Lucene search
+L

567773 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104764 advisory. Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds vi...

8.8CVSS7.3AI score0.01006EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104774 advisory. Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is t...

8.8CVSS6.6AI score0.01079EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104756 advisory. Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running...

8.8CVSS7.7AI score0.00427EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.7 views

The vulnerability of the evhttp_find_header() function in the evhttp HTTP parser library from the asynchronous event notification library Libevent allows a attacker to cause a service failure.

The vulnerability of the evhttpfindheader function in the evhttp HTTP parser from the Libevent asynchronous event handling library is related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

9.7CVSS5.4AI score0.00587EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.7 views

The vulnerability of the evtag_unmarshal_header() function in the Libevent asynchronous event notification library allows a attacker to cause a service failure.

The vulnerability of the evtagunmarshalheader function in the Libevent asynchronous event notification library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS5.4AI score0.00384EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.12 views

PT-2026-82112

Name of the Vulnerable Software and Affected Versions @logtape/syslog versions prior to 1.3.11 @logtape/syslog versions prior to 2.0.14 @logtape/syslog versions prior to 2.1.5 Description Two output-encoding issues exist in the structured data formatting code when includeStructuredData is set to...

8.6CVSS6AI score0.00306EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.7 views

The vulnerability of the __cdns3_gadget_ep_queue() function in the drivers/usb/cdns3/cdns3-gadget.c driver module allows a hacker to cause a service failure.

The vulnerability of the cdns3gadgetepqueue function in the drivers/usb/cdns3/cdns3-gadget.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS4.1AI score0.00123EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.7 views

The vulnerability of the eth_get_drvinfo() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ethgetdrvinfo function in the drivers/usb/gadget/function/uether.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS4.4AI score0.00123EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.6 views

The vulnerability of the SSHFS file system’s client’s find_base_path() function allows a hacker to execute arbitrary commands.

The vulnerability of the findbasepath function in the SSHFS file system lies in the ability to exploit or modify arguments. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

9.8CVSS5.8AI score0.00199EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.6 views

The vulnerability of the dnsname_to_labels() function in the Libevent event-driven notification library allows a attacker to cause a service failure.

The vulnerability of the dnsnametolabels function in the Libevent asynchronous event notification library is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7CVSS5.6AI score0.00345EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.7 views

The vulnerability of the walk_pud_range() function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the walkpudrange function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS4.3AI score0.00089EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.6 views

The vulnerability of the aml_sfc_probe() function in the drivers/spi/spi-amlogic-spifc-a4.c driver for SPI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amlsfcprobe function in the drivers/spi/spi-amlogic-spifc-a4.c driver for Linux SPI devices is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

5.5CVSS5.6AI score0.00121EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.6 views

The vulnerability of the `Response._make_location_absolute()` function in the `src/webob/response.py` file of the WebOb library, which is used for analyzing HTTP requests and generating HTTP responses. This vulnerability allows attackers to carry out phishing attacks.

The vulnerability of the Response.makelocationabsolute function in the src/webob/response.py file, a library for analyzing HTTP requests and generating HTTP responses in WebOb, is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a remote attacker t...

6.4CVSS5.4AI score0.00339EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.6 views

The vulnerability of the bpf_kprobe_multi_link_attach() function in the kernel/trace/bpfTrace.c module, which supports kernel tracing in Linux operating systems, allows a hacker to trigger a system failure.

The vulnerability of the bpfkprobemultilinkattach function in the kernel/trace/bpfTrace.c module, which supports kernel tracing in Linux operating systems, is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS5.5AI score0.00122EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.8 views

The vulnerability of the tcp_ao_verify_hash() function in the net/ipv4/tcp_ao.c module, which is part of the Linux operating system’s IPv4 protocol implementation, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpaoverifyhash function in the net/ipv4/tcpao.c module of the Linux operating system’s IPv4 protocol implementation is related to an incorrect session duration. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

10CVSS8.4AI score0.00457EPSS
SaveExploits0References8Affected Software2
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.8 views

PT-2026-82105

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The LoRaWAN application-layer clock-synchronization service contains an issue in the clock sync package callback function within subsys/lorawan/services/clock...

3.1CVSS5.8AI score0.00157EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.9 views

PT-2026-82107

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The IEEE 1588 PTP management-message parser in subsys/net/lib/ptp/tlv.c mishandles the PTP MGMT TIME management id. In the tlv mgmt post recv function, the PTP...

5.4CVSS5.9AI score0.00166EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.11 views

PT-2026-82171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the s390/vfio ccw component when the cp init function fails. While the cp free routine is used to unpin or free memory after successful I/O or when cp prefetch...

7.1CVSS5.9AI score0.0014EPSS
SaveExploits0References11
EUVD
EUVD
added 2026/08/26 12:00 a.m.7 views

EUVD-2025-210792

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

6.1AI score0.00178EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.8 views

PT-2026-82185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synaptics-rmi4 driver where the rmi f54 work function reads a diagnostics report into the f54-report data buffer. The transfer size is determined by rmi f54 get...

7.8CVSS6.1AI score0.0012EPSS
SaveExploits0References11
Rows per page
Query Builder