Lucene search
+L

3053 matches found

Vulnrichment
Vulnrichment
•added 2026/04/01 11:00 p.m.•9 views

CVE-2026-32929

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!getmacromemCOM. Opening a crafted V7 file may lead to information disclosure from the affected product...

8.4CVSS7.2AI score0.00206EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/01 9:16 a.m.•9 views

AZL-82022 CVE-2026-23406 affecting package kernel for versions less than 6.6.130.1-1

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in matchchar macro usage The matchchar macro evaluates its character parameter multiple times when traversing differential encoding chains. When invoked with str++, the string pointer advances on eac...

7.8CVSS6.4AI score0.00177EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/04/01 9:16 a.m.•16 views

CVE-2026-23406

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in matchchar macro usage The matchchar macro evaluates its character parameter multiple times when traversing differential encoding chains. When invoked with str++, the string pointer advances on eac...

7.8CVSS6.4AI score0.00177EPSS
SaveExploits0References15
OSV
OSV
•added 2026/04/01 8:36 a.m.•19 views

CVE-2026-23406 apparmor: fix side-effect bug in match_char() macro usage

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in matchchar macro usage The matchchar macro evaluates its character parameter multiple times when traversing differential encoding chains. When invoked with str++, the string pointer advances on eac...

7.8CVSS6.1AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2026/04/01 8:36 a.m.•55 views

CVE-2026-23406 apparmor: fix side-effect bug in match_char() macro usage

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in matchchar macro usage The matchchar macro evaluates its character parameter multiple times when traversing differential encoding chains. When invoked with str++, the string pointer advances on eac...

7.8CVSS0.00177EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/04/01 8:36 a.m.•9 views

CVE-2026-23406

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in matchchar macro usage The matchchar macro evaluates its character parameter multiple times when traversing differential encoding chains. When invoked with str++, the string pointer advances on eac...

7.8CVSS6.5AI score0.00177EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
•added 2026/04/01 8:36 a.m.•20 views

CVE-2026-23406

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in matchchar macro usage The matchchar macro evaluates its character parameter multiple times when traversing differential encoding chains. When invoked with str++, the string pointer advances on eac...

7.8CVSS6.5AI score0.00177EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/01 12:00 a.m.•25 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a side-effect error in the matchchar macro, potentially leading to out-of-bounds reading...

7.8CVSS6.2AI score0.00177EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/01 12:00 a.m.•34 views

PT-2026-29489

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc7-next-20260127 Description The Linux kernel contains a flaw within the apparmor subsystem, specifically in the match char macro. This macro incorrectly evaluates its character parameter multiple times...

7.8CVSS5.9AI score0.00177EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•17 views

The vulnerability of the AXP_DESC macro definition in the drivers/regulator/axp20x-regulator.c module of the Linux kernel’s voltage and current regulator support driver allows a attacker to cause a service failure.

The vulnerability of the AXPDESC macro definition in the drivers/regulator/axp20x-regulator.c file of the Linux kernel’s voltage and current regulator support driver module is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a...

5.5CVSS6.7AI score0.0019EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/03/26 12:00 a.m.•13 views

The vulnerability of the `tx_macro_put_dec_enum()` function in the `sound/soc/codecs/lpass-tx-macro.c` module exposes the confidentiality, integrity, and accessibility of protected information within the Linux SoC kernel’s audio support mechanism. This vulnerability can be exploited by attackers to compromise these security aspects.

The vulnerability of the txmacroputdecenum function in the sound/soc/codecs/lpass-tx-macro.c module related to the Linux operating system’s SoC audio support is associated with out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

7CVSS7.5AI score0.00208EPSS
SaveExploits0References13Affected Software4
GithubExploit
GithubExploit
•added 2026/03/25 4:37 p.m.•241 views

Exploit for Improper Input Validation in Microsoft

HTB: Mailing — A Complete Walkthrough By Mursalin --- I...

9.8CVSS7.8AI score0.9466EPSS
SaveExploits25
EUVD
EUVD
•added 2026/03/25 12:30 p.m.•16 views

EUVD-2026-15313

In the Linux kernel, the following vulnerability has been resolved: arm64: io: Extract user memory type in ioremapprot The only caller of ioremapprot outside of the generic ioremap implementation is genericaccessphys, which passes a 'pgprott' value determined from the user mapping of the target...

5.7AI score0.00127EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/25 10:27 a.m.•44 views

CVE-2026-23346 arm64: io: Extract user memory type in ioremap_prot()

In the Linux kernel, the following vulnerability has been resolved: arm64: io: Extract user memory type in ioremapprot The only caller of ioremapprot outside of the generic ioremap implementation is genericaccessphys, which passes a 'pgprott' value determined from the user mapping of the target...

0.00127EPSS
SaveExploits0References5
OSV
OSV
•added 2026/03/25 10:27 a.m.•13 views

CVE-2026-23346 arm64: io: Extract user memory type in ioremap_prot()

In the Linux kernel, the following vulnerability has been resolved: arm64: io: Extract user memory type in ioremapprot The only caller of ioremapprot outside of the generic ioremap implementation is genericaccessphys, which passes a 'pgprott' value determined from the user mapping of the target...

5.8AI score
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2026/03/25 12:00 a.m.•13 views

The vulnerability of the rx_macro_load_compander_coeff() function in the sound/soc/codecs/lpass-rx-macro.c module allows a hacker to access protected information or cause a service failure in the Linux operating system’s SoC kernel.

The vulnerability of the rxmacroloadcompandercoeff function in the sound/soc/codecs/lpass-rx-macro.c module of the Linux operating system’s sound support module is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to access protect...

7.1CVSS6.8AI score0.00268EPSS
SaveExploits0References11Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/24 12:00 a.m.•5 views

CVE-2026-33241: Allocation of Resources Without Limits or Throttling

Salvo is a Rust web framework. Prior to version 0.89.3, Salvo's form data parsing implementations formdata method and Extractible macro do not enforce payload size limits before reading request bodies into memory. This allows attackers to cause Out-of-Memory OOM conditions by sending extremely...

8.7CVSS5.8AI score0.00515EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/19 12:44 p.m.•7 views

GHSA-PP9R-XG4C-8J4X Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing

Summary Salvo's form data parsing implementations formdata method and Extractible macro do not enforce payload size limits before reading request bodies into memory. This allows attackers to cause Out-of-Memory OOM conditions by sending extremely large payloads, leading to service crashes and...

8.7CVSS5.7AI score0.00515EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2026/03/19 12:44 p.m.•18 views

Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing

Summary Salvo's form data parsing implementations formdata method and Extractible macro do not enforce payload size limits before reading request bodies into memory. This allows attackers to cause Out-of-Memory OOM conditions by sending extremely large payloads, leading to service crashes and...

8.7CVSS5.8AI score0.00515EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/19 12:00 a.m.•28 views

PT-2026-26302

Name of the Vulnerable Software and Affected Versions Salvo versions prior to 0.89.3 Description Salvo, a Rust web framework, is susceptible to denial of service due to unbounded memory allocation during form data parsing. The form data method and Extractible macro do not enforce payload size...

8.7CVSS5.8AI score0.00515EPSS
SaveExploits1References9
Rows per page
Query Builder