Lucene search
+L

33201 matches found

EUVD
EUVD
added 2026/04/22 3:31 p.m.18 views

EUVD-2026-24803

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immediately runs into hw state left by previous process exited with the same PASID, it's possible that page faults are still...

5.7AI score0.00122EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/22 2:56 p.m.9 views

GHSA-MH6W-VXFF-9WQP PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes

Impact PHPUnit forwards PHP INI settings to child processes used for isolated/PHPT test execution as -d name=value command-line arguments without neutralizing INI metacharacters. Because PHP's INI parser interprets " as a string delimiter, ; as the start of a comment, and most importantly a newli...

7.8CVSS6.2AI score
SaveExploits0References5
Snyk
Snyk
added 2026/04/22 2:56 p.m.8 views

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the settingsToParameters process. An attacker can execute arbitrary code and alter the configuration of child processes by injecting newline characters into PHP INI values that are forwarded to child processes. This...

8.5CVSS6.3AI score0.00191EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/22 2:16 p.m.14 views

CVE-2026-31462

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immediately runs into hw state left by previous process exited with the same PASID, it's possible that page faults are still...

5.5CVSS0.00122EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/22 2:16 p.m.14 views

UBUNTU-CVE-2026-33599

A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade Lua option to newServer or autoupgrade YAML settings. DDR upgrade is not enabled by default...

8.1CVSS5.8AI score0.00283EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/22 1:53 p.m.35 views

CVE-2026-31462

CVE-2026-31462 concerns the Linux kernel DRM/AMDGPU PASID reuse issue where a process reusing a PASID could leave pending page faults in the IH ring buffer after exit. The fix uses an idr cyclic allocator to prevent immediate PASID reuse. Connected OSV entries show Root has patched this CVE in ro...

5.5CVSS5.7AI score0.00122EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/04/22 1:53 p.m.9 views

CVE-2026-31462 drm/amdgpu: prevent immediate PASID reuse case

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immediately runs into hw state left by previous process exited with the same PASID, it's possible that page faults are still...

5.9AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/04/22 1:53 p.m.40 views

CVE-2026-31462 drm/amdgpu: prevent immediate PASID reuse case

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immediately runs into hw state left by previous process exited with the same PASID, it's possible that page faults are still...

0.00122EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/22 1:36 p.m.8 views

USN-8197-1 slurm-llnl vulnerability

It was discovered that Slurm did not properly handle access control when dealing with RPC traffic through PMI2 and PMIx, which could allow an unprivileged user to send data to an arbitrary unix socket on the host. An attacker could possibly use this issue to execute arbitrary code as the root use...

9CVSS6.1AI score0.02792EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/22 1:25 p.m.32 views

CVE-2026-5750

CVE-2026-5750 describes an IDOR vulnerability in the Fullstep V5 registration flow. Authenticated users can access data belonging to other registered users via vulnerable endpoints, notably “/api/suppliers/v1/suppliers//false” (listing user information) and “/#/supplier-registration/supplier-regi...

7.6CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/22 1:25 p.m.37 views

CVE-2026-5750 Insecure direct object reference (IDOR) vulnerability in Fullstep

An insecure direct object reference IDOR vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users through various vulnerable authenticated resources in the application. The vulnerable endpoints result from:...

7.6CVSS0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/22 1:23 p.m.40 views

CVE-2026-5749 Inadequate access control vulnerability in Fullstep

Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated API resources. Successful exploitation of this vulnerability could allow an unauthenticated attacker to compromise th...

8.7CVSS0.0027EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/04/22 11:49 a.m.10 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

8.8CVSS5.7AI score0.0072EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/22 11:49 a.m.14 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash...

8.8CVSS5.7AI score0.00452EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/22 11:49 a.m.13 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

8.8CVSS7.2AI score0.00295EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/22 11:49 a.m.9 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

8.8CVSS7.3AI score0.00961EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/22 11:49 a.m.10 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

8.8CVSS7.2AI score0.00295EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/22 11:49 a.m.12 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

8.8CVSS5.7AI score0.00572EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/22 11:49 a.m.14 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

8.8CVSS5.7AI score0.00731EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/22 11:49 a.m.10 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

8.8CVSS7.2AI score0.0038EPSS
SaveExploits0References5
Rows per page
Query Builder