Lucene search
+L

5400 matches found

Positive Technologies
Positive Technologies
•added 2026/07/20 12:00 a.m.•24 views

PT-2026-61575

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.1.0 Description The type/kind parser does not enforce recursion depth limits when processing nested type annotations. This allows authenticated attackers to send queries containing deeply nested type annotations,...

7.1CVSS5.9AI score0.0045EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/20 12:00 a.m.•18 views

PT-2026-61702

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Prototype Pollution condition in the getQueryParam function /public/js/main.js and was addressed in version 1.8.139 by blocking URL query keys matching the pattern proto . However, this mitigation is incomplete: ...

4.6CVSS5.3AI score0.00194EPSS
SaveExploits0References2
Amazon
Amazon
•added 2026/07/20 12:00 a.m.•19 views

Medium: jackson-databind

Issue Overview: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potential Denial-of-Service exists when attacker sends deeply nested JSON if and only if the service reads deeply nested 1000s of levels...

7.5CVSS5.3AI score0.00616EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/07/20 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-63987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES ethnlupdateprofile walks t...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/19 5:36 p.m.•16 views

SUSE CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.3AI score0.0016EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/19 2:56 p.m.•13 views

CVE-2026-63987

In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES ethnlupdateprofile walks the ETHTOOLAPROFILEIRQMODERATION nest list with an index 'i' and writes newprofilei++ without bounding i. The destination is kmemdup'd at...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0
OSV
OSV
•added 2026/07/19 11:11 a.m.•7 views

OESA-2026-3088 util-linux security update

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw point...

6.8CVSS5.5AI score0.00168EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/19 9:17 a.m.•16 views

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.5CVSS0.0016EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/19 9:10 a.m.•10 views

CVE-2026-53372 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.3AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/07/19 9:10 a.m.•16 views

EUVD-2026-45442

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.3AI score0.0016EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/19 9:10 a.m.•15 views

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.5CVSS5.2AI score0.0016EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/07/19 9:10 a.m.•11 views

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.3AI score0.0016EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/07/19 9:10 a.m.•44 views

CVE-2026-53372 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

0.0016EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/19 9:10 a.m.•51 views

CVE-2026-53372

CVE-2026-53372 affects the Linux kernel IOMMU VT-d: nested domain attachments to PASID could fail to attach or lose dirty pages due to missing dirty-tracking for the nested domain. The issue occurs when a PASID-enabled domain attaches to a nested parent domain configured for dirty-tracking; lack ...

5.5CVSS5.3AI score0.0016EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/07/19 12:00 a.m.•19 views

openSUSE 16: cyradm / cyrus-imapd / cyrus-imapd-devel / cyrus-imapd-snmp / etc (openSUSE-SU-2026:21368-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21368-1 advisory. Changes in cyrus-imapd: - Update to 3.8.7 bugfix release - CVE-2026-47081: XAPPLEPUSHSERVICE folder existence oracle and push hijack bsc1271617 ...

6.5CVSS5.6AI score0.00348EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•27 views

PT-2026-61074

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the kernel lacks dirty tracking support on nested domains attached to a Process Address Space ID PASID. A PASID is a unique identifier...

5.5CVSS5.1AI score0.0016EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/19 12:00 a.m.•1 views

CVE-2026-53372: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/18 2:17 p.m.•27 views

CVE-2025-71397

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions at the root, namespace, or database level to define custom database functions via DEFINE FUNCTION using nested FOR loops. Although a single loop's iteration count is...

7.1CVSS0.00551EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/18 2:17 p.m.•25 views

CVE-2024-58370

SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms. Authorized attackers can submit queries with excessive nesting depth to cause stack overflow and crash the server...

7.1CVSS0.00487EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/18 1:10 p.m.•52 views

CVE-2025-71397 SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions at the root, namespace, or database level to define custom database functions via DEFINE FUNCTION using nested FOR loops. Although a single loop's iteration count is...

7.1CVSS0.00551EPSS
SaveExploits0References2
Rows per page
Query Builder