Lucene search
+L

5302 matches found

OSV
OSV
•added 2026/08/28 8:16 a.m.•9 views

UBUNTU-CVE-2026-80665

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

8.2CVSS5.8AI score0.00207EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/28 6:53 a.m.•39 views

CVE-2026-80699 KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

0.00198EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/28 6:53 a.m.•15 views

CVE-2026-80699

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

5.8AI score0.00198EPSS
SaveExploits0
CVE
CVE
•added 2026/08/28 6:53 a.m.•34 views

CVE-2026-80699

This Linux kernel vulnerability affects the KVM arm64 vgic subsystem in nested virtualization contexts. The root cause is a double-deactivation of physical interrupts : in the nested state, the interrupt is already deactivated via the HW bit in the List Register (LR), yet an additional deactivati...

5.8AI score0.00198EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/28 6:53 a.m.•25 views

CVE-2026-80699 KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

5.8AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/08/28 6:53 a.m.•12 views

EUVD-2026-67434

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

5.8AI score0.00198EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/28 6:49 a.m.•13 views

EUVD-2026-67541

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

5.9AI score0.00207EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/28 6:49 a.m.•67 views

CVE-2026-80665

This vulnerability affects the Linux kernel's KVM arm64 nested virtualization subsystem. The root cause is in kvm_handle_vncr_abort() , which incorrectly assumes that a -EFAULT return from kvm_translate_vncr() always conveys an abort. In practice, "late" failures on S1 translation output (e.g., a...

7.1CVSS5.9AI score0.00207EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/08/28 6:49 a.m.•14 views

CVE-2026-80665

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

7.1CVSS5.8AI score0.00207EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/08/28 6:49 a.m.•42 views

CVE-2026-80665 KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

7.1CVSS0.00207EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•23 views

PT-2026-82999

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

5.8AI score0.00198EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/27 6:32 p.m.•8 views

GHSA-PF76-Q698-37V8 Duplicate Advisory: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-cw6x-m8jw-qmrh. This link is maintained to preserve external references. Original Description NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows...

6.9CVSS5.8AI score
SaveExploits0References3
NVD
NVD
•added 2026/08/27 5:21 p.m.•11 views

CVE-2026-81724

NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested feature-structure input. Attackers can craft trivial payloads with nested brackets that exceed...

6.9CVSS0.00456EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/08/27 4:54 p.m.•8 views

SUSE CVE-2026-62249

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

4.3CVSS5.9AI score0.00305EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/27 5:20 a.m.•12 views

CVE-2026-59275 Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

6.6CVSS5.1AI score0.00446EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/26 10:16 p.m.•7 views

CVE-2026-77611

SeaweedFS is a distributed storage system for files and blobs. In versions prior to 4.40, an authenticated S3 principal with permissions scoped to a nested object key can overwrite a different object outside that scope by calling PutObjectAcl on the key it is allowed to access. The handler...

7.1CVSS0.00384EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/26 9:31 p.m.•26 views

CVE-2026-77611

SeaweedFS (a distributed storage system for files and blobs) contains an object-scope bypass in its S3 PutObjectAcl handler, affecting versions prior to 4.40 . An authenticated S3 principal with permissions scoped to a nested key (e.g., allowed/protected.txt) can overwrite a different object outs...

7.1CVSS5.4AI score0.00384EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/26 9:31 p.m.•41 views

CVE-2026-77611 SeaweedFS: Authenticated S3 object-scope bypass in PutObjectAcl allows overwriting a different object with the same basename

SeaweedFS is a distributed storage system for files and blobs. In versions prior to 4.40, an authenticated S3 principal with permissions scoped to a nested object key can overwrite a different object outside that scope by calling PutObjectAcl on the key it is allowed to access. The handler...

7.1CVSS0.00384EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/26 9:16 p.m.•10 views

CVE-2026-62249

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

4.3CVSS0.00305EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/26 8:29 p.m.•31 views

CVE-2026-62249

Weblate , a web-based continuous localization platform, is affected by an access-control bypass in its nested API change endpoints (GET /api/projects/{slug}/changes/). In versions prior to 2026.7 , an authenticated user with project-level access can retrieve the change history of restricted compo...

4.3CVSS5.4AI score0.00305EPSS
SaveExploits0References2
Rows per page
Query Builder