CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

93367 matches found

BDU FSTEC•added 2026/08/17 12:00 a.m.•13 views

Linux driver net usb catc Heap Buffer Overflow DoS

The vulnerability of the drivers/net/usb/catc.c component in the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00162EPSS

SaveExploits0References16Affected Software3

BDU FSTEC•added 2026/08/17 12:00 a.m.•51 views

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

5.5CVSS6.7AI score0.00127EPSS

SaveExploits0References11Affected Software3

BDU FSTEC•added 2026/08/17 12:00 a.m.•21 views

Apache Tomcat Code Execution

The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.3CVSS7.2AI score0.00307EPSS

SaveExploits0References3Affected Software3

Tenable Nessus•added 2026/08/17 12:00 a.m.•10 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099905 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inputs in bpfprogtestrunskb bpfprogtestrunskb calls ethtypetrans firs...

5.5CVSS5.7AI score0.00114EPSS

SaveExploits0References4

Positive Technologies•added 2026/08/17 12:00 a.m.•26 views

PT-2026-73288

Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in feature image caption that could be used to hijack another staff user's Ghost Admin session, resulting in privilege escalation. This issue is...

4.3CVSS5.9AI score0.00318EPSS

SaveExploits0References6

Positive Technologies•added 2026/08/17 12:00 a.m.•32 views

PT-2026-76611

openssl encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

9.8CVSS5.8AI score0.00274EPSS

SaveExploits0References3

RedHat Linux•added 2026/08/16 8:42 p.m.•11 views

.NET: .NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS7.3AI score0.01232EPSS

SaveExploits0References4