Lucene search
K

52 matches found

NVD
NVD
added 2026/06/09 1:16 p.m.12 views

CVE-2026-46322

In the Linux kernel, the following vulnerability has been resolved: tun: free page on buildskb failure in tunxdpone When buildskb fails in tunxdpone, the function sets ret to -ENOMEM and jumps to the out label, which returns without freeing the page that vhostnetbuildxdp allocated for the frame. ...

7.1CVSS0.00129EPSS
Exploits0References8
OSV
OSV
added 2026/06/09 1:16 p.m.6 views

UBUNTU-CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

8.2CVSS5.3AI score0.00235EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.12 views

PT-2026-47757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the tap get user xdp function. When a frame is shorter than ETH HLEN, the function returns -EINVAL; similarly, it returns -ENOMEM if build skb fails. In both...

9.8CVSS5.3AI score0.00457EPSS
Exploits1References77
Vulnrichment
Vulnrichment
added 2026/04/06 6:13 p.m.2 views

CVE-2026-33817 Vulnerability in go.etcd.io/bbolt

Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...

5.9AI score0.00012EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/03/25 9:28 p.m.8 views

AVideo: Remote Code Execution via PHP Temp File in Encoder downloadURL

Summary The downloadVideoFromDownloadURL function in objects/aVideoEncoder.json.php saves remote content to a web-accessible temporary directory using the original URL's filename and extension including .php. By providing an invalid resolution parameter, an attacker triggers an early die via...

8.8CVSS6.7AI score0.00395EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/29 3:32 a.m.3 views

CVE-2025-15170 Advaya Softech GEMS ERP Portal Error Message home.jsp cross site scripting

A security vulnerability has been detected in Advaya Softech GEMS ERP Portal up to 2.1. This affects an unknown part of the file /home.jsp?isError=true of the component Error Message Handler. The manipulation of the argument Message leads to cross site scripting. It is possible to initiate the...

5.3CVSS3.8AI score0.00307EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a page error that could cause deleted BOs to remain in the list...

6.1AI score0.00155EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/12/19 12:41 a.m.6 views

CVE-2025-63949

A Reflected Cross-Site Scripting XSS vulnerability in yohanawi Hotel Management System commit 87e004a allows a remote attacker to execute arbitrary web script via the 'error' parameter in pages/room.php...

6.1CVSS6.2AI score0.00217EPSS
Exploits1References1
CVE
CVE
added 2025/12/18 12:0 a.m.8 views

CVE-2025-63949

CVE-2025-63949 describes a reflected XSS in the yohanawi Hotel Management System. All connected documents identify the vulnerability as caused by an unfiltered input in the error parameter of the pages/room.php endpoint, with the commit noted as 87e004a. The impact is remote code execution of arb...

6.1CVSS5.8AI score0.00217EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly restore partition mode after hibernation recovery, which could result in a GPU page...

6.1AI score0.00162EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/09 2:15 a.m.3 views

CVE-2025-42896 Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform

SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrit...

5.4CVSS6.6AI score0.0026EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an IOMMU page error reporting issue...

8AI score0.00166EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-8810

Malware in sbrugna...

4.8CVSS5.5AI score0.00696EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2024-0898

Malicious code in bioql PyPI...

7.5CVSS6.3AI score0.00758EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-6793

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.01312EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/09/18 8:3 p.m.5 views

CVE-2023-53429

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't check PageError in extentwritepage extentwritepage currenly sets PageError whenever any error happens, and the also checks for PageError to decide if to call error handling. This leads to very unclear responsibility...

5.5CVSS5.4AI score0.00119EPSS
Exploits0References4
OSV
OSV
added 2025/09/18 4:15 p.m.5 views

AZL-71921 CVE-2023-53429 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't check PageError in extentwritepage extentwritepage currenly sets PageError whenever any error happens, and the also checks for PageError to decide if to call error handling. This leads to very unclear responsibility...

5.5CVSS5.5AI score0.00119EPSS
Exploits0References1
OSV
OSV
added 2025/09/18 4:15 p.m.5 views

DEBIAN-CVE-2023-53429

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't check PageError in extentwritepage extentwritepage currenly sets PageError whenever any error happens, and the also checks for PageError to decide if to call error handling. This leads to very unclear responsibility...

5.5CVSS5.1AI score0.00119EPSS
Exploits0References1
CVE
CVE
added 2025/09/18 4:4 p.m.24 views

CVE-2023-53429

CVE-2023-53429 is a Linux kernel vulnerability in the Btrfs extent I/O path: __extent_writepage incorrectly leveraged PageError. The patch removes PageError checks and uses the local return code to propagate submission errors, preventing leakage of error state. Publicly tracked fixes exist in OSV...

5.5CVSS6AI score0.00119EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/18 4:4 p.m.3 views

CVE-2023-53429 btrfs: don't check PageError in __extent_writepage

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't check PageError in extentwritepage extentwritepage currenly sets PageError whenever any error happens, and the also checks for PageError to decide if to call error handling. This leads to very unclear responsibility...

5.7AI score0.00119EPSS
Exploits0References2
Rows per page
Query Builder