Lucene search
+L

290 matches found

CVE
CVE
•added 2026/04/10 3:10 p.m.•30 views

CVE-2026-40223

Affected software: systemd, versions 258 prior to 260. Vulnerability: local unprivileged user can trigger an assertion if a Delegate=yes and User= unit exists and is running. Root cause: assertion path in systemd when the unit condition is met. Impact: results in an assertion (denial of service v...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/04/10 3:10 p.m.•45 views

CVE-2026-40223

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

4.7CVSS0.00123EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/10 3:10 p.m.•15 views

CVE-2026-40223

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

4.7CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/04/10 3:10 p.m.•20 views

CVE-2026-40223

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0
OSV
OSV
•added 2026/04/10 3:10 p.m.•11 views

CVE-2026-40223

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

4.7CVSS5.9AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•20 views

systemd 安全漏洞

Systemd is a Linux-based system and service manager developed by Lennart Poettering of Germany. This product is compatible with SysV and LSB startup scripts, and it provides a framework for representing dependencies between system services. Prior to version 260, there were security vulnerabilitie...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/10 12:00 a.m.•0 views

CVE-2026-40223: Incorrect Behavior Order

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/10 12:00 a.m.•13 views

PT-2026-31932

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running...

4.7CVSS5.8AI score0.00123EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/03/10 12:00 a.m.•22 views

EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2026-1252)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain...

5.9CVSS5.7AI score0.00969EPSS
SaveExploits3References4
GithubExploit
GithubExploit
•added 2026/03/06 9:46 a.m.•191 views

UacExploit

🛡️ UACExploit - Windows UAC Bypass Hidden This tool is a P...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/03/04 1:57 a.m.•16 views

CVE-2026-0005

In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowing the LSKF due to a missing permission check. This could lead to local information disclosure where the extent of interaction and...

6.2CVSS6AI score0.00133EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/02 6:42 p.m.•41 views

CVE-2026-0005

In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowing the LSKF due to a missing permission check. This could lead to local information disclosure where the extent of interaction and...

0.00133EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/02 6:42 p.m.•7 views

CVE-2026-0005

In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowing the LSKF due to a missing permission check. This could lead to local information disclosure where the extent of interaction and...

6AI score0.00133EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/01 12:00 a.m.•20 views

PT-2026-22670

Name of the Vulnerable Software and Affected Versions KeyguardServiceDelegate.java affected versions not specified Description A missing permission check in the onServiceDisconnected function of KeyguardServiceDelegate.java may allow a partial bypass of app pinning. This could enable limited...

6.2CVSS5.9AI score0.00133EPSS
SaveExploits0References7
OSV
OSV
•added 2026/03/01 12:00 a.m.•15 views

ASB-A-366405211

In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowing the LSKF due to a missing permission check. This could lead to local information disclosure where the extent of interaction and...

6.2CVSS5.9AI score0.00133EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/15 3:15 p.m.•26 views

CVE-2026-0990

A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a...

5.9CVSS0.00969EPSS
SaveExploits1References4
OSV
OSV
•added 2026/01/15 3:15 p.m.•13 views

AZL-74772 CVE-2026-0990 affecting package libxml2 for versions less than 2.10.4-10

A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a...

5.9CVSS5.8AI score0.00969EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/15 3:15 p.m.•15 views

AZL-74780 CVE-2026-0990 affecting package libxml2 for versions less than 2.11.5-9

A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a...

5.9CVSS5.8AI score0.00969EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2026/01/15 3:15 p.m.•15 views

CVE-2026-0990

A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a...

5.9CVSS5.6AI score0.00969EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/15 2:20 p.m.•126 views

CVE-2026-0990

Vulnerability: CVE-2026-0990 affects libxml2. An uncontrolled recursion bug in xmlCatalogXMLResolveURI is triggered when a delegate URI entry references itself, allowing a remote attacker to craft an XML catalog that causes infinite recursion and stack exhaustion, resulting in DoS via application...

5.9CVSS5.8AI score0.00969EPSS
SaveExploits1References4Affected Software4
Rows per page
Query Builder