Lucene search
K

7280 matches found

Vulnrichment
Vulnrichment
added 2026/01/27 3:34 p.m.3 views

CVE-2025-55095

The function uxhostclassstoragemediamount is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition. This recursion occurs in...

4.2CVSS5.9AI score0.00138EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2026/01/27 12:26 a.m.4 views

SUSE CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS5.8AI score0.00115EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.6 views

PT-2026-4935

The function ux host class storage media mount is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition. This recursion occurs in ux host class storag...

4.2CVSS5.9AI score0.00138EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/24 9:15 a.m.10 views

CVE-2026-0772

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS6.6AI score0.00897EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2026/01/24 12:24 a.m.3 views

SUSE CVE-2026-24137

sigstore framework is a common go library shared across sigstore services and clients. In versions 1.10.3 and below, the legacy TUF client pkg/tuf/client.go supports caching target files to disk. It constructs a filesystem path by joining a cache base directory with a target name sourced from...

5.3CVSS5.7AI score0.0037EPSS
Exploits0References7
NVD
NVD
added 2026/01/23 4:15 p.m.4 views

CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS0.00115EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/01/23 4:15 p.m.2 views

CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS6.6AI score0.00115EPSS
Exploits0References4
OSV
OSV
added 2026/01/23 4:15 p.m.0 views

UBUNTU-CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS5.7AI score0.00115EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/23 3:24 p.m.2 views

CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

5.7AI score0.00115EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/01/23 3:24 p.m.27 views

CVE-2026-22995 ublk: fix use-after-free in ublk_partition_scan_work

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

0.00115EPSS
Exploits0References2
CVE
CVE
added 2026/01/23 3:24 p.m.14 views

CVE-2026-22995

The CVE concerns a Linux kernel race in ublk_partition_scan_work that can cause a use-after-free of ub->ub_disk due to a race between async partition scanning and device teardown. The vulnerability occurs when ublk_ctrl_start_dev() schedules partition_scan_work after add_disk(), and ublk_stop_...

7.8CVSS5.2AI score0.00115EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/01/23 3:24 p.m.4 views

CVE-2026-22995 ublk: fix use-after-free in ublk_partition_scan_work

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS5.3AI score0.00115EPSS
Exploits0References5
Akamai Blog
Akamai Blog
added 2026/01/23 2:0 p.m.6 views

Akamai Block Storage Makes Block Disk Encryption the Default in Terraform

Learn about the early 2026 Terraform update, how the change will affect your workflow, and how to successfully navigate any issues that may arise...

5.5AI score
Exploits0
Snyk
Snyk
added 2026/01/23 5:8 a.m.4 views

Deserialization of Untrusted Data

Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the disk cache service. An attacker can execute arbitrary code by supplying crafted data that is deserialized without proper validatio...

7.7CVSS7.4AI score0.00897EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/23 5:8 a.m.4 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the disk cache service. An attacker can execute arbitrary code by supplying crafted data that is deserialized without proper validation. Details Serialization is a process of converting an object in...

7.7CVSS7.4AI score0.00897EPSS
Exploits1References2
NVD
NVD
added 2026/01/23 4:16 a.m.5 views

CVE-2026-0772

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS0.00897EPSS
Exploits1References1
OSV
OSV
added 2026/01/23 4:16 a.m.7 views

CVE-2026-0772

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS6.7AI score
Exploits0References1
CVE
CVE
added 2026/01/23 3:29 a.m.12 views

CVE-2026-0772

CVE-2026-0772 is a Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution vulnerability. The flaw exists in the disk cache service and stems from insufficient validation of user-supplied data, enabling deserialization of untrusted data and code execution in the service accoun...

7.5CVSS6.6AI score0.00897EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 3:29 a.m.2 views

CVE-2026-0772 Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS6.6AI score0.00897EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/01/23 3:29 a.m.27 views

CVE-2026-0772 Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS0.00897EPSS
Exploits1References1
Rows per page
Query Builder