Lucene search
+L

31720 matches found

OSV
OSV
added 2026/07/25 6:4 p.m.7 views

MGASA-2026-0300 Updated wget packages fix security vulnerabilities

Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...

8.7CVSS6.3AI score0.00351EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/25 10:17 a.m.9 views

CVE-2026-64436

In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmallocobjx-calg; if !x-calg err = -ENOMEM; goto...

7.1CVSS0.00119EPSS
SaveExploits0References8
NVD
NVD
added 2026/07/25 10:17 a.m.13 views

CVE-2026-64331

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vepdequeue vepallocrequest wasn't initializing vrequest-udc, so cancellations on the FunctionFS AIO path were arriving in vepdequeue without a valid UDC reference. Since vrequest-udc is never actual...

0.00177EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64436

In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmallocobjx-calg; if !x-calg err = -ENOMEM; goto...

7.1CVSS5.7AI score0.00119EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 9:14 a.m.7 views

CVE-2026-64522 net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5exfrmaddstate handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label...

8.8CVSS5.7AI score
SaveExploits0References6
EUVD
EUVD
added 2026/07/25 8:51 a.m.8 views

EUVD-2026-48780

In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmallocobjx-calg; if !x-calg err = -ENOMEM; goto...

5.8AI score0.00119EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/25 8:51 a.m.9 views

CVE-2026-64436

In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmallocobjx-calg; if !x-calg err = -ENOMEM; goto...

7.1CVSS5.7AI score0.00119EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 8:50 a.m.8 views

CVE-2026-64410

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add...

9.8CVSS5.6AI score0.0038EPSS
SaveExploits0
CVE
CVE
added 2026/07/25 8:49 a.m.16 views

CVE-2026-64331

The CVE-2026-64331 vulnerability in the Linux kernel affects usbip vudc: vep_dequeue() could dereference a NULL UDC reference due to vep_alloc_request() not initializing vrequest->udc. The fix removes vrequest->udc and uses ep_to_vudc() to obtain the UDC reference consistently across vep op...

5.8AI score0.00177EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/25 8:49 a.m.8 views

EUVD-2026-48875

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vepdequeue vepallocrequest wasn't initializing vrequest-udc, so cancellations on the FunctionFS AIO path were arriving in vepdequeue without a valid UDC reference. Since vrequest-udc is never actual...

5.8AI score0.00177EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/25 8:49 a.m.26 views

CVE-2026-64331 usbip: vudc: fix NULL deref in vep_dequeue()

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vepdequeue vepallocrequest wasn't initializing vrequest-udc, so cancellations on the FunctionFS AIO path were arriving in vepdequeue without a valid UDC reference. Since vrequest-udc is never actual...

0.00177EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/25 12:0 a.m.17 views

PT-2026-64657

In the Linux kernel, the following vulnerability has been resolved: net: af key: initialize alg key len for IPComp states pfkey msg2xfrm state handles the IPComp SADB X SATYPE IPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmalloc objx-calg; if !x-calg err = -ENOME...

5.8AI score0.00119EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-50243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a...

6.3CVSS5.8AI score0.00107EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-55717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' ru...

5.9CVSS5.8AI score0.00237EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/24 6:35 p.m.7 views

GO-2026-5775 Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi

Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi...

5.8AI score
SaveExploits0References3
F5 Networks
F5 Networks
added 2026/07/24 3:3 p.m.8 views

K000162380: XPath vulnerability CVE-2026-32287

Security Advisory Description Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true". CVE-2026-32287 Impact A local, unauthenticated attacker can exploit the...

7.5CVSS6.3AI score0.00519EPSS
SaveExploits1Affected Software3
Ubuntu
Ubuntu
added 2026/07/24 10:7 a.m.13 views

USN-8604-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

9.8CVSS5.9AI score0.01338EPSS
SaveExploits10
OSV
OSV
added 2026/07/24 10:7 a.m.6 views

USN-8604-1 linux-azure-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

9.8CVSS6.5AI score0.01338EPSS
SaveExploits10References268
NVD
NVD
added 2026/07/24 8:16 a.m.6 views

CVE-2026-16519

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS0.00118EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/24 7:5 a.m.6 views

EUVD-2026-48512

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS5.9AI score0.00118EPSS
SaveExploits0References1
Rows per page
Query Builder