Lucene search
+L

138250 matches found

EUVD
EUVD
added 2026/07/19 2:54 p.m.13 views

EUVD-2026-45762

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to colour frame buffer device 160x64 tgafb: SFB+ detected, rev=0x02 fb0: Digital ZLX-E1 frame...

5.7AI score0.00209EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/19 2:54 p.m.8 views

CVE-2026-63877 serial: dz: Convert to use a platform device

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to colour frame buffer device 160x64 tgafb: SFB+ detected, rev=0x02 fb0: Digital ZLX-E1 frame...

5.7AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/19 2:54 p.m.11 views

CVE-2026-63877

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initialised: Console: switching to colour frame buffer device 160x64 tgafb: SFB+ detected, rev=0x02 fb0: Digital ZLX-E1 frame...

5.7AI score0.00209EPSS
SaveExploits0
CVE
CVE
added 2026/07/19 2:8 p.m.278 views

CVE-2026-16221

CVE-2026-16221 affects fast-uri versions 2.3.1–4.1.0 (including 3.x up to 3.1.3 and 2.x up to 2.4.2). The root cause is that a literal backslash (U+005C) is not treated as an authority delimiter, causing two URL parsers to extract different hosts from the same input. Node’s native WHATWG URL pars...

7.5CVSS5.3AI score0.00254EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/19 2:8 p.m.52 views

CVE-2026-16221 fast-uri vulnerable to host confusion via literal backslash authority delimiter

Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C as an authority delimiter. Node's native WHATWG URL parser, used by fetch, undici, and Node's http and https clients, normalizes the...

7.5CVSS0.00254EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/07/19 2:8 p.m.25 views

CVE-2026-16221

Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C as an authority delimiter. Node's native WHATWG URL parser, used by fetch, undici, and Node's http and https clients, normalizes the...

7.5CVSS5.3AI score0.00254EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/07/19 2:8 p.m.7 views

CVE-2026-16221 fast-uri vulnerable to host confusion via literal backslash authority delimiter

Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C as an authority delimiter. Node's native WHATWG URL parser, used by fetch, undici, and Node's http and https clients, normalizes the...

7.5CVSS5.2AI score0.00254EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/19 2:8 p.m.9 views

CVE-2026-16221 fast-uri vulnerable to host confusion via literal backslash authority delimiter

Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character U+005C as an authority delimiter. Node's native WHATWG URL parser, used by fetch, undici, and Node's http and https clients, normalizes the...

7.5CVSS5.8AI score
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/07/19 12:55 p.m.113 views

Exploit for CVE-2026-60137

Compromise Scanner for wp2shell read-only A standalone, r...

9.8CVSS5.7AI score0.95605EPSS
SaveExploits75
OSV
OSV
added 2026/07/19 12:16 p.m.9 views

DEBIAN-CVE-2026-53403

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

5.5CVSS5.3AI score0.0013EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/19 12:16 p.m.17 views

CVE-2026-53403

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

5.5CVSS0.0013EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/19 12:16 p.m.7 views

UBUNTU-CVE-2026-53403

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

5.5CVSS5.7AI score0.0013EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/19 12:2 p.m.41 views

CVE-2026-53403

The CVE-2026-53403 issue is a Linux kernel framebuffer (fbdev) risk fixed by correcting fb_new_modelist to preserve the current mode in info->var when the modelist is replaced. Root cause: info->var must have a matching entry in info->modelist; if store_modes() or fb_new_modelist() chang...

5.5CVSS5.5AI score0.0013EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/19 12:2 p.m.14 views

CVE-2026-53403

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

5.3AI score0.0013EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
added 2026/07/19 12:2 p.m.17 views

CVE-2026-53403

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

5.5CVSS5.3AI score0.0013EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/19 12:2 p.m.18 views

EUVD-2026-45458

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

5.4AI score0.0013EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/19 12:2 p.m.40 views

CVE-2026-53403 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

0.0013EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/19 12:2 p.m.8 views

CVE-2026-53403 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

5.4AI score
SaveExploits0References11
OSV
OSV
added 2026/07/19 11:11 a.m.2 views

OESA-2026-3087 dnsmasq security update

Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portabl...

5.9CVSS6.1AI score0.00403EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/19 11:11 a.m.7 views

OESA-2026-3049 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

8.2CVSS5.6AI score0.00279EPSS
SaveExploits0References3
Rows per page
Query Builder