Lucene search
+L

87899 matches found

osv-cleanstart
osv-cleanstart
•added 2026/10/14 12:39 a.m.•5 views

CLEANSTART-2026-YV55708 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

Security vulnerability affects the wave package. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

7.5CVSS5.9AI score0.00335EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•4 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130100 advisory. Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly JASPICServerAuthContext component...

9.8CVSS8.1AI score0.06246EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2026/10/14 12:00 a.m.•4 views

CVE-2026-98389

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switchpowerprofile during GPU reset During resume from GPU reset, the gfx idle work may invoke switchpowerprofile before the reset completes. This causes the following assert error because the register access...

5.8AI score0.00207EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•4 views

PT-2026-113792

A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the data plane via chassis-cluster fabric traffic...

7.1CVSS5.7AI score0.00269EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•7 views

AlmaLinux 9 : kernel (ALSA-2026:77689)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:77689 advisory. kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel:...

9.8CVSS6.7AI score0.00694EPSS
SaveExploits3References16
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•5 views

PT-2026-114368

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch power profile during GPU reset During resume from GPU reset, the gfx idle work may invoke switch power profile before the reset completes. This causes the following assert error because the register...

5.8AI score0.00207EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2026-98424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all the interfaces have been moved, cfg80211switchnetns moves the wiphy itself by setting its...

5.6AI score0.00207EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•2 views

Linux Distros Unpatched Vulnerability : CVE-2026-98389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: skip gfx switchpowerprofile during GPU reset During resume from GPU reset, the gfx idle work may invoke switchpowerprofile before the reset complete...

5.7AI score0.00207EPSS
SaveExploits0References3
Redos
Redos
•added 2026/10/14 12:00 a.m.•6 views

ROS-20261014-73-0115

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.2AI score0.00133EPSS
SaveExploits0
CVE
CVE
•added 2026/10/13 9:08 p.m.•33 views

CVE-2026-97381

Legacy Update versions 1.12.0 through 1.13.1 are vulnerable to an origin validation error in the IsPermitted method of its ActiveX control. Due to a logic flaw, hostnames not on the permitted list fail to trigger an E_ACCESSDENIED error, causing the method to incorrectly return S_OK. An attacker ...

9.9CVSS5.8AI score0.00213EPSS
SaveExploits0References5
osv-cve
osv-cve
•added 2026/10/13 9:08 p.m.•10 views

CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...

9.9CVSS5.9AI score
SaveExploits0References7
NVD
NVD
•added 2026/10/13 7:22 p.m.•4 views

CVE-2026-97798

Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00832EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:21 p.m.•5 views

CVE-2026-88132

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...

5.9CVSS0.00319EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:21 p.m.•3 views

CVE-2026-85800

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00318EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•3 views

CVE-2026-85354

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7CVSS0.00252EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•4 views

CVE-2026-83748

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

9.8CVSS0.00723EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•3 views

CVE-2026-83693

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

9.8CVSS0.00996EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:19 p.m.•4 views

CVE-2026-83519

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

9.8CVSS0.00958EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:19 p.m.•5 views

CVE-2026-70213

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

8CVSS0.00317EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:19 p.m.•4 views

CVE-2026-69877

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

6.5CVSS0.00402EPSS
SaveExploits0References1
Rows per page
Query Builder