Lucene search
+L

138220 matches found

F5 Networks
F5 Networks
added 2026/07/20 1:12 a.m.20 views

K000162338: PHP vulnerability CVE-2025-6491

Security Advisory Description In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability o...

5.9CVSS5.7AI score0.00991EPSS
SaveExploits1
F5 Networks
F5 Networks
added 2026/07/20 1:7 a.m.10 views

K000162337: WolfSSL vulnerability CVE-2026-6731

Security Advisory Description X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted. CVE-2026-6731 Impact There is no impact; F5 products are not affected by this...

7.5CVSS5.3AI score0.00124EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2026/07/20 1:3 a.m.13 views

K000162336: PHP vulnerability CVE-2026-6735

Security Advisory Description In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machi...

8.8CVSS6.1AI score0.0021EPSS
SaveExploits1
NVD
NVD
added 2026/07/20 12:16 a.m.11 views

CVE-2026-44359

Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's mainmatrix.yml workflow is triggered by pullrequesttarget and multiple jobs check out the attacker's fork code and execute it with access to repository secrets and elevated...

10CVSS0.01003EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/20 12:16 a.m.8 views

UBUNTU-CVE-2026-44359

Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's mainmatrix.yml workflow is triggered by pullrequesttarget and multiple jobs check out the attacker's fork code and execute it with access to repository secrets and elevated...

10CVSS6.1AI score0.01003EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/20 12:0 a.m.14 views

PT-2026-61715

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, previous bug fixes for symlink races in open calls missed races in other path based system calls like chmod and chown. For rsync daemons with "use chroot = no" this...

6.3CVSS5.4AI score0.00068EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/20 12:0 a.m.13 views

PT-2026-61577

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.1.0 Description When a JWT access method is configured using the ALGORITHM ES512 parameter within the DEFINE ACCESS statement, the system silently substitutes the ES384 algorithm. This occurs because the underlyin...

5.3CVSS5.9AI score0.00163EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/20 12:0 a.m.8 views

UBUNTU-CVE-2026-63877

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to colour frame buffer device 160x64 tgafb: SFB+ detected, rev=0x02 fb0: Digital ZLX-E1 frame...

5.8AI score0.00209EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/20 12:0 a.m.7 views

UBUNTU-CVE-2026-64049

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fetching UBWC params because those generations didn't support UBWC anyway, however it's still possible to query UBWC-related params...

5.7AI score0.00166EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.6 views

TencentOS Server 3: perl:5.32 (TSSA-2026:0660)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0660 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.1CVSS6.3AI score0.0043EPSS
SaveExploits3References3
UbuntuCve
UbuntuCve
added 2026/07/20 12:0 a.m.13 views

CVE-2026-64091

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. A new buffer with the correct size for the VLANs is then allocated...

9.8CVSS5.5AI score0.00426EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/20 12:0 a.m.19 views

PT-2026-61714

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver's compressed-token decoder accumulated a 32-bit signed counter without checking for overflow. A malicious sender can trigger an overflow that with...

8.1CVSS5.6AI score0.00274EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/20 12:0 a.m.10 views

UBUNTU-CVE-2026-64091

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. A new buffer with the correct size for the VLANs is then allocated...

9.8CVSS5.8AI score0.00426EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/20 12:0 a.m.7 views

ALSA-2026:41895 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...

9.8CVSS8AI score0.01105EPSS
SaveExploits0References33
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.11 views

TencentOS Server 3: container-tools:rhel8 (TSSA-2026:0671)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0671 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

7.5CVSS7.9AI score0.00728EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2026/07/20 12:0 a.m.10 views

Important: .NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29...

9.8CVSS7.9AI score0.01105EPSS
SaveExploits0References35
AlmaLinux
AlmaLinux
added 2026/07/20 12:0 a.m.12 views

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...

9.8CVSS7.9AI score0.01105EPSS
SaveExploits0References35
AlmaLinux
AlmaLinux
added 2026/07/20 12:0 a.m.6 views

Important: .NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29...

9.8CVSS7.9AI score0.01105EPSS
SaveExploits0References35
OSV
OSV
added 2026/07/20 12:0 a.m.8 views

ALSA-2026:41898 Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10...

9.8CVSS7.9AI score0.01105EPSS
SaveExploits0References35
Amazon
Amazon
added 2026/07/20 12:0 a.m.13 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio CVE-2026-31451 In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix NULL pointer dereference in epqueue...

9.8CVSS7AI score0.00908EPSS
SaveExploits19
Rows per page
Query Builder