Lucene search
+L

4395 matches found

OSV
OSV
added 2026/07/07 4:03 p.m.13 views

PYSEC-2026-2044 Werkzeug safe_join() allows Windows special device names with compound extensions

Werkzeug's safejoin function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory. Windows still accepts them with any file extensio...

6.3CVSS6AI score0.00482EPSS
SaveExploits0References6
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Werkzeug safe_join() allows Windows special device names

Werkzeug's safejoin function allows path segments with Windows device names. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory. sendfromdirectory uses safejoin to safely serve files at user-specified paths under a director...

6.3CVSS5.9AI score0.00511EPSS
SaveExploits0References7Affected Software1
Snyk
Snyk
added 2026/07/06 10:39 p.m.28 views

Regular Expression Denial of Service (ReDoS)

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the structuredoutputs.regex parameter, which allows user-supplied regular expressions to be passed...

8.7CVSS5.9AI score0.00583EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/06 12:00 a.m.50 views

AlmaLinux 10 : kernel (ALSA-2026:34911)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:34911 advisory. kernel: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CVE-2026-43112 kernel: rxrpc: Fix potential UAF after skbunshare failure...

9.3CVSS7AI score0.00571EPSS
SaveExploits1References10
OSV
OSV
added 2026/07/01 2:16 p.m.12 views

UBUNTU-CVE-2026-53336

In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknow...

5.5CVSS5.7AI score0.0012EPSS
SaveExploits0References13
OSV
OSV
added 2026/07/01 1:32 p.m.12 views

CVE-2026-53336 nvmem: layouts: onie-tlv: fix hang on unknown types

In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknow...

5.8AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/01 1:32 p.m.61 views

CVE-2026-53336 nvmem: layouts: onie-tlv: fix hang on unknown types

In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknow...

0.0012EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/07/01 3:19 a.m.12 views

SUSE CVE-2026-53063

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidateremove function has incomplete logic for handling write hit bios after cache invalidation. It sets up the remapping for the overwritebio but then drops it immediately...

5.5CVSS5.8AI score0.00128EPSS
SaveExploits0References18
RedhatCVE
RedhatCVE
added 2026/06/29 7:48 a.m.15 views

CVE-2026-53279

A flaw was found in the Linux kernel's drm/gma500/oaktraillvds component. This issue occurs during the initialization of the Low-Voltage Differential Signaling LVDS display interface. Due to improper error handling, the system may attempt to deregister an I2C adapter that is still in use, causing...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/28 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-53279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gma500/oaktraillvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2cgetadapter and tries to read the EDID before falling back ...

5.5CVSS5.5AI score0.00123EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2026/06/27 8:11 a.m.10 views

dm cache: fix write hang in passthrough mode

...

7.1CVSS6.1AI score0.00128EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2026/06/26 8:17 p.m.18 views

CVE-2026-53321

In the Linux kernel, the following vulnerability has been resolved: iouring/napi: cap busypollto 10 msec Currently there's no cap on the maximum amount of time that napi is allowed to poll if no events are found, which can lead to kernel complaints on a task being stuck as there's no conditional...

5.5CVSS5.4AI score0.00112EPSS
SaveExploits0References14
OSV
OSV
added 2026/06/26 7:40 p.m.12 views

CVE-2026-53279 drm/gma500/oaktrail_lvds: fix hang on init failure

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktraillvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2cgetadapter and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling doe...

5.8AI score
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/06/26 7:40 p.m.11 views

CVE-2026-53279

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktraillvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2cgetadapter and tries to read the EDID before falling back to allocating and registering its own adapter. The error handling doe...

5.8AI score0.00123EPSS
SaveExploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/26 7:39 p.m.17 views

CVE-2026-40209

An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or...

5.3CVSS5.8AI score0.0029EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/26 4:31 p.m.20 views

CVE-2026-53063

A flaw was found in the Linux kernel's device-mapper dm cache component. Incomplete logic within the invalidateremove function, which handles write operations after cache invalidation, can lead to a system hang. This occurs because the function sets up remapping for write operations but fails to...

5.5CVSS5.7AI score0.00128EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/06/26 2:14 a.m.14 views

SUSE CVE-2026-52990

In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotifyrecalcmask fsnotifyrecalcmask fails to handle the return value of fsnotifyrecalcmask, which may return an inode pointer that needs to be released via fsnotifydropobject when the...

4.7CVSS5.8AI score0.00127EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/25 12:00 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2026-53063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm cache: fix write hang in passthrough mode The invalidateremove function has incomplete logic for handling write hit bios after cache invalidation. It sets up...

5.5CVSS5.5AI score0.00128EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/24 5:17 p.m.14 views

CVE-2026-53063

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidateremove function has incomplete logic for handling write hit bios after cache invalidation. It sets up the remapping for the overwritebio but then drops it immediately...

5.5CVSS0.00128EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/06/24 5:17 p.m.12 views

CVE-2026-53063

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidateremove function has incomplete logic for handling write hit bios after cache invalidation. It sets up the remapping for the overwritebio but then drops it immediately...

5.5CVSS5.3AI score0.00128EPSS
SaveExploits0References25
Rows per page
Query Builder