0.00319EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•10 views

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782811369)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782811369 advisory. - Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, a...

8.8CVSS7.3AI score0.00322EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-100786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,...

9.6CVSS6.5AI score0.00319EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-100790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...

8.8CVSS6.1AI score0.00319EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-100788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird...

9.8CVSS6AI score0.00415EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-100783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4,...

4.3CVSS6.1AI score0.00347EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•12 views

CentOS Linux 8.4 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790610952)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790610952 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired...

8.8CVSS6.6AI score0.2361EPSS
SaveExploits3References9
SUSE CVE
SUSE CVE
•added 2026/09/29 11:42 p.m.•21 views

SUSE CVE-2026-100758

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

9.6CVSS6.2AI score0.00304EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/09/29 11:42 p.m.•20 views

SUSE CVE-2026-100772

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

8.8CVSS6.1AI score0.00312EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/09/29 11:42 p.m.•18 views

SUSE CVE-2026-100778

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

9.6CVSS6.6AI score0.00319EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/09/29 11:42 p.m.•18 views

SUSE CVE-2026-100779

Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

8.8CVSS6.1AI score0.00326EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/09/29 11:41 p.m.•18 views

SUSE CVE-2026-100811

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

9.6CVSS6.6AI score0.00265EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/09/29 11:41 p.m.•19 views

SUSE CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

8.8CVSS5.9AI score0.00231EPSS
SaveExploits0References3
Rows per page
Query Builder