Lucene search
+L

77043 matches found

EUVD
EUVD
added 2026/08/05 1:50 p.m.9 views

EUVD-2026-53384

A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated...

6.5CVSS5.5AI score0.00307EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/05 1:50 p.m.51 views

CVE-2026-16100

CVE-2026-16100 describes a flaw in Keycloak where, when metrics are enabled, raw error messages from failed account operations are recorded as Prometheus metric labels. Because these messages may include user-supplied input (e.g., nonexistent client IDs), an authenticated user can generate an eno...

6.5CVSS5.5AI score0.00307EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/05 1:50 p.m.14 views

CVE-2026-16100

A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated...

6.5CVSS5.2AI score0.00307EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/05 1:42 p.m.8 views

MAL-2026-12766 Malicious code in devplatform-spa-plugin-error-boundary (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282ec333b26c6283eb35916acab1db10c1362d296d0694b1548882c6e48c06be The package's main index.js unconditionally requires./ext, which runs at load time and fetches a per-platform binary over HTTPS from...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 1:42 p.m.13 views

Malicious code in devplatform-spa-plugin-error-boundary (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282ec333b26c6283eb35916acab1db10c1362d296d0694b1548882c6e48c06be The package's main index.js unconditionally requires./ext, which runs at load time and fetches a per-platform binary over HTTPS from...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/08/05 1:24 p.m.7 views

UBUNTU-CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

5.1CVSS5.4AI score0.00112EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2026/08/05 1:24 p.m.14 views

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.2AI score0.00116EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/05 1:24 p.m.7 views

UBUNTU-CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.5AI score0.00116EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/05 1:15 p.m.12 views

tomcat: Apache Tomcat: Error condition not handled when configuring CRLs

A flaw was found in Apache Tomcat. When configuring Certificate Revocation Lists CRLs for a FFM presumably a specific type of connector, the system fails to detect and act upon an error condition. This oversight could lead to unexpected behavior or a security bypass, as the intended security...

9.1CVSS5.5AI score0.00525EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/05 1:11 p.m.10 views

tomcat: Apache Tomcat: Error condition not handled when configuring CRLs

A flaw was found in Apache Tomcat. When configuring Certificate Revocation Lists CRLs for a FFM presumably a specific type of connector, the system fails to detect and act upon an error condition. This oversight could lead to unexpected behavior or a security bypass, as the intended security...

9.1CVSS5.4AI score0.00525EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/08/05 12:42 p.m.4 views

CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

5.1CVSS5.2AI score0.00112EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/05 12:42 p.m.9 views

CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

5.1CVSS5.5AI score0.00112EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/08/05 12:37 p.m.31 views

CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS0.00116EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/05 12:37 p.m.5 views

CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.2AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 9:4 a.m.10 views

Malicious code in tinkoff-boxy-gitlab-labels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995279b7bea8c6d826ee620cb5a31dc38662a1ba4d4b07bda9fc941908daa1e3 On require of the package, index.js loads runtime.js which selects a platform-specific payload path, fetches an opaque native binary from...

5.6AI score
SaveExploits0References2
NVD
NVD
added 2026/08/05 8:16 a.m.6 views

CVE-2026-64580

In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...

7.8CVSS0.0012EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/05 8:16 a.m.8 views

CVE-2026-64574

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...

7.8CVSS0.00116EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/05 8:16 a.m.9 views

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

7.1CVSS0.00116EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/05 8:16 a.m.6 views

CVE-2026-64569

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

0.00156EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/05 8:16 a.m.5 views

CVE-2026-64572

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fibalias with kfreercu on insert error path fibtableinsert publishes newfa into the leaf's falist with fibinsertalias before calling the fib entry notifiers. When a notifier fails, the error path removes newfa wit...

0.00186EPSS
SaveExploits0References5
Rows per page
Query Builder