Lucene search
+L

107830 matches found

OSV
OSV
•added 2026/10/02 7:36 a.m.•8 views

SUSE-SU-2026:4412-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...

8.2CVSS6AI score0.0039EPSS
SaveExploits0References13
OSV
OSV
•added 2026/10/02 6:40 a.m.•6 views

MGASA-2026-0465 Updated wireshark package fixes security vulnerabilities

Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-15163 Heap-based Buffer Overflow in ciscodump. CVE-2026-15164 Heap-based Buffer Overflow in Wireshark. CVE-2026-15165 Stack-based Buffer Overflow in Wireshark. CVE-2026-15166 Stack-based Buffer Overflow in Wireshark...

7.5CVSS6.3AI score0.00294EPSS
SaveExploits9References7
Mageia
Mageia
•added 2026/10/02 6:40 a.m.•11 views

Updated wireshark package fixes security vulnerabilities

Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-15163 Heap-based Buffer Overflow in ciscodump. CVE-2026-15164 Heap-based Buffer Overflow in Wireshark. CVE-2026-15165 Stack-based Buffer Overflow in Wireshark. CVE-2026-15166 Stack-based Buffer Overflow in Wireshark...

7.5CVSS6.4AI score0.00294EPSS
SaveExploits9References6
RedhatCVE
RedhatCVE
•added 2026/10/02 12:53 a.m.•13 views

CVE-2026-63686

A flaw was found in the modxml2enc module of the Apache HTTP Server. An untrusted backend server can cause a Denial of Service DoS by returning a crafted response with a character set whose conversion partially succeeds and then fails. Processing this response triggers an invalid memory access nu...

7.5CVSS6AI score0.00478EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/10/02 12:52 a.m.•12 views

CVE-2026-46729

A flaw was found in the modheartmonitor module of the Apache HTTP Server. A remote, unauthenticated attacker can exploit a NULL pointer dereference vulnerability when the module is configured with a unicast listener. By sending specially crafted network traffic to the listening service, an attack...

7.5CVSS5.6AI score0.00468EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/02 12:31 a.m.•15 views

EUVD-2026-91136

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

9.3CVSS6.1AI score0.00636EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/02 12:16 a.m.•11 views

CVE-2026-103764

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

9.8CVSS0.00636EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•6 views

CVE-2026-66081: Access of Uninitialized Pointer

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.9AI score0.00426EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•5 views

CVE-2026-66859: NULL Pointer Dereference

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.8AI score0.00426EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•10 views

PT-2026-104293

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A NULL pointer dereference occurs within the Apache Thrift PHP bindings. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that is NULL,...

8.7CVSS5.5AI score0.00426EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/10/02 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-46729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through...

7.5CVSS5.8AI score0.00468EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/02 12:00 a.m.•13 views

Siemens SIMATIC S7-1500 CPU 1518 MFP Expired Pointer Dereference (CVE-2026-53006)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506017; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

9.8CVSS6.2AI score0.00394EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/02 12:00 a.m.•13 views

NVIDIA Windows GPU Display Driver (September 2026)

The NVIDIA GPU display driver software on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user...

5.5CVSS5.7AI score0.0012EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/10/02 12:00 a.m.•10 views

CVE-2026-47517

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

5.5CVSS5.6AI score0.00115EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/10/02 12:00 a.m.•10 views

CVE-2026-47549

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged local user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service...

5.5CVSS5.8AI score0.00115EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/10/02 12:00 a.m.•9 views

CVE-2026-47557

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/10/02 12:00 a.m.•8 views

CVE-2026-47563

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tamperi...

7.8CVSS5.7AI score0.00136EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/02 12:00 a.m.•8 views

UBUNTU-CVE-2026-73857

GHSA-jx3r-phvx-2jmj: XML request body processor dereferences an uninitialized parser context pointer...

5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•10 views

CVE-2026-103764: Untrusted Pointer Dereference

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

9.8CVSS6.1AI score0.00636EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•8 views

CVE-2026-97876: Untrusted Pointer Dereference

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

6.4CVSS6.1AI score0.00115EPSS
SaveExploits0References2
Rows per page
Query Builder