Lucene search
+L

6655 matches found

CVE
CVE
•added 2026/07/24 3:31 p.m.•58 views

CVE-2026-64248

CVE-2026-64248 affects the Linux kernel on MIPS: the function smp_send_stop() offline CPUs without informing RCU, causing possible stalls due to RCU grace periods never completing. The issue can trigger reboot hangs when irq_work_sync() runs after the affected path. The vulnerability has been fix...

5.5CVSS6.3AI score0.00158EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/07/24 3:31 p.m.•55 views

CVE-2026-64248 MIPS: smp: report dying CPU to RCU in stop_this_cpu()

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...

0.00158EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/24 3:31 p.m.•18 views

EUVD-2026-48657

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...

6.3AI score0.00158EPSS
SaveExploits0References6
NVD
NVD
•added 2026/07/24 3:18 p.m.•25 views

CVE-2026-55732

Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...

8.7CVSS0.00544EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/24 2:00 p.m.•17 views

CVE-2026-55732

Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...

8.7CVSS6AI score0.00544EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/24 2:00 p.m.•19 views

EUVD-2026-48597

Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...

8.7CVSS6AI score0.00544EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/24 1:11 p.m.•15 views

SUSE-SU-2026:3244-1 Security update for systemd

This update for systemd fixes the following issues Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file bsc1261400. Other updates and bugfixes: - Fix soft reboot not restarting user services with default.target bsc1262305. - Import commit e46e1952d5...

6.4CVSS6.6AI score0.00094EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•34 views

PT-2026-64420

Name of the Vulnerable Software and Affected Versions Tycon Systems TPDIN-Monitor-WEB2 affected versions not specified Description The web management interface fails to perform server-side validation of credentials during the login process. An unauthenticated remote attacker can bypass the...

9.8CVSS6AI score0.00556EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•38 views

PT-2026-64304

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.19 Loytec L-INX versions prior to 8.4.19 Loytec L-GATE versions prior to 8.4.19 Loytec L-ROC versions prior to 8.4.19 Loytec L-IOB versions prior to 8.4.19 Loytec L-DALI versions prior to 8.4.19 Loytec...

8.7CVSS5.9AI score0.00544EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/24 12:00 a.m.•2 views

CVE-2026-55732: Out-of-bounds Read

Out-of-bounds Read CWE-125 in BACnet packet parsing bacdtdatetimetotod in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linxa64.exe and ultimately reboot the device via a malformed BACnet...

8.7CVSS5.9AI score0.00544EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•19 views

PT-2026-64365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture where the stop this cpu function marks CPUs as offline for the scheduler using set cpu onlinefalse but fails to notify the Read-Copy-Update...

9.1CVSS5.9AI score0.00748EPSS
SaveExploits10References375
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/24 12:00 a.m.•3 views

CVE-2026-64250: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

5.5CVSS6.3AI score0.00158EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/24 12:00 a.m.•1 views

CVE-2026-64248: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...

5.5CVSS6.3AI score0.00158EPSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2026/07/15 2:46 p.m.•96 views

Exploit for CVE-2026-53359

AlmaLinux 9.5 — Mitigasi Januscape CVE-2026-53359 & Bad Epol...

7.8CVSS6.8AI score0.00176EPSS
SaveExploits8
Cvelist
Cvelist
•added 2026/07/14 5:46 p.m.•49 views

CVE-2026-62655 A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models

A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable...

7.1CVSS0.00325EPSS
SaveExploits0References7
SUSE Linux
SUSE Linux
•added 2026/07/14 1:13 p.m.•16 views

Security update for ucode-intel

This update for ucode-intel fixes the following issue: CVE-2025-35979: data leaks fixed in 20260512 release bsc1265189. Changes for ucode-intel: Intel CPU Microcode was updated to the 20260512 release bsc1265189. New Platforms Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products...

6.8CVSS6AI score0.00096EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/14 11:08 a.m.•14 views

Security update for ucode-intel

This update for ucode-intel fixes the following issue: CVE-2025-35979: data leaks fixed in 20260512 release bsc1265189. Other changes: Intel CPU Microcode was updated to the 20260512 release bsc1265189. New Platforms Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products...

6.8CVSS6AI score0.00096EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/13 10:16 a.m.•16 views

CVE-2026-22099

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

8.7CVSS0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/13 9:10 a.m.•44 views

CVE-2026-22099 Missing authentication for Bluetooth communication

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

8.7CVSS0.003EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/13 9:10 a.m.•43 views

CVE-2026-22099

CVE-2026-22099 affects a charging station where Bluetooth commands do not require authentication. This leads to exposure of sensitive information, potential reboot triggering, and the ability to push a firmware update URL via Bluetooth. The issue is described with high impact on confidentiality, ...

8.7CVSS5.8AI score0.003EPSS
SaveExploits0References1
Rows per page
Query Builder