Lucene search
K

67 matches found

EUVD
EUVD
added 2026/06/08 1:45 a.m.10 views

EUVD-2026-35008

A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/org/hswebframework/web/oauth2/server/OAuth2Client.java of the component OAuth2 Client. The manipulation results in op...

5.3CVSS5.1AI score0.00303EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2026/05/16 1:11 a.m.7 views

SUSE CVE-2026-44699

LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL backend, this causes HMAC verification to run with a zero-length key, so an attacker can forge a valid...

9.1CVSS5.8AI score0.00209EPSS
Exploits0References3
NVD
NVD
added 2026/05/15 5:16 p.m.9 views

CVE-2026-44699

LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL backend, this causes HMAC verification to run with a zero-length key, so an attacker can forge a valid...

9.1CVSS0.00209EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/02/05 12:24 a.m.5 views

SUSE CVE-2026-23092

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

7.8CVSS5.5AI score0.00186EPSS
Exploits0References3
NVD
NVD
added 2026/02/04 5:16 p.m.5 views

CVE-2026-23092

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

7.8CVSS0.00186EPSS
Exploits0References2
OSV
OSV
added 2026/02/04 5:16 p.m.2 views

UBUNTU-CVE-2026-23092

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

7.8CVSS5.9AI score0.00186EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2026/02/04 5:16 p.m.4 views

CVE-2026-23092

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

7.8CVSS6.8AI score0.00186EPSS
Exploits0References4
CVE
CVE
added 2026/02/04 4:8 p.m.74 views

CVE-2026-23092

CVE-2026-23092 relates to a Linux kernel fix in iio: dac: ad3552r-hs_write_data_source where out-of-bounds writes could occur. The issue stemmed from using the write-return count as the index for null termination instead of the actual number of bytes copied by simple_write_to_buffer(). If count e...

7.8CVSS5.5AI score0.00186EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/04 4:8 p.m.28 views

CVE-2026-23092 iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

0.00186EPSS
Exploits0References2
EUVD
EUVD
added 2026/02/04 4:8 p.m.5 views

EUVD-2026-5450

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

5.5AI score0.00186EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/02/04 4:8 p.m.3 views

CVE-2026-23092

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

7.8CVSS6.7AI score0.00186EPSS
Exploits0
OSV
OSV
added 2026/02/04 4:8 p.m.3 views

CVE-2026-23092 iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

7.8CVSS5.5AI score0.00186EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/02/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-23092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to th...

7.8CVSS7.3AI score0.00186EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-6162

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the IIO DAC AD3552R-HS driver within the Linux kernel. The issue occurs because the code incorrectly uses a potentially oversized 'count' value as ...

7.8CVSS5.9AI score0.00186EPSS
Exploits0References16
GithubExploit
GithubExploit
added 2025/12/17 4:40 a.m.210 views

Exploit for Code Injection in Orangehrm

OrangeHRM RCE Exploit - CVE-2025-66224 📋 Description This...

9CVSS8.4AI score0.00483EPSS
Exploits1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/23 7:40 p.m.3 views

Malicious code in node-hs-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2025/10/23 7:40 p.m.1 views

MAL-2025-48856 Malicious code in node-hs-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2025/09/16 2:48 p.m.6 views

CLSA-2025-1758034087 kernel: Fix of 24 CVEs

tls: always refresh the queue when reading sock CVE-2025-38471 - Bluetooth: hcicore: Fix use-after-free in vhciflush CVE-2025-38250 - i2c/designware: Fix an initialization issue CVE-2025-38380 - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds CVE-2025-38159 - mm/hugetlb:...

7.8CVSS6.6AI score0.00457EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-22741 Malicious code in hs-api-next-gen (npm)

The package hs-api-next-gen was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.5 views

Malicious code in hs-api-next-gen (npm)

The package hs-api-next-gen was found to contain malicious code...

7AI score
Exploits0
Rows per page
Query Builder