Lucene search
+L

112164 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•7 views

CVE-2026-100394: Concurrent Execution using Shared Resource with Improper Synchronization

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesentinel.go checked an owned service under servicesLock and later dereferenced pointer-valued serviceStatusToday and...

6.5CVSS5.7AI score0.00424EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•24 views

Security Updates for Microsoft Office Products C2R (October 2026)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-88196, CVE-2026-88197 - Heap-based buffer overflow in Windo...

9.8CVSS7.7AI score0.01172EPSS
SaveExploits0References37
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•12 views

PT-2026-113813

A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP...

8.7CVSS5.7AI score0.00374EPSS
SaveExploits0References2
Redos
Redos
•added 2026/10/14 12:00 a.m.•17 views

ROS-20261014-73-0149

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-114308

Name of the Vulnerable Software and Affected Versions DPDK affected versions not specified Description A flaw exists in the DPDK lib/vhost vhost-crypto component. When mapping a guest descriptor fails, the write-back chain cleanup process may follow an uninitialized next pointer. This behavior ca...

8.8CVSS5.8AI score0.00186EPSS
SaveExploits0References20
Redos
Redos
•added 2026/10/14 12:00 a.m.•19 views

ROS-20261014-73-0151

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00115EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-107613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the...

5.9CVSS5.5AI score0.00308EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•11 views

PT-2026-113859

A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed PIM Bidir message...

7.1CVSS5.7AI score0.00269EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/10/14 12:00 a.m.•11 views

UBUNTU-CVE-2026-98411

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseqdeviceregister If devsetname fails in pwrseqdeviceregister, we jump to the errputpwrseq label before initializing pwrseq-targets. pwrseqrelease will try to iterate over...

6.1AI score0.00209EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•16 views

PT-2026-113787

Name of the Vulnerable Software and Affected Versions NSD affected versions not specified Description Tokens of text in RDATA, such as those found in TXT records, that are under 32 bytes are not verified to remain within the reserved space. This leads to arbitrary sized out-of-bound stack writes,...

8.7CVSS5.9AI score0.00346EPSS
SaveExploits0References12
Redos
Redos
•added 2026/10/14 12:00 a.m.•12 views

ROS-20261014-73-0105

The vulnerability in the src/libbpf.c component of the BPF loader library in Libbpf is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

6.3AI score
SaveExploits0
Redos
Redos
•added 2026/10/14 12:00 a.m.•18 views

ROS-20261014-73-0084

The vulnerability of the function batadvblapurgeclaims in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow a malicious actor to cause...

5.5CVSS6.1AI score0.00119EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•8 views

PT-2026-122468

Уязвимость демона pkid Public Key Infrastructure daemon операционных систем Juniper Networks Junos OS связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью некорректно сформированного пакета,...

7.8CVSS5.8AI score
SaveExploits0References2
Redos
Redos
•added 2026/10/14 12:00 a.m.•12 views

ROS-20261014-73-0088

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00119EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•11 views

PT-2026-113922

A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...

8.2CVSS5.7AI score0.00367EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•12 views

PT-2026-113862

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent network attacker to cause a denial of service via a crafted RSVP packet when MPLS-TE RSVP processing is enabled. The condition can terminate rpd and...

7.1CVSS5.7AI score0.00269EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•6 views

PT-2026-122262

Security vulnerability affects the libjpeg-turbo package. A crafted input file could cause a null pointer dereference in jcopy sample rows when processed by libjpeg-turbo...

5.5CVSS6.3AI score0.00286EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•6 views

CVE-2026-98412: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrsequnitnew If memory allocation fails in pwrsequnitsetupdeps, pwrsequnitput is called to release the partially initialized unit. However, we've never initialized unit-list and...

5.8AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•7 views

CVE-2026-98411: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseqdeviceregister If devsetname fails in pwrseqdeviceregister, we jump to the errputpwrseq label before initializing pwrseq-targets. pwrseqrelease will try to iterate over...

5.9AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•8 views

CVE-2026-110834: NULL Pointer Dereference

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS6.4AI score0.00312EPSS
SaveExploits1References5
Rows per page
Query Builder