Lucene search
+L

209711 matches found

NVD
NVD
•added 2026/10/05 2:16 a.m.•15 views

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

8.4CVSS0.00134EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/05 2:16 a.m.•15 views

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

5.3CVSS0.00206EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 1:39 a.m.•15 views

EUVD-2026-92202

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

5.3CVSS5.9AI score0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 1:39 a.m.•47 views

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 1:39 a.m.•9 views

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

5.9AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 1:39 a.m.•23 views

CVE-2026-20525

A vulnerability exists in the Modem component due to improper input validation , which can lead to a system crash . This flaw could result in a remote denial of service if a User Equipment (UE) connects to an attacker-controlled rogue base station. Exploitation requires no additional execution pr...

5.3CVSS5.9AI score0.00206EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/10/05 1:39 a.m.•15 views

EUVD-2026-92203

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

8.4CVSS6.2AI score0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 1:39 a.m.•52 views

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

0.00134EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 1:39 a.m.•10 views

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

6.2AI score0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 1:39 a.m.•21 views

CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation. This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation can be addressed using Patch ID: ALPS11249004 (Issue ID: ...

8.4CVSS6.2AI score0.00134EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2026/10/05 1:27 a.m.•13 views

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

8.8CVSS5.8AI score0.0065EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•10 views

CVE-2026-20525: Reachable Assertion

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

5.3CVSS5.9AI score0.00206EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•12 views

CVE-2026-104400: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through 2.1.8...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•11 views

CVE-2026-97275: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data Manipulation.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0....

5.3CVSS5.8AI score0.00194EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•11 views

CVE-2026-58834: Improper Input Validation

In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.8AI score0.00063EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•10 views

CVE-2026-42700: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•7 views

CVE-2026-105757: Improper Input Validation

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by t...

6.5CVSS5.9AI score0.00314EPSS
SaveExploits0References7
Redos
Redos
•added 2026/10/05 12:00 a.m.•8 views

ROS-20261005-73-0096

The vulnerability in dotnet9.0 is related to the incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.9CVSS6.4AI score0.00876EPSS
SaveExploits0
Redos
Redos
•added 2026/10/05 12:00 a.m.•8 views

ROS-20261005-73-0097

The vulnerability in dotnet8.0 is related to the incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

5.9CVSS6.4AI score0.00876EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/05 12:00 a.m.•5 views

Cisco ASA NULL Pointer Dereference (CVE-2024-20426)

A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for VPN termination of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

8.6CVSS7.8AI score0.00518EPSS
SaveExploits0References2
Rows per page
Query Builder