17251 matches found
EUVD-2026-2200
Time-of-check time-of-use toctou race condition in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-2192
A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A malicious actor could gain knowledge of internal network configuration details through inspecting impacted packets...
CVE-2025-71089
creationtimestamp| type| source ---|---|--- 2026-01-13 17:35:59+00:00| seen| https://gist.github.com/Darkcrai86/bda549184c8e6e9f0f82c5da165ffeff 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/ 2026-03-16 03:00:00+00:00| seen|...
CVE-2025-71025
creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...
CVE-2025-71027
creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...
EUVD-2026-2213
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xeoaaddconfigioctl In xeoaaddconfigioctl, we accessed oaconfig-id after dropping metricslock. Since this lock protects the lifetime of oaconfig, an attacker could guess the id and call...
EUVD-2026-2251
In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asixreadphyaddr. A malicious or faulty device can return an invalid address = PHYMAXADDR, which causes a warning in...
EUVD-2026-2242
In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...
EUVD-2026-2290
In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...
EUVD-2026-2337
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...
EUVD-2026-2377
Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...
EUVD-2026-2257
Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
ROS-20260113-7374
A vulnerability in the amdgpucspass1 function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c module of the Linux kernel is related to the re-release of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected...
EUVD-2026-2348
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...
GHSA-C83V-7274-4VGP
creationtimestamp| type| source ---|---|--- 2026-01-12 23:47:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115884794589382340 2026-01-13 00:02:07+00:00| published-proof-of-concept| Telegram/4zuUlGU6EvpMTWPbip1D3Ts-WMioI6unE3WF1UcmysLKI 2026-01-24 21:25:21+00:00| seen|...
CVE-2025-69542
creationtimestamp| type| source ---|---|--- 2026-01-09 17:43:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115866375540072178 2026-01-09 18:44:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5pebl222o 2026-01-09 22:15:47+00:00| published-proof-of-concept|...
CVE-2025-14338
creationtimestamp| type| source ---|---|--- 2026-01-09 17:19:07+00:00| seen| https://seclists.org/oss-sec/2026/q1/46 2026-01-09 18:40:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mbz5hn6rp72f 2026-01-09 18:41:57+00:00| seen|...
EUVD-2026-1704
A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used. The vendor...
CVE-2025-69426
creationtimestamp| type| source ---|---|--- 2026-01-09 16:52:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866178180399766 2026-01-09 17:02:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115866214356161006 2026-01-09 18:06:54+00:00| seen|...