Lucene search
+L

6819 matches found

Amazon
Amazon
•added 2026/01/07 12:00 a.m.•13 views

Important: ecs-init

Issue Overview: A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is...

7.5CVSS7.3AI score0.0063EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/01/06 3:11 a.m.•9 views

CVE-2026-21677 iccDEV has Undefined Behavior in CIccCLUT::Init()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its CIccCLUT::Init function which initializes and sets the size of a CLUT. This issue is fixed in version 2.3.1.1...

8.8CVSS5.9AI score0.00368EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/06 3:11 a.m.•20 views

CVE-2026-21677 iccDEV has Undefined Behavior in CIccCLUT::Init()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its CIccCLUT::Init function which initializes and sets the size of a CLUT. This issue is fixed in version 2.3.1.1...

8.8CVSS6.5AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/06 12:00 a.m.•4 views

CVE-2026-21677: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its CIccCLUT::Init function which initializes and sets the size of a CLUT. This issue is fixed in version 2.3.1.1...

8.8CVSS5.8AI score0.00368EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•17 views

iccDEV 安全漏洞

iccDEV is an open source color configuration code library from the International Color Consortium ICC. A security vulnerability exists in iccDEV version 2.3.1 and earlier, which stems from an undefined behavior in the CIccCLUT::Init function, which could lead to an undefined behavior attack...

8.8CVSS6.8AI score0.00368EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2026/01/05 10:15 a.m.•14 views

CVE-2025-68759

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180initrxring In rtl8180initrxring, memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed...

5.9AI score0.00198EPSS
SaveExploits0References36
Cvelist
Cvelist
•added 2026/01/05 9:32 a.m.•45 views

CVE-2025-68759 wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180initrxring In rtl8180initrxring, memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed...

0.00198EPSS
SaveExploits0References8
Amazon
Amazon
•added 2026/01/05 12:00 a.m.•17 views

Medium: ecs-init

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

7.5CVSS6.9AI score0.00457EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2026/01/05 12:00 a.m.•13 views

Amazon Linux 2 : ecs-init, --advisory ALAS2ECS-2025-088 (ALASECS-2025-088)

The version of ecs-init installed on the remote host is prior to 1.101.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-088 advisory. crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a...

7.5CVSS6.7AI score0.00457EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
•added 2026/01/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2023-54203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix slab-out-of-bounds in initsmb2rsphdr When smb1 mount fails, KASAN detect slab-out-of-bounds in initsmb2rsphdr like the following one. For smb1...

9.1CVSS7.8AI score0.00548EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/05 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2025-68759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtl818x: Fix potential memory leaks in rtl8180initrxring In rtl8180initrxring, memory is allocated for skb packets and DMA allocations in a loop. When an...

6.1AI score0.00198EPSS
SaveExploits0References2
Amazon
Amazon
•added 2026/01/05 12:00 a.m.•16 views

Important: ecs-init

Issue Overview: A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is...

7.5CVSS7.4AI score0.0063EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•54 views

PT-2026-8110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s ice driver related to devlink reloading. Specifically, a missing call to ice deinit hw in the ice devlink reinit down function, introduced by a previo...

5.5CVSS5.7AI score0.00106EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•13 views

PT-2026-8124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The hp-bioscfg driver attempts to register kobjects with empty names when the HP BIOS returns attributes with empty name strings, resulting in kernel warnings. Specifically, the driver...

5.5CVSS6AI score0.00121EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•12 views

PT-2026-8193

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the iwlwifi module related to the handling of mlo scan start wk. Specifically, mlo scan start wk is not properly canceled upon disconnection,...

7.8CVSS7AI score0.00135EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•16 views

PT-2026-8150

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s CAN Controller Area Network subsystem, specifically within the gs usb receive bulk callback function. A commit introduced an issue where a failing...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•33 views

PT-2026-20430

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to an incorrect NULL check within the loongson gpio init irqchip function. The issue involves a check of chip-parent instead of chip-irq.parents...

5.5CVSS5.9AI score0.00106EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•16 views

PT-2026-26051

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel perf event subsystem during ring buffer management. The issue occurs in the perf mmap function when a mmap setup fails and a concurrent mmap i...

7.8CVSS6.7AI score0.0012EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•13 views

PT-2026-27691

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s xsk module related to fragment node deletion. A buffer leak can occur because the list node field is reused for both the xskb pool list and the buffer...

6AI score0.00129EPSS
SaveExploits0References139
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•24 views

PT-2026-5521

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw in the btrfs subsystem where the path was released before the extent tree was initialized within the btrfs read locked inode function. This could lead t...

5.5CVSS5.9AI score0.00118EPSS
SaveExploits0
Rows per page
Query Builder