Lucene search
+L

85187 matches found

EUVD
EUVD
added 2026/08/24 6:31 p.m.3 views

EUVD-2026-64981

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...

8.7CVSS5.6AI score
SaveExploits0References3
EUVD
EUVD
added 2026/08/24 6:31 p.m.5 views

EUVD-2026-64979

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vulnerability via a crafted request to cra...

6.9CVSS5.6AI score
SaveExploits0References3
NVD
NVD
added 2026/08/24 6:17 p.m.3 views

CVE-2026-71922

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...

8.7CVSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.3 views

CVE-2026-71920

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vulnerability via a crafted request to cra...

6.9CVSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 5:20 p.m.3 views

CVE-2026-74688

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability arises when the sctpmakeheartbeatack function caches a destination transport without taking a proper reference. If the associated peer transport is removed while a HEARTBEAT ACK chu...

7CVSS5.9AI score0.0022EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 5:17 p.m.3 views

CVE-2026-74684

A flaw was found in the Linux kernel's net: tap module. A NULL pointer dereference can occur in the tapgetuserxdp function when processing an XDP buffer with a GSO virtio-net header and a zero protocol. This can be triggered by a malicious guest in a virtualized environment, leading to a system...

7CVSS5.6AI score0.00206EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/24 5:07 p.m.9 views

CVE-2026-71922 DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...

8.7CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 5:07 p.m.5 views

CVE-2026-71920 DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vulnerability via a crafted request to cra...

6.9CVSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 4:24 p.m.3 views

CVE-2026-74665

A flaw was found in the Linux kernel. Incorrect length accounting for skb socket buffer fragments after an eXpress Data Path XDP program adjusts the fragment area can lead to an out-of-bounds read. This allows an attacker to potentially disclose sensitive kernel pointers and corrupt user-space...

5.5CVSS5.2AI score0.00209EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 3:01 p.m.3 views

CVE-2026-47753

A flaw was found in Incus, a system container and virtual machine manager. An authenticated user with permissions to create instances in any project can remotely trigger a nil-pointer dereference by uploading a specially crafted backup tarball. This vulnerability causes the Incus daemon to panic...

7.3CVSS5.3AI score0.00141EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 2:50 p.m.3 views

CVE-2026-48754

A flaw was found in Incus, a system container and virtual machine manager. An authenticated user with cancreateinstances permission can crash the incusd daemon by uploading a specially crafted instance backup tarball. This vulnerability, a nil-pointer dereference, leads to a Denial of Service DoS...

5.3CVSS5.3AI score0.00226EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 2:50 p.m.3 views

CVE-2026-48756

A flaw was found in Incus, a system container and virtual machine manager. An authenticated user with cancreatestoragevolumes permission can crash the incusd daemon. This occurs by uploading a crafted backup tarball where the volumesnapshots.expiresat field is absent, leading to an unguarded...

5.3CVSS5.3AI score0.00226EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 1:31 p.m.3 views

CVE-2026-74610

A flaw was found in the Linux kernel's Transport Layer Security TLS implementation. An unprivileged local user could trigger a kernel null pointer dereference by sending specific data on a loopback TCP socket with the TLS Upper Layer Protocol ULP attached. This vulnerability occurs because the TL...

7CVSS5.6AI score0.00209EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 12:09 p.m.4 views

CVE-2026-74732

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. When a user turns off the display over HDMI on systems with older DCE timing generators, the driver attempts to call a function istgenabled that may not be implemented. This unconditional call can lead to a NULL pointer...

5.5CVSS5.3AI score0.00209EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 11:54 a.m.4 views

CVE-2026-74614

A flaw was found in the Linux kernel's vsock/virtio component. During system suspend and resume operations, a worker process might incorrectly retain a pointer to a deleted virtual queue while observing a replacement queue's running state. This inconsistent state can lead to system instability or...

7CVSS5.2AI score0.00215EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/24 4:46 a.m.6 views

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

7.5CVSS5.3AI score0.0047EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:46 a.m.6 views

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS5.3AI score0.0047EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/24 4:45 a.m.7 views

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS5.3AI score0.0047EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/24 4:45 a.m.6 views

libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

7.5CVSS5.3AI score0.0047EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 3:54 a.m.7 views

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

7.5CVSS5.3AI score0.0047EPSS
SaveExploits0References2
Rows per page
Query Builder