Lucene search
+L

47434 matches found

OSV
OSV
added 2026/02/06 12:06 a.m.12 views

OSV-2026-196 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481752521 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.15 views

PT-2026-6856

Summary An authenticated user can cause a DOS attack. If one of the repo files is deleted before synchronization, it will cause the application to crash. Details If GetMirrorByRepoID fails, the error log dereferencing null pointer. This happens if the repository no longer exits...

6.5CVSS5.5AI score0.0035EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/02/06 12:00 a.m.15 views

free5GC 代码问题漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 4.1.0 have code vulnerabilities that stem from incorrect operations on the identityTriggerType function in the file pfcpreports.go, which may lead to null pointer dereferencing...

7.5CVSS6.1AI score0.00547EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/02/06 12:00 a.m.18 views

libuvc 代码问题漏洞

Libuvc is an open-source cross-platform library for USB video devices. Versions of Libuvc prior to 0.0.7 have code vulnerabilities. These vulnerabilities stem from a flaw in the uvcscanstreaming function in the src/device.c file within the UVC Descriptor Handler component, which may lead to null...

5.5CVSS5.9AI score0.00187EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/02/06 12:00 a.m.16 views

free5GC 代码问题漏洞

Free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of Free5GC prior to 4.1.0 contain code vulnerabilities. These vulnerabilities stem from a flaw in the SessionDeletionResponse function within the SMF component, which may lead to null pointer dereferencing...

7.5CVSS6.1AI score0.00547EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.15 views

PT-2026-6755

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.13.4 Gogs versions prior to 0.14.0+dev Description Gogs is a self-hosted Git service susceptible to a denial-of-service DOS attack. An authenticated user can trigger a crash by initiating a mirror synchronization on a...

6.5CVSS5.5AI score0.0035EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.13 views

PT-2026-6669

Name of the Vulnerable Software and Affected Versions Free5GC versions prior to 4.1.1 Description A flaw exists in Free5GC up to version 4.1.0 within the SessionDeletionResponse function of the SMF component. This issue results in a null pointer dereference, potentially allowing for remote...

6.9CVSS5.2AI score0.00547EPSS
SaveExploits1References11
Rockylinux
Rockylinux
added 2026/02/05 9:13 a.m.23 views

wireshark security update

An update is available for wireshark. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The wireshark packages contain a network protocol analyzer used to capture...

7.8CVSS5.5AI score0.00208EPSS
SaveExploits1
OSV
OSV
added 2026/02/05 8:30 a.m.6 views

SUSE-SU-2026:0386-1 Security update for expat

This update for expat fixes the following issues: - CVE-2026-24515: Fixed a null dereference in XMLExternalEntityParserCreate. bsc1257144 - CVE-2026-25210: Fixed an integer overflow in doContent. bsc1257496...

7.8CVSS6.1AI score0.00196EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/02/05 8:30 a.m.9 views

Security update for expat

This update for expat fixes the following issues: CVE-2026-24515: Fixed a null dereference in XMLExternalEntityParserCreate. bsc1257144 CVE-2026-25210: Fixed an integer overflow in doContent. bsc1257496 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

7.3CVSS7.1AI score0.00196EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2026/02/05 12:27 a.m.14 views

SUSE CVE-2025-71193

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend Enabling runtime PM before attaching the QPHY instance as driver data can lead to a NULL pointer dereference in runtime PM callbacks that expect valid driver data...

4.7CVSS5.2AI score0.00174EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/02/05 12:25 a.m.12 views

SUSE CVE-2026-23043

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in doabortlogreplay Coverity reported a NULL pointer dereference issue CID 1666756 in doabortlogreplay. When btrfsallocpath fails in replayonebuffer, wc-subvolpath is NULL, but...

5.2AI score0.0015EPSS
SaveExploits0References3
Redos
Redos
added 2026/02/05 12:00 a.m.11 views

ROS-20260205-73-0008

A vulnerability in the nfsgetlockcontext function of the Linux kernel is related to a pointer dereferencing error. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

5.5CVSS7.1AI score0.00195EPSS
SaveExploits0
Redos
Redos
added 2026/02/05 12:00 a.m.7 views

ROS-20260205-73-0007

A vulnerability in the mlx5efixuplinkrepfeatures function of the Linux kernel is related to a pointer dereferencing error. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

5.5CVSS7.1AI score0.00178EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/02/05 12:00 a.m.12 views

SUSE SLES12: ImageMagick-config-6-SUSE / ImageMagick-config-6-upstream / etc (SUSE-SU-2026:0384-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0384-1 advisory. - CVE-2026-23874: manipulation of digital images can lead to stack overflow bsc1256976. - CVE-2026-23876: maliciously crafted image can lead to...

9.8CVSS6.9AI score0.00601EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2026/02/05 12:00 a.m.4 views

RockyLinux 10 : wireshark (RLSA-2026:1714)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1714 advisory. Wireshark: NULL Pointer Dereference in Wireshark CVE-2025-9817 Tenable has extracted the preceding description block directly from the RockyLinux security...

7.8CVSS5.3AI score0.00208EPSS
SaveExploits1References3
Amazon
Amazon
added 2026/02/05 12:00 a.m.17 views

Important: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

9.8CVSS5.8AI score0.00601EPSS
SaveExploits3
Redos
Redos
added 2026/02/05 12:00 a.m.9 views

ROS-20260205-73-0032

A vulnerability in the iscsi component of the Linux operating system kernel is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

9.8CVSS7.5AI score0.00422EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/02/05 12:00 a.m.9 views

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1383)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1383 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting...

9.8CVSS5.9AI score0.00601EPSS
SaveExploits3References8
OSV
OSV
added 2026/02/04 8:36 p.m.7 views

GHSA-J39J-6GW9-JW6H git2 has potential undefined behavior when dereferencing Buf struct

If the Buf struct is dereferenced immediately after calling new or default on the Buf struct, a null pointer is passed to the unsafe function slice::fromrawparts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices...

6.9CVSS5.5AI score
SaveExploits0References5
Rows per page
Query Builder