Lucene search
+L

82791 matches found

Cvelist
Cvelist
added 2026/07/20 4:43 p.m.31 views

CVE-2026-47275 nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in nnimqttv5msgdecodeconnect allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 client including bridge mode with a single packet, causing remote denial of service via SIGSEGV. In nnimqttv5msgdecodeconnect...

2.6CVSS0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/20 4:43 p.m.10 views

CVE-2026-47275

Nanomq has a NULL pointer dereference in nni_mqttv5_msg_decode_connect() (mqtt_codec.c:1863) for versions ≤ 0.24.11. The code iterates CONNECT properties using prop instead of will_prop; when a packet has no connect-level properties but has will properties, dereferencing prop->next can SIGSEGV...

2.6CVSS5.5AI score0.00169EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/20 4:43 p.m.7 views

CVE-2026-47275 nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in nnimqttv5msgdecodeconnect allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 client including bridge mode with a single packet, causing remote denial of service via SIGSEGV. In nnimqttv5msgdecodeconnect...

2.6CVSS5.5AI score
SaveExploits0References3
OSV
OSV
added 2026/07/20 4:27 p.m.7 views

CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

5.5AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/07/20 4:27 p.m.10 views

CVE-2026-64190

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

5.3AI score0.0015EPSS
SaveExploits0
CVE
CVE
added 2026/07/20 4:27 p.m.35 views

CVE-2026-64190

The CVE-2026-64190 entry describes a Linux kernel race in net: team where __team_change_mode() clears team->ops with memset() while a concurrent team_xmit() under RCU can read ops.transmit and call a NULL pointer, causing a kernel NULL pointer dereference. It requires a mode change (CAP_NET_AD...

5.6AI score0.0015EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/20 4:27 p.m.33 views

CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

0.0015EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/20 4:27 p.m.5 views

CVE-2026-64187

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.3AI score0.00161EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2026/07/20 4:27 p.m.10 views

EUVD-2026-46007

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.5AI score0.00161EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/20 4:27 p.m.7 views

CVE-2026-64187 xfs: fail recovery on a committed log item with no regions

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.4AI score
SaveExploits0References10
Cvelist
Cvelist
added 2026/07/20 4:23 p.m.35 views

CVE-2026-35590 Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in...

6.8CVSS0.0012EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/20 4:23 p.m.18 views

CVE-2026-35590

CVE-2026-35590 affects libvips’ EXIF decoder. Versions

6.8CVSS5.3AI score0.0012EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/20 4:23 p.m.10 views

CVE-2026-35590

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in...

6.8CVSS5.3AI score0.0012EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/20 2:19 p.m.14 views

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL

Summary Multiple vulnerabilities in OpenSSL that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-22796 DESCRIPTION: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS7 data where an ASN1TYPE union...

7.5CVSS7.7AI score0.00844EPSS
SaveExploits2Affected Software1
RedhatCVE
RedhatCVE
added 2026/07/20 2:17 p.m.10 views

CVE-2026-53398

A flaw was found in the Linux kernel's Network File System Daemon NFSD. The nfsd4decodesecinfononame function does not properly initialize a pointer sinexp before processing an incoming data stream. If the data stream is malformed or truncated, the uninitialized pointer can retain stale data from...

9.8CVSS5.3AI score0.00514EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/20 2:9 p.m.14 views

CVE-2026-53392

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

7.5CVSS5.4AI score0.00501EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/20 2:9 p.m.9 views

CVE-2026-53391

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

7.5CVSS5.4AI score0.00517EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/20 1:47 p.m.8 views

CVE-2026-64052

A flaw was found in the Linux kernel's bio-integrity module. The biointegritymapuser function does not correctly handle partially pinned user pages, which can occur when pinuserpagesfast returns fewer pages than requested. This oversight leads to a null-pointer dereference when attempting to acce...

5.5CVSS5.3AI score0.00168EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/20 12:19 p.m.10 views

CVE-2026-63762

SurrealDB before v2.6.1 and before v3.0.0-beta.3 contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scripting capability disabled by default. Any user able to execute arbitrary queries — including unauthenticated guests when...

6.5CVSS0.00254EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/20 12:4 p.m.8 views

CVE-2026-63751

SurrealDB versions before 3.1.0 contain a field-level permission bypass vulnerability in JSON Patch operations that allows authenticated users to read protected fields. Attackers can use UPDATE PATCH with an empty from pointer in copy or move operations to duplicate all record fields, including...

5.3CVSS5.3AI score0.00173EPSS
SaveExploits0References3
Rows per page
Query Builder