Lucene search
+L

5873 matches found

RedhatCVE
RedhatCVE
added 2026/08/24 1:30 p.m.4 views

CVE-2026-74598

A flaw was found in the Linux kernel's IPv6 networking stack. An off-by-one error in the validation of the Route Information option length RFC 4191 allows a remote attacker to craft a Router Advertisement RA packet. This crafted packet can cause the kernel to read up to 8 bytes beyond the intende...

7CVSS5.3AI score0.0022EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/24 11:16 a.m.7 views

CVE-2026-76172

fast-uri is a URI parser for Node.js. During parsing it runs a legacy decoding pass over the scheme component and never re-escapes the result, and serialization writes the scheme back out verbatim, unlike the host component which is re-escaped. As a result an input whose scheme carries...

7.5CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 10:07 a.m.10 views

CVE-2026-76172

fast-uri , a URI parser for Node.js, is vulnerable to host confusion via percent-encoded scheme normalization . The root cause is a legacy decoding pass applied to the scheme component that is never re-escaped before serialization, causing a mismatch between the parsed host (undefined) and the re...

7.5CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 10:07 a.m.7 views

EUVD-2026-64773

fast-uri is a URI parser for Node.js. During parsing it runs a legacy decoding pass over the scheme component and never re-escapes the result, and serialization writes the scheme back out verbatim, unlike the host component which is re-escaped. As a result an input whose scheme carries...

7.5CVSS5.5AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/08/23 12:06 a.m.6 views

SUSE CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

5.6AI score0.0022EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/08/23 12:03 a.m.6 views

SUSE CVE-2026-74732

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110setavmute Some older DCE timing generators do not implement istgenabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference o...

5.5AI score0.00209EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/22 4:16 p.m.6 views

CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

0.0022EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/22 3:31 p.m.10 views

CVE-2026-74598

CVE-2026-74598 is an off-by-one length validation error in the Linux kernel's rt6_route_rcv() function, which processes IPv6 Route Information options (RFC 4191) from Router Advertisements. The code accepts length >= 2 and length >= 1 where the RFC requires stricter minimums, causing ipv6_a...

5.6AI score0.0022EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/22 3:31 p.m.21 views

CVE-2026-74598 ipv6: fix Route Information option length validation

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

0.0022EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/22 3:31 p.m.8 views

EUVD-2026-64535

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

5.6AI score0.0022EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/22 3:31 p.m.5 views

CVE-2026-74598 ipv6: fix Route Information option length validation

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

5.7AI score
SaveExploits0References11
Cvelist
Cvelist
added 2026/08/22 2:12 p.m.23 views

CVE-2026-68767 hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl()

hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZLARGE...

6.9CVSS0.00172EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/22 2:12 p.m.7 views

CVE-2026-68767 hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl()

hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZLARGE...

6.9CVSS5.7AI score
SaveExploits0References7
CVE
CVE
added 2026/08/22 2:12 p.m.13 views

CVE-2026-68767

hashcat through 7.1.2 contains an off-by-one out-of-bounds heap write in the fgetl() function (src/filehandling.c). When an input line is exactly HCBUFSIZ_LARGE bytes long, the function writes a null terminator one byte past the caller's buffer. An attacker can trigger this by supplying a crafted...

6.9CVSS5.5AI score0.00172EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.10 views

PT-2026-79737

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110 set avmute Some older DCE timing generators do not implement is tg enabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereferen...

5.4AI score0.00209EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.10 views

PT-2026-79603

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6 route rcv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of...

5.4AI score0.0022EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-68767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length...

6.9CVSS5.8AI score0.00172EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-74598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both chec...

5.6AI score0.0022EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.10 views

PT-2026-79567

hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZ LARGE...

6.9CVSS5.5AI score0.00172EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 5:53 p.m.39 views

CVE-2026-63387

libevent <2.1.13 and

7CVSS5.8AI score0.00349EPSS
SaveExploits0References3
Rows per page
Query Builder