Lucene search
+L

82961 matches found

RedhatCVE
RedhatCVE
added 2026/06/30 7:41 a.m.18 views

CVE-2026-53316

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in rascorerasinterruptdetected Fixes a NULL pointer dereference when rascore is NULL and rascore-dev is accessed in the error path. Reported by: Dan Carpenter...

5.5CVSS5.7AI score0.001EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/30 6:29 a.m.42 views

CVE-2026-14164 Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

7.5CVSS0.00353EPSS
SaveExploits0References5
CVE
CVE
added 2026/06/30 6:29 a.m.52 views

CVE-2026-14164

CVE-2026-14164 concerns libarchive’s RAR5 reader. A double-free arises when a filtered_buf pointer remains stale after being freed during unpack state reinitialization, allowing a second free on processing a subsequent archive entry. The issue is triggered by parsing a specially crafted RAR5 arch...

7.5CVSS5.7AI score0.00353EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/06/30 1:44 a.m.10 views

SUSE CVE-2026-47221

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the router filter contains a null pointer dereference vulnerability when handling HTTP 303 See Other internal redirects for body-less non-GET/HEAD requests...

7.5CVSS6AI score0.00327EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2026/06/30 1:42 a.m.15 views

SUSE CVE-2026-53325

In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agpamd64probe A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized environment e.g. qemu/kvm without a physical AMD northbridge. The crash occurs...

4.4CVSS5.8AI score0.00126EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/06/30 1:42 a.m.12 views

SUSE CVE-2026-58051

libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...

8.3CVSS5.8AI score0.00277EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/30 1:29 a.m.12 views

CVE-2026-53324

In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pciname for debugfs directory naming Use pcinamepdev for the per-device debugfs directory instead of hardcoded "0" for PFs and pcislotnamepdev-slot for VFs. The previous approach had two issues: 1. pcislotname...

5.5CVSS5.7AI score0.00115EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/06/30 12:25 a.m.18 views

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...

5.5CVSS5.9AI score0.00131EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/06/30 12:0 a.m.14 views

The vulnerability of the gf_isom_add_track_kind() function in the isomedia/isom_write.c file, implemented by the MP4Box encoder for the GPAC multimedia platform, allows a malicious actor to cause service interruptions using a specially created MP4 file.

The vulnerability of the gfisomaddtrackkind function in the isomedia/isomwrite.c file, belonging to the MP4Box encoder of the GPAC multimedia platform, is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures through the use of a...

7.8CVSS5.9AI score0.00383EPSS
SaveExploits1References7Affected Software2
OSV
OSV
added 2026/06/30 12:0 a.m.9 views

ALSA-2026:33449 Important: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability CVE-2026-6722 PHP: PHP: Denial of Service via improper handling of signed characters in ctype...

9.8CVSS7.1AI score0.00894EPSS
SaveExploits1References16
UbuntuCve
UbuntuCve
added 2026/06/30 12:0 a.m.8 views

CVE-2026-14164

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...

7.5CVSS5.4AI score0.00353EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-53301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reset: amlogic: t7: Fix null reset ops Fix missing reset ops causing kernel null pointer dereference. This SOC's reset is currently not used yet. CVE-2026-53301...

5.5CVSS5.5AI score0.00121EPSS
SaveExploits0References2
Redos
Redos
added 2026/06/30 12:0 a.m.9 views

ROS-20260630-73-0011

The vulnerability of the l2capdisconnectrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

8.8CVSS5.8AI score0.00202EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.17 views

RHEL 9 : php (RHSA-2026:33449)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33449 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php-soap: php-src: PHP SOAP...

9.8CVSS7.2AI score0.00894EPSS
SaveExploits1References17
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-53299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: airoha: Move ndesc initialization at end of airohaqdmainittx If queue entry list allocation fails in airohaqdmainittxqueue routine, airohaqdmacleanuptxqueu...

5.5CVSS5.5AI score0.00121EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/06/30 12:0 a.m.11 views

The vulnerability of the `alloc_choose_arg_map()` function in the `net/ceph/osdmap.c` module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

7CVSS7AI score0.00395EPSS
SaveExploits0References16Affected Software8
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-53278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded...

5.5CVSS5.5AI score0.00107EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
added 2026/06/30 12:0 a.m.11 views

Important: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability CVE-2026-6722 PHP: PHP: Denial of Service via improper handling of signed characters in ctype...

9.8CVSS7.1AI score0.00894EPSS
SaveExploits1References16
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/30 12:0 a.m.9 views

Security update for krb5 (moderate)

openSUSE security update: security update for krb5 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21021-1 Rating: moderate References: bsc1263366 bsc1263367 Cross-References: CVE-2026-40355 CVE-2026-40356 CVSS scores: CVE-2026-40355 SUSE : 5.9...

5.9CVSS7.2AI score0.00611EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2026/06/30 12:0 a.m.7 views

The vulnerability in the function lt9611_connector_init() of the module drivers/gpu/drm/bridge/lontium-lt961.c, a driver for the Direct Rendering Infrastructure (DRI) of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the lt9611connectorinit function in the drivers/gpu/drm/bridge/lontium-lt961.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6AI score0.00175EPSS
SaveExploits0References12Affected Software4
Rows per page
Query Builder