Lucene search
+L

76554 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.11 views

PT-2026-43724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the scsi csiostor component. When the variable rn is NULL, the error exit path triggers a dereference of rn through the use of the CSIO INC STATS...

5.7CVSS5.4AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.18 views

PT-2026-43738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the TPM st33zp24 driver where the get burstcount function can return -EBUSY upon a timeout. In such instances, the st33zp24 send function returns immediately without...

5.5CVSS5.4AI score0.00163EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.26 views

PT-2026-43590

Name of the Vulnerable Software and Affected Versions Synology Active Backup for Business Agent versions prior to 3.1.0-4967 Description An origin validation error occurs during installation, which allows local users to write arbitrary files containing restricted content. Recommendations Update t...

6.1CVSS5.9AI score0.00086EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.23 views

PT-2026-43793

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs during the initialization of a PWM chip when using the pwmchip alloc function. The allocated device holds an initial reference that requires release on all error...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.22 views

PT-2026-43952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description An issue exists in the rxrpc component regarding the handling of packets with misaligned crypto lengths. The system fails to...

7.5CVSS5.9AI score0.00441EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.16 views

PT-2026-43755

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the raid1 run function. This function calls setup conf, which registers a thread using md register thread. If the raid1 set limits function fails, the registered...

5.4AI score0.00159EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.20 views

PT-2026-43888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description Issues exist in the thermal core regarding thermal zone governor cleanup. If thermal zone device register with trips fails...

5.5CVSS5.9AI score0.00132EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-46004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: caiaq: Handle probe errors properly The probe procedure of setupcard in caiaq driver doesn't treat the error cases gracefully, e.g. the error from...

7.8CVSS6.7AI score0.00129EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-45871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: st33zp24: Fix missing cleanup on getburstcount error getburstcount can return -EBUSY on timeout. When this happens, st33zp24send returns directly without...

5.5CVSS5.9AI score0.00163EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:0 a.m.24 views

Linux Distros Unpatched Vulnerability : CVE-2026-46053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: rds: fix MR cleanup on copy error rdsrdmamap hands sg/pages ownership to the transport after getmr succeeds. If copying the generated cookie back to user...

7.8CVSS5.6AI score0.00129EPSS
SaveExploits0References2
Redos
Redos
added 2026/05/27 12:0 a.m.22 views

ROS-20260527-73-0003

Vulnerability in openbao related to errors in certificate authentication procedure. The vulnerability can be exploited remotely...

3.1CVSS5.8AI score0.00101EPSS
SaveExploits0
NVD
NVD
added 2026/05/26 10:16 p.m.18 views

CVE-2026-43988

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures e.g., invalid length...

7.5CVSS0.00184EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/26 9:18 p.m.9 views

CVE-2026-44905 Vanetza: Remote Denial of Service via Uncaught OER Encoding Exception in Cryptographic Verification

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically...

7.5CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/26 9:17 p.m.47 views

CVE-2026-43988 Vanetza: Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsing

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures e.g., invalid length...

7.5CVSS0.00184EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/26 9:17 p.m.11 views

CVE-2026-43988 Vanetza: Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsing

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures e.g., invalid length...

7.5CVSS5.8AI score0.00184EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/26 9:17 p.m.12 views

EUVD-2026-32005

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures e.g., invalid length...

7.5CVSS5.8AI score0.00184EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/26 9:17 p.m.27 views

CVE-2026-43988

Affected software/component: Vanetza (ETS I C-ITS implementation). In versions 26.02 and earlier, a denial-of-service vulnerability exists in the ASN.1/OER parsing pipeline. The issue occurs when processing malformed network packets with corrupted ASN.1/OER structures; the asn1c_wrapper.cpp path ...

7.5CVSS5.8AI score0.00184EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/26 9:17 p.m.7 views

CVE-2026-43988

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures e.g., invalid length...

7.5CVSS5.8AI score0.00184EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/05/26 9:17 p.m.9 views

CVE-2026-43988 Vanetza: Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsing

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures e.g., invalid length...

7.5CVSS5.9AI score
SaveExploits0References4
NVD
NVD
added 2026/05/26 9:16 p.m.26 views

CVE-2026-9583

A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the component SQL Handler. Executing a manipulation can lead to information exposure through error message. The attack may be...

5.3CVSS0.00242EPSS
SaveExploits0References6
Rows per page
Query Builder