Lucene search
+L

1297 matches found

RedHat Linux
RedHat Linux
added 2026/08/24 11:25 a.m.9 views

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

8.5CVSS8AI score0.00175EPSS
SaveExploits0References8
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an invalid offset validation, leading to Out Of Bound Write errors. This issue can occur when the values rect-left and rect-top are exactly equal to...

9.8CVSS7.1AI score0.01535EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in ffmpeg

A buffer overflow vulnerability exists in FFmpeg 4.2, specifically in the builddiffmap function within libavfilter/vffieldmatch.c. This vulnerability could allow a remote malicious user to cause a Denial of Service attack...

6.5CVSS6.8AI score0.01516EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ima: Handle error codes returned by imafilterrulematch. In imamatchrules, if imafilterrulematch returns -ENOENT due to the rule being NULL, the function incorrectly skips the 'if !rc' check and sets 'result = true'. The LSM rule ...

5.2AI score0.00202EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability in ruby-sinatra

Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there was a denial-of-service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method was used when constructing the response. Carefully crafted...

7.5CVSS5.2AI score0.00495EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ipv4: Handled attempts to delete multipath routes when the fibinfo contains a reference to nh. Gwangun Jung reported a buffer-overflow vulnerability in fibnhmatch: fibnhmatch+0xf98/0x1130;...

7.1CVSS6.2AI score0.00255EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipv4: Prevent potential spectre v1 exploits in fibmetricsMatch if !type continue; if type RTAXMAX return false; ... fival = fi-fibmetrics-metricstype - 1; Since @type is used as an array index, we need to prevent CPU speculation ...

5.5CVSS6.1AI score0.00263EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.13 views

Astra Linux – Vulnerability in Apache2

Some modproxy configurations on the Apache HTTP Server versions 2.4.0 through 2.4.55 allow for an HTTP Request Smuggling attack. These configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch, where a non-specific pattern matches a portion of the...

9.8CVSS6.8AI score0.84508EPSS
SaveExploits5References2
OSV
OSV
added 2026/08/19 11:56 a.m.14 views

PYSEC-2026-3667 Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

Summary Glances's REST API server includes a documented safety check intended to guarantee that corscredentials=True can never be combined with an unrestricted CORS origin allowlist. The check compares the configured origin list to the wildcard using exact list equality corsorigins == "" instead ...

6.5CVSS5.7AI score0.00256EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/08/18 12:16 a.m.8 views

SUSE CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

5.3CVSS5.4AI score0.00418EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/17 2:57 p.m.6 views

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

8.5CVSS8AI score0.00175EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/08/17 1:36 p.m.27 views

Medplum: Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage

Summary The external identity provider callback at GET /auth/external accepts attacker-controlled redirect URIs that only need to start with a registered client redirect URI, rather than matching exactly. After a successful external IdP login, the server appends Medplum login and code values to...

7.1CVSS5.6AI score0.00138EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/08/17 6:19 a.m.8 views

AZL-96600 CVE-2026-74579 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS5.8AI score0.0012EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/17 6:19 a.m.19 views

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS5.5AI score0.0012EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/17 5:28 a.m.40 views

CVE-2026-74579 netfilter: nft_payload: fix mask build for partial field offload

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

7.1CVSS0.0012EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/15 1:18 p.m.17 views

CVE-2026-74564

In the Linux kernel, the following vulnerability has been resolved: netfilter: xthashlimit: validate hashtable supports XTHASHLIMITRATEMATCH The XTHASHLIMITRATEMATCH flag mode changes the semantics of the dsthashent structure which represents an entry in the hashtable. There is a union area which...

7.1CVSS0.00118EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/15 1:18 p.m.22 views

AZL-96564 CVE-2026-74564 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: xthashlimit: validate hashtable supports XTHASHLIMITRATEMATCH The XTHASHLIMITRATEMATCH flag mode changes the semantics of the dsthashent structure which represents an entry in the hashtable. There is a union area which...

7.1CVSS5.8AI score0.00118EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/15 1:18 p.m.13 views

CVE-2026-74564

In the Linux kernel, the following vulnerability has been resolved: netfilter: xthashlimit: validate hashtable supports XTHASHLIMITRATEMATCH The XTHASHLIMITRATEMATCH flag mode changes the semantics of the dsthashent structure which represents an entry in the hashtable. There is a union area which...

7.1CVSS5.4AI score0.00118EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/15 1:18 p.m.9 views

UBUNTU-CVE-2026-74564

In the Linux kernel, the following vulnerability has been resolved: netfilter: xthashlimit: validate hashtable supports XTHASHLIMITRATEMATCH The XTHASHLIMITRATEMATCH flag mode changes the semantics of the dsthashent structure which represents an entry in the hashtable. There is a union area which...

7.1CVSS5.3AI score0.00118EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/15 12:28 p.m.12 views

EUVD-2026-59629

In the Linux kernel, the following vulnerability has been resolved: netfilter: xthashlimit: validate hashtable supports XTHASHLIMITRATEMATCH The XTHASHLIMITRATEMATCH flag mode changes the semantics of the dsthashent structure which represents an entry in the hashtable. There is a union area which...

5.4AI score0.00118EPSS
SaveExploits0References5
Rows per page
Query Builder