Lucene search
+L

36325 matches found

Snyk
Snyk
added 2026/06/08 11:16 p.m.9 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the bz2.BZ2Decompressor objects. An attacker can cause out-of-bounds writes to a stack buffer by reusing a decompressor object after a decompression error and providing crafted input. This can result in...

8.2CVSS5.5AI score0.00428EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/06/08 8:11 p.m.16 views

WordPress Blocksy theme <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Quốc Huy jtwings - Puramu in WordPress Theme Blocksy versions = 2.1.41...

8.8CVSS5.5AI score0.01177EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/08 8:1 p.m.12 views

CVE-2026-44541 Fides: DOM-based XSS vulnerability in fides.js via fides_description override

Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fidesdescription override. This issue has been patched in version 2.84.5...

7CVSS5.3AI score0.00297EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/08 5:16 p.m.27 views

CVE-2026-46311

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drmexec to take both locks i.e vm root bo and wptrobj bo to access the mapping data properly. This fixes the security issue of unmap the wptrobj while a queue creation is in...

7.8CVSS0.00112EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/08 5:16 p.m.7 views

CVE-2026-46312

In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vmaflags in vb2dmasgmmap vb2dmacontig sets VMA flags VMDONTEXPAND and VMDONTDUMP and I do not see a reason why vb2dmasg should behave differently. This avoids hitting WARNON!vma-vmflags & VMDONTEXPAND; in...

5.5CVSS5.3AI score0.00114EPSS
SaveExploits0References26
ATTACKERKB
ATTACKERKB
added 2026/06/08 3:50 p.m.10 views

CVE-2026-46311

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drmexec to take both locks i.e vm root bo and wptrobj bo to access the mapping data properly. This fixes the security issue of unmap the wptrobj while a queue creation is in...

5.4AI score0.00112EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/08 3:50 p.m.54 views

CVE-2026-46311 drm/amdgpu/userq: fix access to stale wptr mapping

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drmexec to take both locks i.e vm root bo and wptrobj bo to access the mapping data properly. This fixes the security issue of unmap the wptrobj while a queue creation is in...

7.8CVSS0.00112EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/08 3:50 p.m.52 views

CVE-2026-46311

CVE-2026-46311 (Linux kernel) involves the drm/amdgpu/userq path where access to a stale wptr mapping could occur during queue creation. The root cause is improper locking when accessing the mapping data, risking unmapping of wptr_obj while a queue is in progress and another BO is at the same add...

7.8CVSS5.4AI score0.00112EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2026/06/08 3:16 p.m.13 views

firefox: thunderbird: Use-after-free in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Networking component...

7.5CVSS5.4AI score0.00317EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/06/08 3:11 p.m.13 views

firefox: thunderbird: Use-after-free in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Networking component...

7.5CVSS5.4AI score0.00317EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/06/08 3:4 p.m.16 views

firefox: thunderbird: Use-after-free in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Networking component...

7.5CVSS5.4AI score0.00317EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/06/08 3:4 p.m.19 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.8CVSS5.5AI score0.00446EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/06/08 2:58 p.m.13 views

firefox: thunderbird: Use-after-free in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Networking component...

7.5CVSS5.4AI score0.00317EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2026/06/08 1:55 p.m.13 views

Security update for mutt

This update for mutt fixes the following issues CVE-2026-43859: strfcpy used instead of memcpy for the IMAP authcram MD5 digest bsc1263897. CVE-2026-43860: truncation of hashpasswd by one byte for IMAP authcram MD5 digest bsc1263896. CVE-2026-43861: missing check for \0 in urlpctdecode bsc1263895...

6.9CVSS5.4AI score0.00201EPSS
SaveExploits0References26
OSV
OSV
added 2026/06/08 1:55 p.m.12 views

SUSE-SU-2026:2301-1 Security update for mutt

This update for mutt fixes the following issues - CVE-2026-43859: strfcpy used instead of memcpy for the IMAP authcram MD5 digest bsc1263897. - CVE-2026-43860: truncation of hashpasswd by one byte for IMAP authcram MD5 digest bsc1263896. - CVE-2026-43861: missing check for \0 in urlpctdecode...

3.7CVSS5.4AI score0.00201EPSS
SaveExploits0References14
SUSE Linux
SUSE Linux
added 2026/06/08 1:54 p.m.10 views

Security update for mutt

This update for mutt fixes the following issues CVE-2026-43859: strfcpy used instead of memcpy for the IMAP authcram MD5 digest bsc1263897. CVE-2026-43860: truncation of hashpasswd by one byte for IMAP authcram MD5 digest bsc1263896. CVE-2026-43861: missing check for \0 in urlpctdecode bsc1263895...

6.9CVSS5.4AI score0.00201EPSS
SaveExploits0References26
Patchstack
Patchstack
added 2026/06/08 11:47 a.m.16 views

WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin JetEngine versions = 3.8.9.1...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
added 2026/06/08 10:43 a.m.109 views

OWASP_Top10_Web_Pentest

🔓 Week 04 — Web Application Penetration Testing OWASP Top 10...

5.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/06/08 3:13 a.m.13 views

serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization

A flaw was found in serialize-javascript. An attacker can exploit this vulnerability by providing a specially crafted "array-like" object with an excessively large length property during the serialization process. This action causes the application to enter an intensive loop, leading to 100% CPU...

7.5CVSS5.4AI score0.00472EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/06/08 2:2 a.m.24 views

serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization

A flaw was found in serialize-javascript. An attacker can exploit this vulnerability by providing a specially crafted "array-like" object with an excessively large length property during the serialization process. This action causes the application to enter an intensive loop, leading to 100% CPU...

7.5CVSS5.4AI score0.00472EPSS
SaveExploits0References7
Rows per page
Query Builder