Lucene search
+L

1540 matches found

CVE
CVE
added 2026/07/21 8:13 p.m.32 views

CVE-2026-65058

The CVE-2026-65058 affects Trezor Safe firmware 3, 5, and 7, where a confirmation-binding flaw in the Ethereum sign_tx / sign_tx_eip1559 flow allows an attacker to present calldata and later supply a different tail, changing the signed transaction while only the initial calldata chunk is confirme...

5.9CVSS5.3AI score0.00279EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:6 p.m.8 views

SUSE CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

5.3CVSS5.2AI score0.00254EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:1 p.m.9 views

SUSE CVE-2026-64024

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

9.4CVSS5.5AI score0.00385EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/21 12:51 p.m.7 views

CVE-2026-16445 Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

7.5CVSS6.1AI score
SaveExploits0References10
Cvelist
Cvelist
added 2026/07/21 12:51 p.m.29 views

CVE-2026-16445 Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

7.5CVSS0.00989EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/21 12:51 p.m.7 views

EUVD-2026-46253

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

7.5CVSS6.2AI score0.00989EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/07/21 12:51 p.m.7 views

CVE-2026-16445

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

7.5CVSS6.2AI score0.00989EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/20 6:16 p.m.7 views

CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

5.3CVSS0.00254EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/20 5:14 p.m.8 views

CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

5.3CVSS5.2AI score0.00254EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/07/20 5:14 p.m.36 views

CVE-2026-55639 xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

5.3CVSS0.00254EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/20 5:14 p.m.21 views

CVE-2026-55639

CVE-2026-55639 affects xrdp up to version 0.10.6, where the parser for Client Security Data in GCC Conference Create Request within the Client MCS Connect Initial PDU lacks proper length validation during initial capability/security negotiation. A remote, unauthenticated attacker could send a cra...

5.3CVSS5.2AI score0.00254EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/20 5:14 p.m.8 views

EUVD-2026-46042

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

5.3CVSS5.2AI score0.00254EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/20 5:14 p.m.5 views

CVE-2026-55639 xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

5.3CVSS5.3AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-64024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable,...

9.4CVSS5.6AI score0.00385EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.5 views

Amazon Linux 2023 : perl-DBI, perl-DBI-tests (ALAS2023-2026-1982)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1982 advisory. DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, packa...

9.8CVSS8.2AI score0.00485EPSS
SaveExploits0References8
NVD
NVD
added 2026/07/19 4:17 p.m.11 views

CVE-2026-64024

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

9.4CVSS0.00385EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/19 3:39 p.m.10 views

EUVD-2026-45597

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

5.6AI score0.00385EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/19 3:39 p.m.35 views

CVE-2026-64024 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

9.4CVSS0.00385EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/19 3:39 p.m.6 views

CVE-2026-64024 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

9.4CVSS5.5AI score
SaveExploits0References6
CVE
CVE
added 2026/07/19 3:39 p.m.25 views

CVE-2026-64024

CVE-2026-64024 concerns a Linux kernel issue where a per-CPU tcp_tw_isn leak could enable ISN prediction. The root cause was that TIME_WAIT-derived ISNs were stored in a per-CPU variable and could be consumed by a subsequent SYN if a packet was dropped along several paths (e.g., min_ttl/min_hop, ...

9.4CVSS5.6AI score0.00385EPSS
SaveExploits0References3
Rows per page
Query Builder