Lucene search
+L

5397 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/20 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-63987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES ethnlupdateprofile walks t...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/19 5:36 p.m.•16 views

SUSE CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.3AI score0.0016EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/19 2:56 p.m.•13 views

CVE-2026-63987

In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES ethnlupdateprofile walks the ETHTOOLAPROFILEIRQMODERATION nest list with an index 'i' and writes newprofilei++ without bounding i. The destination is kmemdup'd at...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0
OSV
OSV
•added 2026/07/19 11:11 a.m.•7 views

OESA-2026-3088 util-linux security update

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw point...

6.8CVSS5.5AI score0.00168EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/19 9:17 a.m.•16 views

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.5CVSS0.0016EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/19 9:10 a.m.•10 views

CVE-2026-53372 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.3AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/07/19 9:10 a.m.•16 views

EUVD-2026-45442

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.3AI score0.0016EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/19 9:10 a.m.•15 views

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.5CVSS5.2AI score0.0016EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/07/19 9:10 a.m.•11 views

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.3AI score0.0016EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/07/19 9:10 a.m.•44 views

CVE-2026-53372 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

0.0016EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/19 9:10 a.m.•51 views

CVE-2026-53372

CVE-2026-53372 affects the Linux kernel IOMMU VT-d: nested domain attachments to PASID could fail to attach or lose dirty pages due to missing dirty-tracking for the nested domain. The issue occurs when a PASID-enabled domain attaches to a nested parent domain configured for dirty-tracking; lack ...

5.5CVSS5.3AI score0.0016EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/07/19 12:00 a.m.•19 views

openSUSE 16: cyradm / cyrus-imapd / cyrus-imapd-devel / cyrus-imapd-snmp / etc (openSUSE-SU-2026:21368-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21368-1 advisory. Changes in cyrus-imapd: - Update to 3.8.7 bugfix release - CVE-2026-47081: XAPPLEPUSHSERVICE folder existence oracle and push hijack bsc1271617 ...

6.5CVSS5.6AI score0.00348EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•27 views

PT-2026-61074

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the kernel lacks dirty tracking support on nested domains attached to a Process Address Space ID PASID. A PASID is a unique identifier...

5.5CVSS5.1AI score0.0016EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/19 12:00 a.m.•1 views

CVE-2026-53372: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/18 2:17 p.m.•27 views

CVE-2025-71397

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions at the root, namespace, or database level to define custom database functions via DEFINE FUNCTION using nested FOR loops. Although a single loop's iteration count is...

7.1CVSS0.00551EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/18 2:17 p.m.•25 views

CVE-2024-58370

SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms. Authorized attackers can submit queries with excessive nesting depth to cause stack overflow and crash the server...

7.1CVSS0.00487EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/18 1:10 p.m.•52 views

CVE-2025-71397 SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions at the root, namespace, or database level to define custom database functions via DEFINE FUNCTION using nested FOR loops. Although a single loop's iteration count is...

7.1CVSS0.00551EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/18 1:10 p.m.•12 views

CVE-2025-71397 SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions at the root, namespace, or database level to define custom database functions via DEFINE FUNCTION using nested FOR loops. Although a single loop's iteration count is...

7.1CVSS5.4AI score
SaveExploits0References4
CVE
CVE
•added 2026/07/18 1:10 p.m.•50 views

CVE-2025-71397

CVE-2025-71397 affects SurrealDB versions before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2. Authenticated users with OWNER/EDITOR permissions can define custom functions via DEFINE FUNCTION and trigger nested FOR loops. Although a single loop’s iterations are bounded, stacking multiple lo...

7.1CVSS5.4AI score0.00551EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/18 1:10 p.m.•11 views

CVE-2025-71397 SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions at the root, namespace, or database level to define custom database functions via DEFINE FUNCTION using nested FOR loops. Although a single loop's iteration count is...

7.1CVSS6AI score0.00551EPSS
SaveExploits0References2
Rows per page
Query Builder