Lucene search
+L

12492 matches found

AstraLinux
AstraLinux
added 5 days ago9 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in the emulation of VMLOAD/VMSAVE. The commit cc3ed80ae69f states that “KVM: nSVM: always use vmcb01 for vmsave/vmload of guest state”. This commit ensured that KVM always used vmcb01 for the fields...

7.9CVSS6.3AI score0.00128EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 5 days ago12 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: MIPS: Workaround for LLVM bugs when gp is used as a global register variable. On MIPS, currentthreadinfo is defined as a global register variable located in $gp, and it is simply reassigned during the kernel relocation. However,...

7.3CVSS5.4AI score0.00128EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/08 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-68081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest...

5.5AI score0.00155EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/07 8:30 p.m.12 views

EUVD-2026-54652

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...

5.8CVSS4.7AI score0.00272EPSS
SaveExploits0References10
OSV
OSV
added 2026/08/07 4:42 p.m.8 views

CVE-2026-67585 Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...

8.7CVSS5.4AI score0.00407EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/07 4:7 p.m.36 views

CVE-2026-17595 Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass

Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct an expression that read Java object properties not intended to be exposed to the expression engine, disclosing internal JVM class metadata...

5.3CVSS0.00287EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/07 11:55 a.m.10 views

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

9.1CVSS6.3AI score0.00571EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/07 11:55 a.m.9 views

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

7.9CVSS6.5AI score0.00158EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/07 11:41 a.m.8 views

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

9.1CVSS6.3AI score0.00571EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/07 11:40 a.m.7 views

CVE-2026-12261

A flaw was found in the nltk.downloader component of NLTK. This vulnerability allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces and only validates package integrity after extraction. This design flaw enables one package to...

5.3CVSS5.6AI score0.00192EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/08/07 8:8 a.m.9 views

KVM: nVMX: Hide shadow VMCS right after VMCLEAR

...

9.8CVSS5.2AI score0.0012EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/07 6:25 a.m.11 views

EUVD-2026-54393

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

5.3CVSS5.8AI score0.00192EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/07 6:25 a.m.5 views

CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

5.3CVSS5.5AI score0.00192EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/08/06 11:56 p.m.13 views

SUSE CVE-2026-64562

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

8.8CVSS5.5AI score0.0012EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/06 6:39 p.m.41 views

CVE-2026-5855

Contiki-NG: LwM2M TLV parser in os/services/lwm2m/lwm2m-tlv.c (function lwm2m_tlv_read) ignores the caller’s buffer length and may read up to six bytes without bounds checks. The engine loop continues while bytes remain, so a crafted CoAP WRITE to any LwM2M endpoint whose final TLV supplies exact...

8.7CVSS5.6AI score0.00537EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/06 7:13 a.m.18 views

EUVD-2026-53790

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode so that a future change can have update CR8 intercepts during vCPU...

5.4AI score0.00164EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/06 7:13 a.m.40 views

CVE-2026-64604 KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode so that a future change can have update CR8 intercepts during vCPU...

0.00164EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/08/06 7:13 a.m.10 views

CVE-2026-64604

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode so that a future change can have update CR8 intercepts during vCPU...

5.3AI score0.00164EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
added 2026/08/06 7:13 a.m.9 views

CVE-2026-64604

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode so that a future change can have update CR8 intercepts during vCPU...

5.3AI score0.00164EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 1:14 p.m.8 views

Malicious code in crypto-checkout-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15806df14aa955b2d5e08414d4f22ad71a9d1ac823aa7557e8f9d490d78761d index.js exports getPlugin which issues an HTTPS request to a hardcoded bare-IP endpoint at https://46.183.25.232:45000/icons/112 and passes the...

5.6AI score
SaveExploits0References2
Rows per page
Query Builder