Lucene search
+L

36659 matches found

Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.55 views

PT-2026-64707

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd cmipci spdif controls does not check the return value before dereferencing kctl-id.device, which can lead to a NULL...

5.7AI score0.0018EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-64457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NU...

5.5AI score0.00175EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.26 views

PT-2026-64638

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker debugfs add creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both count objects and scan objects, which is not...

5.8AI score0.00173EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.12 views

PT-2026-64703

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd gf1 pcm volume control does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

5.7AI score0.00181EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-64480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the...

5.4AI score0.00181EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-64511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 ACPI: NFIT: Install Notify handler before getting NFIT table, acpinfitprobe...

5.5AI score0.00156EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-64486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value befo...

5.4AI score0.0018EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/24 6:35 p.m.13 views

GO-2026-5525 GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) in github.com/osrg/gobgp

GoBGP has a panic in AdjRib.Update via malformed BGP Update message Nil Pointer Dereference in github.com/osrg/gobgp...

7.5CVSS5.8AI score0.00418EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/07/24 4:13 p.m.12 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference and out-of-bounds read in the native XXHash implementations reached through XXHashFactory.nativeInstance, where SafeUtils.checkRange skips all array validation when len == 0 and lets invalid references or ranges...

8.3CVSS5.9AI score0.00453EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/24 3:23 p.m.17 views

EUVD-2026-48623

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xxhfisendperftable Check the return value of kzalloc to prevent a NULL pointer dereference on allocation failure. Patchwork: https://patchwork.freedesktop.org/patch/721342/...

5.8AI score0.00108EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/24 3:58 a.m.12 views

MGASA-2026-0292 Updated lrzip package fixes security vulnerabilities

The updated package fixes security vulnerabilities: ckolivas lrzip stream.c lzmadecompressbuf use after free. CVE-2025-15570 ckolivas lrzip strtoll.c GIstrtollinternal null pointer dereference. CVE-2025-9396...

7.8CVSS5.2AI score0.00266EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.8 views

PT-2026-76594

Name of the Vulnerable Software and Affected Versions kin-openapi versions 0.2.0 through 0.143.0 Description An unauthenticated remote denial of service exists when the openapi3filter.ValidateRequest function processes an operation that declares a content parameter where the application/json medi...

5.3CVSS5.4AI score0.00372EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/23 9:17 p.m.13 views

CVE-2026-50103

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

7.1CVSS0.00269EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/07/23 8:50 p.m.19 views

EUVD-2026-48396

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

7.1CVSS5.3AI score0.00269EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/07/23 12:00 a.m.24 views

PT-2026-64177

Name of the Vulnerable Software and Affected Versions MZ Automation libIEC61850 affected versions not specified Description A NULL pointer dereference occurs in the L2 GOOSE and R-GOOSE shared parser. This issue allows a network-adjacent attacker to crash a subscribing application by sending a...

7.1CVSS5.9AI score0.00269EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/07/23 12:00 a.m.22 views

PT-2026-64176

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A NULL pointer dereference occurs in the MMS Write Named Variable List handler. A network adjacent attacker can cause the server to crash by sending a WriteReque...

8.7CVSS5.9AI score0.0046EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.9 views

TencentOS Server 2: freerdp (TSSA-2026:0751)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0751 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

9.8CVSS6.5AI score0.00599EPSS
SaveExploits7References9
OSV
OSV
added 2026/07/22 2:17 p.m.7 views

ALPINE-CVE-2026-55717

In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...

5.9CVSS5.8AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/22 2:17 p.m.10 views

CVE-2026-50046

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS DoT forwarded queries is tied to a struct's 'servicedquery' lifetime but also referenced by another struct 'waitingtcp'. When the owning struct is jostled out of the mesh while the DoT TCP stream is...

5.9CVSS0.00237EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/22 2:17 p.m.7 views

ALPINE-CVE-2026-50046

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS DoT forwarded queries is tied to a struct's 'servicedquery' lifetime but also referenced by another struct 'waitingtcp'. When the owning struct is jostled out of the mesh while the DoT TCP stream is...

5.9CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Rows per page
Query Builder