Lucene search
+L

9462 matches found

OSV
OSV
added 2026/07/29 12:0 a.m.8 views

ALSA-2026:47756 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenS...

9.4CVSS5.6AI score0.00396EPSS
SaveExploits2References12
OSV
OSV
added 2026/07/29 12:0 a.m.4 views

UBUNTU-CVE-2026-62428

When grant-copy operations are processed, the respective grant may or...

7.8CVSS5.8AI score0.001EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/07/28 6:0 p.m.4 views

CVE-2026-62428

A flaw was found in Xen. When processing grant-copy operations, a type confusion vulnerability can occur if the grant is already in use by another operation. This can lead to permission checks being performed on an incorrect memory page, potentially allowing an attacker to bypass security...

7.8CVSS5.8AI score0.001EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/28 5:8 p.m.7 views

SUSE CVE-2026-64543

In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in tipcdiscrcv bearerdisable frees b-disc with tipcdiscdelete's plain kfree, but tipcdiscrcv still dereferences b-disc in RX softirq under rcureadlock tipcudprecv - tipcrcv - tipcdiscrcv...

7.8CVSS5.8AI score0.00125EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/28 1:19 p.m.14 views

CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

7.8CVSS0.001EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/28 12:32 p.m.6 views

CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

7.8CVSS5.8AI score0.001EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/28 12:32 p.m.31 views

CVE-2026-62428 grant-table: type confusion in grant-copy

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

0.001EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/28 12:32 p.m.8 views

CVE-2026-62428 grant-table: type confusion in grant-copy

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

5.8AI score0.001EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:32 p.m.9 views

CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

5.8AI score0.001EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/28 12:32 p.m.53 views

CVE-2026-62428

CVE-2026-62428 describes a type-confusion in grant-copy handling where a grant may be 'pinned' to one operation, causing the permission check and copy operation to reference potentially different guest frames. This could lead to inconsistencies and incorrect permission checks. Documented impact i...

7.8CVSS5.9AI score0.001EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/28 12:32 p.m.5 views

EUVD-2026-49779

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

7.8CVSS5.9AI score0.001EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/28 12:10 p.m.4 views

CVE-2026-64253

A flaw was found in the Linux kernel. The copyprocess function, responsible for creating new processes, incorrectly inherits a flag PFBLOCKTS from the parent process while simultaneously setting a related pointer current-plug to null in the child process. This inconsistency can lead to the kernel...

5.5CVSS5.8AI score0.00157EPSS
SaveExploits0References4
Xen Project
Xen Project
added 2026/07/28 12:0 p.m.8 views

grant-table: type confusion in grant-copy

ISSUE DESCRIPTION When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is...

7.8CVSS5.9AI score0.001EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/07/28 11:57 a.m.6 views

CVE-2026-64248

A flaw was found in the Linux kernel, specifically affecting systems using the MIPS architecture. During the shutdown process of a CPU, the kernel's internal mechanism responsible for managing concurrent data access Read-Copy Update or RCU is not properly informed that the CPU is no longer active...

5.8AI score0.00161EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/28 7:42 a.m.9 views

kernel: net: bridge: use a stable FDB dst snapshot in RCU readers

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/28 7:16 a.m.9 views

CVE-2026-15012

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

5.3CVSS0.00317EPSS
SaveExploits0References12
Cvelist
Cvelist
added 2026/07/28 5:39 a.m.37 views

CVE-2026-15012 Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

5.3CVSS0.00317EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2026/07/28 5:39 a.m.9 views

CVE-2026-15012 Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

5.3CVSS5.9AI score0.00317EPSS
SaveExploits0References12
ATTACKERKB
ATTACKERKB
added 2026/07/28 5:39 a.m.9 views

CVE-2026-15012

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

5.3CVSS5.9AI score0.00317EPSS
SaveExploits0References13
EUVD
EUVD
added 2026/07/28 5:39 a.m.8 views

EUVD-2026-49691

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

5.3CVSS5.9AI score0.00317EPSS
SaveExploits0References12
Rows per page
Query Builder