Lucene search
K

16 matches found

ATTACKERKB
ATTACKERKB
added 3 days ago5 views

CVE-2026-49135

CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by exploiting predictable file paths in the release notarization workflow. Attackers with access to the same host can read...

7.2CVSS5.8AI score0.00023EPSS
Exploits0References5
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: nvme: fixed memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace...

7.1CVSS5.8AI score0.00018EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/03/19 8:3 a.m.1 views

nvme: fix memory allocation in nvme_pr_read_keys()

...

7.1CVSS5.8AI score0.00018EPSS
Exploits0
NVD
NVD
added 2026/03/18 11:16 a.m.0 views

CVE-2026-23244

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...

7.1CVSS0.00018EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2026/03/18 11:16 a.m.1 views

CVE-2026-23244

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...

7.1CVSS5.7AI score0.00018EPSS
Exploits0References6
OSV
OSV
added 2026/03/18 11:16 a.m.2 views

UBUNTU-CVE-2026-23244

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...

7.1CVSS5.7AI score0.00018EPSS
Exploits0References7
OSV
OSV
added 2026/03/18 10:5 a.m.1 views

CVE-2026-23244 nvme: fix memory allocation in nvme_pr_read_keys()

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...

7.1CVSS5.7AI score0.00018EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2026/03/18 10:5 a.m.2 views

CVE-2026-23244

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...

7.1CVSS5.2AI score0.00018EPSS
Exploits0
CVE
CVE
added 2026/03/18 10:5 a.m.11 views

CVE-2026-23244

CVE-2026-23244 affects the Linux kernel and stems from nvme_pr_read_keys() allocating memory based on a user-supplied num_keys value. The code uses num_keys to determine the rse allocation size up to an upper limit PR_KEYS_MAX (64K). A malicious or buggy userspace input can cause a kzalloc-based ...

7.1CVSS5.7AI score0.00018EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.2 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of the numkeys value provided by the user in the nvmeprreadkeys function. This...

7.1CVSS5.8AI score0.00018EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.2 views

Juju 安全漏洞

Juju is a canonical Juju open-source application orchestration engine. Versions of Juju from 3.0.0 to 3.6.18 contained security vulnerabilities. These vulnerabilities were caused by incorrect authorization in the secret-set tool, which could allow authorized users to update key contents and read ...

8.8CVSS6.4AI score0.00081EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-23244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. T...

7.1CVSS5.8AI score0.00018EPSS
Exploits0References3
NVD
NVD
added 2026/01/07 12:16 p.m.1 views

CVE-2025-12449

The aBlocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data and disclosure of sensitive information due to missing capability checks on multiple AJAX actions in all versions up to, and including, 2.4.0. This makes it possible for authenticated...

5.4CVSS0.00015EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-26047

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvme pr read keys nvme pr read keys takes num keys from userspace and uses it to calculate the allocation size for rse via struct size. The upper limit is PR KEYS MAX 64K. A malicious or buggy...

5.7AI score0.00018EPSS
Exploits0References8
OSV
OSV
added 2023/11/20 4:4 p.m.1 views

USN-6489-1 tang vulnerability

Brian McDermott discovered that Tang incorrectly handled permissions when creating/rotating keys. A local attacker could possibly use this issue to read the keys...

5.3CVSS5.8AI score0.00022EPSS
Exploits1References2
CNVD
CNVD
added 2016/01/08 12:0 a.m.2 views

IBM MQ M2000 Appliance Information Disclosure Vulnerability

The IBM MQ M2000 Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM USA. A security vulnerability exists in queue manager in IBM MQ M2000 Appliance versions prior to 8.0.0.4. A local attacker can exploit this vulnerability by leveraging the...

5.6CVSS6.5AI score0.00041EPSS
Exploits0References1
Rows per page
Query Builder