Lucene search
+L

82775 matches found

Debian CVE
Debian CVE
added 2026/07/20 4:23 p.m.10 views

CVE-2026-35590

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in...

6.8CVSS5.3AI score0.0012EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/20 2:19 p.m.14 views

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL

Summary Multiple vulnerabilities in OpenSSL that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-22796 DESCRIPTION: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS7 data where an ASN1TYPE union...

7.5CVSS7.7AI score0.00844EPSS
SaveExploits2Affected Software1
RedhatCVE
RedhatCVE
added 2026/07/20 2:17 p.m.10 views

CVE-2026-53398

A flaw was found in the Linux kernel's Network File System Daemon NFSD. The nfsd4decodesecinfononame function does not properly initialize a pointer sinexp before processing an incoming data stream. If the data stream is malformed or truncated, the uninitialized pointer can retain stale data from...

9.8CVSS5.3AI score0.00514EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/20 2:9 p.m.14 views

CVE-2026-53392

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

7.5CVSS5.4AI score0.00501EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/20 2:9 p.m.9 views

CVE-2026-53391

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

7.5CVSS5.4AI score0.00517EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/20 1:47 p.m.8 views

CVE-2026-64052

A flaw was found in the Linux kernel's bio-integrity module. The biointegritymapuser function does not correctly handle partially pinned user pages, which can occur when pinuserpagesfast returns fewer pages than requested. This oversight leads to a null-pointer dereference when attempting to acce...

5.5CVSS5.3AI score0.00168EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/20 12:19 p.m.10 views

CVE-2026-63762

SurrealDB before v2.6.1 and before v3.0.0-beta.3 contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scripting capability disabled by default. Any user able to execute arbitrary queries — including unauthenticated guests when...

6.5CVSS0.00254EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/20 12:4 p.m.8 views

CVE-2026-63751

SurrealDB versions before 3.1.0 contain a field-level permission bypass vulnerability in JSON Patch operations that allows authenticated users to read protected fields. Attackers can use UPDATE PATCH with an empty from pointer in copy or move operations to duplicate all record fields, including...

5.3CVSS5.3AI score0.00173EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/07/20 8:28 a.m.11 views

CVE-2026-64116

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM module. This vulnerability allows a remote attacker to cause a system crash, leading to a Denial of Service DoS. The flaw occurs because the ipv6hopioam function does not properly validate a point...

7.5CVSS5.4AI score0.00511EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/20 8:16 a.m.14 views

CVE-2026-64048

A flaw was found in the Linux kernel's Server-Message-Block Direct SMC-D client. A remote attacker can exploit this vulnerability by sending a specially crafted SMC-Dv2 proposal with a Channel Identifier CHID of 0. This malicious proposal can cause a null pointer dereference in the kernel's SMC...

7.5CVSS5.5AI score0.00479EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/20 6:49 a.m.8 views

httpd: NULL pointer dereference via specially crafted request

A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...

7.5CVSS7.2AI score0.00594EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-64116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: ioam: add NULL check for idev in ipv6hopioam Reported by Sashiko: The function ipv6hopioam accesses in6devgetskb-dev-cnf.ioam6enabled without validating t...

7.5CVSS5.9AI score0.00511EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-64207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N additional packets to its parent before returning...

5.5AI score0.00155EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-64141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compareguidkey sessionfdcheck walks the per-inode...

7.5CVSS5.3AI score0.00441EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-64094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnllock held, a hardif might be retrieved as primary interface of a meshif, but...

5.8AI score0.0021EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.8 views

Oracle Linux 10 : kernel (ELSA-2026-25191)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25191 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

9.8CVSS7.4AI score0.03234EPSS
SaveExploits64References8
Positive Technologies
Positive Technologies
added 2026/07/20 12:0 a.m.18 views

PT-2026-61643

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team xmit during mode change team change mode clears team-ops with memset before restoring safe dummy handlers via team adjust ops. A concurrent team xmit running under RCU on another CP...

5.5AI score0.0015EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-64190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via...

5.9AI score0.0015EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-64052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: bio-integrity: Fix null-ptr-deref in biointegritymapuser pinuserpagesfast can partially succeed and return the number of pages that were actually pinned...

5.8AI score0.00168EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-63991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: check skbclone return value in sendmcastpkt The skbclone function can return NULL if memory allocation fails. sendmcastpkt calls skbclone...

5.9AI score0.00177EPSS
SaveExploits0References3
Rows per page
Query Builder