Lucene search
K

200 matches found

Github Security Blog
Github Security Blog
added 6 days ago13 views

Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php`

Summary modules/categories.php checks that the supplied type parameter ANN, EVT, ROL, USF, … corresponds to a module the actor administers. The follow-up "is this specific category editable by me" check at lines 56-61 is dead code because it compares $getType a category-type code against mode nam...

5.9AI score
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 6 days ago5 views

PT-2026-45037

Summary modules/categories.php checks that the supplied type parameter ANN, EVT, ROL, USF, … corresponds to a module the actor administers. The follow-up "is this specific category editable by me" check at lines 56-61 is dead code because it compares $getType a category-type code against mode nam...

6.5CVSS5.9AI score
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/05/27 8:13 p.m.5 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00014EPSS
Exploits0References1
NVD
NVD
added 2026/05/26 6:16 p.m.8 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS0.00014EPSS
Exploits0References3
OSV
OSV
added 2026/05/26 6:16 p.m.2 views

UBUNTU-CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00014EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2026/05/26 6:16 p.m.4 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00014EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/26 5:18 p.m.32 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS0.00014EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/26 5:18 p.m.5 views

EUVD-2026-31925

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00014EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/26 5:18 p.m.4 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00014EPSS
Exploits0References4Affected Software3
CVE
CVE
added 2026/05/26 5:18 p.m.6 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a race-condition vulnerability in a kernel module (CVE-2026-24199) that could allow a local attacker to trigger a denial-of-service. The issue is addressed in the NVIDIA security bulletin and corresponding driver updates; Linux branch R595 includes CVE-202...

4.7CVSS5.8AI score0.00014EPSS
Exploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2026/05/26 7:4 a.m.2 views

gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...

7.5CVSS5.8AI score0.00486EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2026/05/26 6:51 a.m.5 views

gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...

7.5CVSS5.8AI score0.00486EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2026/05/26 6:40 a.m.3 views

gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...

7.5CVSS5.8AI score0.00486EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.5 views

PT-2026-43342

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00014EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2026/05/23 8:1 a.m.2 views

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

...

7.5CVSS5.8AI score0.00486EPSS
Exploits0
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в firefox, thunderbird

The reordering of instructions resulted in a sequence of instructions that would cause an object to be incorrectly processed during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.1...

8.8CVSS7.3AI score0.00448EPSS
Exploits1References2
OSV
OSV
added 2026/05/18 1:16 p.m.2 views

ALPINE-CVE-2026-42009

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...

7.5CVSS5.8AI score0.00486EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/18 12:44 p.m.3 views

CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...

7.5CVSS5.8AI score0.00486EPSS
Exploits0References6
CVE
CVE
added 2026/05/18 12:44 p.m.15 views

CVE-2026-42009

CVE-2026-42009 affects the GnuTLS library, where DTLS packet reordering uses a comparator that mishandles duplicate sequence numbers. This can cause unstable DTLS packet ordering or undefined behavior, leading to a denial of service. The vulnerability is described consistently across NVD entries ...

7.5CVSS5.8AI score0.00486EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/18 12:44 p.m.7 views

CVE-2026-42009

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...

7.5CVSS5.8AI score0.00486EPSS
Exploits0References7
Rows per page
Query Builder