Lucene search
+L

10849 matches found

EUVD
EUVD
•added 2026/08/28 6:48 a.m.•16 views

EUVD-2026-67473

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

5.8AI score0.0022EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•25 views

PT-2026-83004

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel within the drm/amd/display component. The function get ss info from atombios attempts to use calc pll cs-ctx-logger for logging via ...

5.5AI score0.00209EPSS
SaveExploits0References18
BDU FSTEC
BDU FSTEC
•added 2026/08/28 12:00 a.m.•15 views

The vulnerability of the rpcrdma_post_recvs() function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the rpcrdmapostrecvs function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation is related to incorrect resource initialization. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.007EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/08/28 12:00 a.m.•13 views

The vulnerability of the hci_dma_dequeue_xfer() function in the drivers/i3c/master/mipi-i3c-hci/dma.c file of the I3C driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcidmadequeuexfer function in the drivers/i3c/master/mipi-i3c-hci/dma.c file of the I3C driver in the Linux operating system is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.8CVSS6.2AI score0.00173EPSS
SaveExploits0References7Affected Software2
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•21 views

PT-2026-82897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs during the initialization of the vmu-flash MTD maps. This happens because the mtd info contains a struct device that must be linked to its parent; failu...

5.5AI score0.0022EPSS
SaveExploits0References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•1 views

CVE-2026-80597: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

5.6AI score0.0022EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/08/27 12:24 a.m.•10 views

SUSE CVE-2026-72023

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

5.7AI score0.0022EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/27 12:19 a.m.•9 views

SUSE CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00328EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/26 7:22 p.m.•12 views

EUVD-2026-66677

Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null all-zero initialization vector. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Sprin...

6.5CVSS5.8AI score0.0015EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/08/26 4:25 p.m.•12 views

CVE-2026-78940

A flaw was found in Google Chrome's Network component. Improper initialization in this component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive...

4.3CVSS5.9AI score0.00328EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/26 5:18 a.m.•12 views

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

7CVSS0.00173EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/26 4:03 a.m.•37 views

CVE-2026-54467

Trusted Firmware-M (TF-M) versions 2 through 2.3.0 (before commit 00d1b3e) contain a vulnerability in the mailbox initialization routine on PSOC64 and RP2350 platforms. The root cause is acceptance of a non-secure, unvalidated pointer supplied during initialization, which could allow compromise o...

7CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/26 4:03 a.m.•11 views

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

7CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/26 4:03 a.m.•46 views

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

7CVSS0.00173EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/26 4:03 a.m.•16 views

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

7CVSS5.8AI score0.00173EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-80559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Redos
Redos
•added 2026/08/26 12:00 a.m.•14 views

ROS-20260826-73-0006

The vulnerability of the ath9khifusballoctxurbs function in the drivers/net/wireless/ath/ath9k/hifusb.c module of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker t...

5.5CVSS6.9AI score0.00156EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•10 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098885 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not...

8.8CVSS5.9AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•22 views

PT-2026-81926

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

7CVSS5.3AI score0.00173EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-78940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

4.3CVSS6AI score0.00328EPSS
SaveExploits0References2
Rows per page
Query Builder