Lucene search
+L

1540 matches found

Github Security Blog
Github Security Blog
added 2026/01/14 9:46 p.m.28 views

Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling

Impact Versions of the Algolia Search & Discovery extension for Magento 2 prior to 3.17.2 and 3.16.2 contain a vulnerability where data read from the database was treated as a trusted source during job execution. If an attacker is able to modify records used by the extension’s indexing queue, thi...

7.1AI score
SaveExploits0References4Affected Software1
Redos
Redos
added 2026/01/14 12:00 a.m.10 views

ROS-20260114-7303

A vulnerability in the dcn21linkencodercreate function of the drivers/gpu/drm/amd/display/dc/dcn21/dcn21/dcn21resource.c module of the Linux operating system kernel is related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity...

7.8CVSS8.7AI score0.00255EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001772 advisory. An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset,...

7.8CVSS6.8AI score0.00514EPSS
SaveExploits1References3
GitLab Advisory Database
GitLab Advisory Database
added 2026/01/14 12:00 a.m.16 views

Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling

Versions of the Algolia Search & Discovery extension for Magento 2 prior to 3.17.2 and 3.16.2 contain a vulnerability where data read from the database was treated as a trusted source during job execution. If an attacker is able to modify records used by the extension’s indexing queue, this could...

7AI score
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/01/13 3:34 p.m.42 views

CVE-2025-71086

Technical details for CVE-2025-71086 are not publicly available in the provided documents. Monitor for updates from official advisories; the initial description mentions a Linux kernel fix in net rose_kill_by_device but no product/version specifics are provided here.

7.8CVSS5.9AI score0.00125EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/01/13 3:29 p.m.30 views

CVE-2025-68792 tpm2-sessions: Fix out of range indexing in name_size

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...

7.8CVSS0.00132EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/13 3:29 p.m.8 views

CVE-2025-68792 tpm2-sessions: Fix out of range indexing in name_size

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...

7.8CVSS6.5AI score
SaveExploits0References6
Redos
Redos
added 2026/01/13 12:00 a.m.10 views

ROS-20260113-7390

A vulnerability in the drivers/us module ucsiccgsynccontrol of the Linux kernel is related to unchecked array indexing. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

7.8CVSS6.4AI score0.00273EPSS
SaveExploits0
Redos
Redos
added 2026/01/12 12:00 a.m.13 views

ROS-20260112-7307

A vulnerability in the smuv130updatepcieparameters function of the drivers/gpu/drm/amd/pm/swsmu/smu13/smuv130.c module, a driver to support the Direct Rendering Infrastructure DRI of AMD graphics cards in the Linux operating system kernel, is related to unchecked array indexing. Exploitation of t...

7.8CVSS6.5AI score0.0026EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/07 12:00 a.m.5 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000392 advisory. A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing...

5.5CVSS6.4AI score0.00356EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/31 12:28 a.m.5 views

SUSE CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

5.5CVSS6.6AI score0.00146EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.6 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992873 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Avoid excessive partition lengths Avoid mounting filesystems where the partition would...

7.8CVSS6.2AI score0.00248EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/30 3:30 p.m.9 views

EUVD-2023-60455

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

6.1AI score0.00146EPSS
SaveExploits0References8
NVD
NVD
added 2025/12/30 1:16 p.m.8 views

CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

7.8CVSS0.00146EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.5 views

CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

7.8CVSS6AI score0.00146EPSS
SaveExploits0References9
OSV
OSV
added 2025/12/30 1:16 p.m.8 views

UBUNTU-CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

7.8CVSS5.7AI score0.00146EPSS
SaveExploits0References10
OSV
OSV
added 2025/12/30 12:08 p.m.7 views

CVE-2023-54186 usb: typec: altmodes/displayport: fix pin_assignment_show

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

7.8CVSS6.5AI score
SaveExploits0References10
Cvelist
Cvelist
added 2025/12/30 12:08 p.m.36 views

CVE-2023-54186 usb: typec: altmodes/displayport: fix pin_assignment_show

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

7.8CVSS0.00146EPSS
SaveExploits0References7
CVE
CVE
added 2025/12/30 12:08 p.m.38 views

CVE-2023-54186

CVE-2023-54186 is a Linux kernel vulnerability affecting the USB Type-C altmodes/displayport code. The issue arises from a patch that fixes the negative indexing of the buf array in pin_assignment_show when get_current_pin_assignments returns 0 (no compatible pin assignments). The bug led to a KA...

7.8CVSS6.2AI score0.00146EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/12/24 3:30 p.m.9 views

EUVD-2023-60355

In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix panic during XDPTX with 64 CPUs Commit 4fe815850bdc "ixgbe: let the xdpdrv work with more than 64 cpus" adds support to allow XDP programs to run on systems with more than 64 CPUs by locking the XDP TX rings and indexi...

5.7AI score0.0057EPSS
SaveExploits0References5
Rows per page
Query Builder