Lucene search
+L

76180 matches found

CVE
CVE
added 2026/07/21 6:30 p.m.14 views

CVE-2026-55084

DHIS2 has a SQL injection vulnerability in the SqlView filter parameter of the /api/sqlViews/{viewId}/data.json endpoint. An authenticated SqlView user can inject arbitrary SQL through the filter, with output reflected in an error message, enabling error-based SQL extraction of database content. ...

8.8CVSS5.9AI score0.00253EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/21 6:24 p.m.7 views

kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc

A flaw was found in the Linux kernel's crypto AFALG subsystem. Memory allocated via sockkmalloc for crypto user API contexts is not zero-initialized, leaving fields with garbage values. Specifically, the 'inflight' variable can contain random data, causing afalgallocareq to spuriously return -EBU...

5.5CVSS5.6AI score0.00123EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/21 4:5 p.m.3 views

SUSE-SU-2026:22770-1 Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions

This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues: Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global prototyp...

9.8CVSS6.8AI score0.142EPSS
SaveExploits6References24
Snyk
Snyk
added 2026/07/21 2:0 p.m.8 views

Information Exposure

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Information Exposure via the GraphQL API when public introspection is disabled. An attacker can obtain hidden schema...

6.9CVSS5.9AI score0.00279EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/21 1:7 p.m.8 views

SUSE CVE-2026-53379

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856initcontrols The control handler wasn't freed if adding controls failed, add an error exit label and convert the existing error return to use it...

5.5CVSS5.2AI score0.0012EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:6 p.m.7 views

SUSE CVE-2026-55238

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validation for specific capability sets. A remote, unauthenticated...

5.3CVSS5.2AI score0.00305EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:4 p.m.7 views

SUSE CVE-2026-63887

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput concatenates "key=value\0" records into login-rspbuf, an 8192-byte kzallocMAXKEYVALUEPAIRS buffer allocated in iscsitallocloginsetupbuffer...

9.8CVSS5.5AI score0.00745EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:3 p.m.7 views

SUSE CVE-2026-63932

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b: reject oversized serial replies mhz19breceivebuf appends each serdev chunk into the fixed MHZ19BCMDSIZE receive buffer and advances bufidx by len without checking that the chunk fits in the remaining space....

5.5AI score0.00198EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:2 p.m.6 views

SUSE CVE-2026-63953

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

5.3AI score0.00189EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:2 p.m.7 views

SUSE CVE-2026-63970

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtiotransportsendpktinfo allocates or reuses the zerocopy uarg before entering the send loop, but virtiotransportallocskb still fills the skb before it inherits that uarg. Whe...

7.8CVSS5.3AI score0.00163EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:1 p.m.8 views

SUSE CVE-2026-63995

In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate startcmdpayloadsize from module The CMIS firmware update code reads startcmdpayloadsize from the module's FW Management Features CDB reply and uses it directly as the byte count for memcpy. The destination...

7.8CVSS5.6AI score0.00129EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:1 p.m.9 views

SUSE CVE-2026-64001

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the...

5.3AI score0.00168EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/21 1:0 p.m.9 views

SUSE CVE-2026-64060

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfswritebegin error handling Fix netfswritebegin to not leak our ref on the request in the event that we get an error from netfswaitforread...

5.3AI score0.00166EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:0 p.m.7 views

SUSE CVE-2026-64079

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...

5.3AI score0.00155EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:0 p.m.7 views

SUSE CVE-2026-64083

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject short block-read responses in the GPIO accessors adm1266gpioget and adm1266gpiogetmultiple both compose the pin-status word as pinsstatus = readbuf0 + readbuf1 8; right after i2csmbusreadblockdata,...

5.3AI score0.00184EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 12:59 p.m.7 views

SUSE CVE-2026-64087

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject implausible blackbox recordcount adm1266nvmemreadblackbox loops over a recordcount that comes straight from byte 3 of the BLACKBOXINFO response. The destination buffer is data-devmem, sized for the nvm...

5.3AI score0.00184EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 12:59 p.m.8 views

SUSE CVE-2026-64094

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnllock held, a hardif might be retrieved as primary interface of a meshif, but then while operating on this interface getting decoupled from the mesh...

5.3AI score0.0021EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 12:59 p.m.7 views

SUSE CVE-2026-64099

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job ioctl's fail label calls kvfree on cpujob's timestamp and performance query arrays after v3djobcleanup, which drops the job's last reference and frees...

7.8CVSS5.3AI score0.00134EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 12:58 p.m.7 views

SUSE CVE-2026-64144

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb-setuppacket leak in error paths The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths...

5.2AI score0.00175EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 12:58 p.m.5 views

SUSE CVE-2026-64161

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix ethportsnode leak in probe The error path on ofpropertyreadu32 failure inside icssmpruethprobe returns without putting ethportsnode, which was acquired before the foreachchildofnode loop. Drop it before...

5.2AI score0.00167EPSS
SaveExploits0References2
Rows per page
Query Builder