Lucene search
+L

87893 matches found

Cvelist
Cvelist
added 2026/08/22 3:32 p.m.26 views

CVE-2026-74620 net/sched: act_gact, act_police: range check the fallback control action

In the Linux kernel, the following vulnerability has been resolved: net/sched: actgact, actpolice: range check the fallback control action tcfactioncheckctrlact range checks the primary control action: if !opcode ret = action TCACTVALUEMAX ? -EINVAL : 0; TCACTVALUEMAX is TCACTTRAP, so...

0.00177EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/22 3:31 p.m.8 views

EUVD-2026-64540

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string and may read beyond the...

5.4AI score0.00126EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/22 3:31 p.m.24 views

CVE-2026-74602 ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...

0.00168EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/22 3:31 p.m.19 views

CVE-2026-74596

This vulnerability affects the Linux kernel in the fsverity (filesystem verity) subsystem. The issue is in setattr_prepare(), where an unnecessary check for whether fs-verity is enabled in the kernel was present. Filesystems can contain fsverity files even when fs-verity is not enabled, and in th...

5.5AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/22 3:31 p.m.22 views

CVE-2026-74592

This vulnerability affects the Linux kernel's IMA (Integrity Measurement Architecture) subsystem. The root cause is that the file_truncate and path_truncate LSM hooks were not instantiated, meaning the IMA_DONE_MASK action cache flags were not reset when a file was truncated. As a result, after t...

8.1CVSS5.5AI score0.00341EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/22 3:31 p.m.17 views

CVE-2026-74592 ima: Instantiate file_truncate and path_truncate hooks

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

8.1CVSS5.6AI score
SaveExploits0References7
EUVD
EUVD
added 2026/08/22 3:31 p.m.9 views

EUVD-2026-64529

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

5.5AI score0.00341EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/22 3:31 p.m.17 views

CVE-2026-74589 bpf, sockmap: Fix sk_redir use-after-free in send verdict

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix skredir use-after-free in send verdict skpsockmsgverdict takes a socket reference for psock-skredir. tcpbpfsendverdict copies that pointer while holding the source socket lock, but does not take a reference for...

8.4CVSS5.7AI score
SaveExploits0References11
NVD
NVD
added 2026/08/22 3:16 p.m.9 views

CVE-2026-76609

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

6.9CVSS0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.11 views

CVE-2026-77992

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS0.00262EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.12 views

CVE-2026-76601

Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik 4.7.2 - The order plugin did not perform any access checks...

6.9CVSS0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.9 views

CVE-2026-76607

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik 4.7.2...

10CVSS0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.9 views

CVE-2026-76600

Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik 4.7.2 - The DeleteComment endpoint did not perform any access checks...

6.9CVSS0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.10 views

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

9.3CVSS0.0011EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 2:21 p.m.8 views

EUVD-2026-64328

Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik 4.7.3 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users...

6.9CVSS5.2AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/22 2:20 p.m.31 views

CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/22 2:20 p.m.6 views

CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS5.2AI score0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/22 2:19 p.m.9 views

CVE-2026-76600 Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik 4.7.2 - The DeleteComment endpoint did not perform any access checks...

6.9CVSS5.2AI score0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/22 2:19 p.m.17 views

CVE-2026-76600

Fabrik (a Joomla extension by fabrikar.com) versions prior to 4.7.2 are affected by an unauthenticated comment deletion vulnerability. The DeleteComment endpoint performed no access checks, allowing any unauthenticated network attacker to delete any comment. The CVSS 4.0 base score is 6.9 (MEDIUM...

6.9CVSS5.2AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/22 2:19 p.m.28 views

CVE-2026-76600 Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik 4.7.2 - The DeleteComment endpoint did not perform any access checks...

6.9CVSS0.00239EPSS
SaveExploits0References1
Rows per page
Query Builder