Lucene search
+L

2801 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/24 2:42 p.m.4 views

CVE-2026-31603

In the Linux kernel, the following vulnerability has been resolved: staging: sm750fb: fix division by zero in pstohz pstohz is called from hwsm750crtcsetmode without validating that pixclock is non-zero. A zero pixclock passed via FBIOPUTVSCREENINFO causes a division by zero. Fix by rejecting zer...

5.4AI score0.00125EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD
added 2026/04/24 2:42 p.m.5 views

EUVD-2026-25496

In the Linux kernel, the following vulnerability has been resolved: staging: sm750fb: fix division by zero in pstohz pstohz is called from hwsm750crtcsetmode without validating that pixclock is non-zero. A zero pixclock passed via FBIOPUTVSCREENINFO causes a division by zero. Fix by rejecting zer...

5.4AI score0.00125EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/24 2:42 p.m.27 views

CVE-2026-31603

CVE-2026-31603 affects the Linux kernel staging: sm750fb driver. The issue occurs when a zero pixclock is passed via FBIOPUT_VSCREENINFO, causing ps_to_hz() to divide by zero in hw_sm750_crtc_set_mode(). The vulnerability is resolved by rejecting zero pixclock in lynxfb_ops_check_var(), aligning ...

5.5CVSS5.4AI score0.00125EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/04/24 2:42 p.m.3 views

CVE-2026-31603 staging: sm750fb: fix division by zero in ps_to_hz()

In the Linux kernel, the following vulnerability has been resolved: staging: sm750fb: fix division by zero in pstohz pstohz is called from hwsm750crtcsetmode without validating that pixclock is non-zero. A zero pixclock passed via FBIOPUTVSCREENINFO causes a division by zero. Fix by rejecting zer...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.13 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the staging sm750fb driver’s pstohz function not verifying that pixclock is non-zero, resulting i...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.14 views

PT-2026-34955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the ps to hz function. This happens because hw sm750 crtc set mode calls ps to hz without verifying that the pixclock variable is non-zero. An attacker can...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits0
EUVD
EUVD
added 2026/04/22 6:31 p.m.12 views

EUVD-2026-25032

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...

3.3CVSS5.9AI score0.00156EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/22 6:31 p.m.16 views

GHSA-5PV5-XH52-HVRP uutils coreutils has an Incorrect Short Circuit Evaluation Issue

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...

3.3CVSS5.9AI score0.00156EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.12 views

uutils coreutils has an Incorrect Short Circuit Evaluation Issue

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...

3.3CVSS5.5AI score0.00156EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2026/04/22 5:16 p.m.9 views

CVE-2026-35378

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...

3.3CVSS0.00156EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/22 4:9 p.m.4 views

CVE-2026-35378

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...

3.3CVSS5.9AI score0.00156EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/22 4:9 p.m.5 views

CVE-2026-35378 uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized Subexpressions

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.5 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013007 advisory. In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by...

5.7AI score0.00202EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.16 views

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011409 advisory. In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by...

5.7AI score0.00202EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/04/20 11:26 p.m.18 views

SUSE CVE-2026-35215

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdldesc function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of slice items, causing...

7.5CVSS5.7AI score0.00466EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/04/20 1:8 p.m.9 views

CVE-2026-35215

A flaw was found in Firebird. In the sdldesc function, a division by zero vulnerability exists due to improper validation of the length of a decoded SDL descriptor from a slice packet. An unauthenticated attacker can exploit this by sending a specially crafted slice packet, leading to a server...

7.5CVSS5.8AI score0.00466EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/17 8:16 p.m.4 views

CVE-2026-35215

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdldesc function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of slice items, causing...

7.5CVSS0.00466EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/04/17 6:59 p.m.6 views

CVE-2026-35215 Firebird: DoS via malicious slice descriptor in slice packet

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdldesc function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of slice items, causing...

7.5CVSS5.7AI score0.00466EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/04/17 6:59 p.m.11 views

EUVD-2026-23490

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdldesc function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of slice items, causing...

7.5CVSS5.7AI score0.00466EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/04/17 6:59 p.m.4 views

CVE-2026-35215

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdldesc function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of slice items, causing...

7.5CVSS5.7AI score0.00466EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder