Lucene search
+L

7 matches found

NVD
NVD
added 2026/08/10 1:19 p.m.8 views

CVE-2026-68121

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...

7.8CVSS0.00138EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/10 11:58 a.m.47 views

CVE-2026-68121

Summary of CVE-2026-68121 (Linux kernel, PPPoE): A vulnerability arises when device header callbacks reallocate the skb head after PPPoE header is referenced, causing a stale pointer to the PPPoE header used by pppoe_sendmsg(). This can occur if a send is blocked in copy_from_user() while a non-E...

7.8CVSS5.3AI score0.00138EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/10 11:58 a.m.12 views

EUVD-2026-55502

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...

5.3AI score0.00138EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/06/23 5:03 p.m.42 views

CVE-2026-50221

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

5.4CVSS6AI score0.00144EPSS
SaveExploits1
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ip6greheader function's handling of device header length variations in a non-robust manner, which could...

5.5CVSS6.4AI score0.00119EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2024/01/03 5:15 a.m.9 views

CVE-2023-7027

The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ header in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping. This...

7.2CVSS5.7AI score0.00941EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2022/02/16 12:00 a.m.21 views

Ubuntu: Security Advisory (USN-5286-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.3AI score0.00307EPSS
SaveExploits0References2
Rows per page
Query Builder