Lucene search
+L

35441 matches found

OSV
OSV
added 2026/05/13 8:16 p.m.8 views

UBUNTU-CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/13 7:28 p.m.11 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/05/13 7:28 p.m.15 views

CVE-2026-28379

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/13 7:28 p.m.87 views

CVE-2026-28379 Viewer-triggered race condition in Grafana Live leads to complete server crash

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/13 7:28 p.m.9 views

CVE-2026-28379 Viewer-triggered race condition in Grafana Live leads to complete server crash

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/13 7:28 p.m.38 views

CVE-2026-28379

Grafana Live contains a race condition that can be triggered by authenticated users with the Viewer role. Concurrent requests lead to a fatal map access error, causing complete Grafana server unavailability and requiring a restart. Public details are limited to the description; no explicit exploi...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/05/13 7:28 p.m.4 views

CVE-2026-28379 Viewer-triggered race condition in Grafana Live leads to complete server crash

A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error. This results in complete service unavailability requiring restart of the Grafana server...

6.5CVSS6.6AI score0.00262EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/13 7:16 p.m.8 views

CVE-2026-0235

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies...

5.8CVSS0.0011EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/13 6:14 p.m.24 views

CVE-2026-0235

CVE-2026-0235 is a race-condition vulnerability in Palo Alto Networks Prisma Browser. The description states that a locally authenticated non-admin user can bypass certain access and data control policies due to this race condition. No specific vulnerable components, versions, or root-cause detai...

5.8CVSS5.8AI score0.0011EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/13 6:14 p.m.15 views

CVE-2026-0235

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies...

5.8AI score0.0011EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/13 6:14 p.m.7 views

CVE-2026-0235 Prisma Browser: Access and Data Rule Bypass

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies...

5.8CVSS5.8AI score0.0011EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/13 6:14 p.m.41 views

CVE-2026-0235 Prisma Browser: Access and Data Rule Bypass

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies...

5.8CVSS0.0011EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/05/13 3:23 p.m.10 views

SUSE CVE-2022-1247

An issue found in linux-kernel that leads to a race condition in roseconnect. The rose driver uses roseneigh-use to represent how many objects are using the roseneigh. When a user wants to delete a roseroute via roseioctl, the rose driver calls rosedelnode and removes neighbours only if their...

7CVSS7AI score0.00258EPSS
SaveExploits1References5
CVE
CVE
added 2026/05/13 3:8 p.m.32 views

CVE-2026-43484

CVE-2026-43484 – Linux kernel MMC core : The vulnerability stems from concurrent updates to bitfield flags (claimed and retune_now) sharing a word, enabling write–overwrite of other bits in async contexts and triggering spurious WARN_ON(!host->claimed). The fix moves claimed, can_retune, retun...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2026/05/13 3:8 p.m.79 views

CVE-2026-43484 mmc: core: Avoid bitfield RMW for claim/retune flags

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flags Move claimed and retune control flags out of the bitfield word to avoid unrelated RMW side effects in asynchronous contexts. The host-claimed bit shared a word with retune flag...

0.00114EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/05/13 2:53 p.m.12 views

SUSE CVE-2024-37082

When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP requests that bypass mTLS authentication to Cloud Foundry applications. You are affected if you have route-services enabled in routing-release and have...

9.1CVSS5.8AI score0.00545EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/13 9:26 a.m.8 views

CVE-2026-4798

The Avada Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘productorder’ parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

7.5CVSS5.9AI score0.00511EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/13 8:21 a.m.12 views

CVE-2026-5958

A Time-of-Check Time-of-Use TOCTOU race condition was found in GNU sed. When the -i in-place and --follow-symlinks options are used together, sed resolves the symlink but reopens the path for writing. An attacker with write access to the directory containing the symlink can swap it between the...

6.3CVSS5.8AI score0.00142EPSS
SaveExploits0References3
Mageia
Mageia
added 2026/05/13 7:0 a.m.12 views

Updated sed packages fix security vulnerability

Race Condition in GNU Sed. CVE-2026-5958...

2.1CVSS5.8AI score0.00142EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/13 7:0 a.m.21 views

MGASA-2026-0128 Updated sed packages fix security vulnerability

Race Condition in GNU Sed. CVE-2026-5958...

2.1CVSS5.8AI score0.00142EPSS
SaveExploits0References3
Rows per page
Query Builder