Lucene search
+L

1150 matches found

Microsoft CVE
Microsoft CVE
•added 2026/08/11 8:16 a.m.•15 views

pppoe: reload header pointer after dev_hard_header()

...

9.8CVSS7.5AI score0.00298EPSS
SaveExploits3
SUSE CVE
SUSE CVE
•added 2026/08/10 4:26 p.m.•11 views

SUSE CVE-2026-61477

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

2.3CVSS6.2AI score0.00163EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
•added 2026/08/10 1:20 p.m.•15 views

CVE-2026-68302

In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...

9.8CVSS7.4AI score0.00477EPSS
SaveExploits0References15
osv_ubuntu
osv_ubuntu
•added 2026/08/10 1:20 p.m.•16 views

UBUNTU-CVE-2026-68332

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airohappedeinit airohappedeinit replaces the NPU pointer with NULL via rcureplacepointer but does not wait for existing RCU readers to exit before calling ppedeinit and airohanpuput...

6.8AI score0.00173EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2026/08/10 12:02 p.m.•49 views

CVE-2026-68304 wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpaauth as 1x256 mode, need to set up "usefwsup" with BRCMFPROFILEFWSUP1X. Or it will happen trace warning when call brcmfcfg80211setpmk. 4481.831101 ------------ cut...

0.00216EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2026/08/10 12:02 p.m.•26 views

CVE-2026-68299 vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets vmxnet3gethdrlen assumes gdesc-rcd.v4/v6/tcp always describe the outer header, but for a Geneve-encapsulated packet the device can set them based on the inner header...

7.5CVSS5.4AI score
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2026/08/10 12:00 a.m.•15 views

Network driver Windows Server Code Execution

The vulnerability of the Windows Server operating system’s network driver is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.00607EPSS
SaveExploits0References2Affected Software18
osv_azl
osv_azl
•added 2026/08/07 2:17 p.m.•31 views

AZL-95478 CVE-2026-61477 affecting package libvirt for versions less than 11.9.0-1

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

2.3CVSS6.2AI score0.00163EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/07 2:09 p.m.•39 views

CVE-2026-61477

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

2.3CVSS6.2AI score0.00163EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/07 2:09 p.m.•28 views

EUVD-2026-54487

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

2.3CVSS6.1AI score0.00163EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/07 2:09 p.m.•67 views

CVE-2026-61477 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

2.3CVSS0.00163EPSS
SaveExploits0References3
Mend
Mend
•added 2026/08/07 2:09 p.m.•6 views

CVE-2026-61477

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

4.6CVSS6.2AI score0.00163EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/07 2:09 p.m.•130 views

CVE-2026-61477

Libvirt vulnerability CVE-2026-61477 affects the libvirt virtual network driver. The network XML parser does not strip newline characters from DNS TXT record values and SRV domain/target attributes, causing these values to be written verbatim into the dnsmasq configuration. This enables a user wh...

2.3CVSS6.2AI score0.00163EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/07 12:00 a.m.•19 views

CVE-2026-61477

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

2.3CVSS6.1AI score0.00163EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/07 12:00 a.m.•7 views

PT-2026-69045

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description An injection issue exists in the virtual network driver of libvirt. The network XML parser fails to remove newline characters from DNS TXT record value attributes and SRV record domain/target...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0References74
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/07 12:00 a.m.•7 views

CVE-2026-61477: Improper Neutralization of CRLF Sequences

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

2.3CVSS6.2AI score0.00163EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/05 5:16 p.m.•26 views

CVE-2026-20028

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...

5CVSS0.00346EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/05 4:18 p.m.•23 views

CVE-2026-20028

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...

5CVSS6AI score0.00346EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/05 4:18 p.m.•19 views

CVE-2026-20028 Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...

5CVSS6AI score0.00346EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/08/05 4:00 p.m.•25 views

Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...

5CVSS5.9AI score0.00346EPSS
SaveExploits0References1
Rows per page
Query Builder