Lucene search
+L

18012 matches found

Cvelist
Cvelist
added 2026/07/06 12:0 a.m.41 views

CVE-2026-38976

mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in opsuper / OPSUPER due to a missing runtime guard for top-level super...

0.00446EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/06 12:0 a.m.19 views

MiracleLinux 8 : kernel-4.18.0-553.136.1.el8_10 (AXSA:2026-1016:45)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1016:45 advisory. kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service CVE-2026-31419 kernel: drm/amd/display: Do not skip unrelated mode...

9.8CVSS6.8AI score0.00525EPSS
SaveExploits13References9
Tenable Nessus
Tenable Nessus
added 2026/07/06 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2012-0505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and...

7.5CVSS7.2AI score0.02703EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/07/05 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-42342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain...

7.5CVSS6.1AI score0.00299EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/05 12:0 a.m.22 views

Malicious code in logger-daemon-regex (npm)

The npm package logger-daemon-regex is a full-spectrum information stealer and remote-control agent disguised as a "Node.js integration layer for Autodesk Forge" all bin names are forge-. A postinstall lifecycle hook chains five scripts postinstall-clipboard-event, ensure-dist,...

6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/05 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2012-0501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and...

5CVSS6.9AI score0.03588EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/07/05 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2012-0500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and...

10CVSS7.2AI score0.58974EPSS
SaveExploits17References2
Tenable Nessus
Tenable Nessus
added 2026/07/05 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2012-0507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and...

10CVSS7.3AI score0.98113EPSS
SaveExploits13References2
Tenable Nessus
Tenable Nessus
added 2026/07/05 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2011-3563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and...

6.4CVSS6.9AI score0.03804EPSS
SaveExploits1References2
NVD
NVD
added 2026/07/04 7:16 p.m.15 views

CVE-2026-14647

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInferenceopset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has bee...

5.3CVSS0.00253EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/04 7:0 p.m.13 views

EUVD-2026-41691

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInferenceopset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has bee...

5.3CVSS5.5AI score0.00253EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/04 7:0 p.m.57 views

CVE-2026-14647

ONNX Runtime (onnxruntime) up to 1.21.x is affected by CVE-2026-14647 due to a weakness in convPoolShapeInference_opset19 in ONNX’s old.cc (onnx/defs/nn). The root cause is an out-of-bounds read introduced in this path, enabling remote exploitation. Public exploits exist per the description. Reme...

5.3CVSS5.5AI score0.00253EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/03 12:17 p.m.4 views

SUSE-SU-2026:22664-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad functions can lead to heap buffer overflow when evaluating untrusted jq queries bsc1262044. - CVE-2026-33947: unbounded recursion in functions jvsetpath,...

8.2CVSS6AI score0.00559EPSS
SaveExploits9References21
OSV
OSV
added 2026/07/03 8:55 a.m.6 views

OPENSUSE-SU-2026:21222-1 Security update for systemd

This update for systemd fixes the following issues: Changes in systemd: - Better handle TLS allocation failure bsc1254924. - Disable mounting debugfs by default jscPED-8812. - Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 bsc1267647 bsc1267644 bsc1262305 bsc1263117. - Move systemd-pcrloc...

6AI score
SaveExploits0References12
OSV
OSV
added 2026/07/03 6:13 a.m.15 views

CVE-2026-12064 proto-default skips SSH verification

When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...

7.5CVSS6.2AI score0.00339EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/07/03 5:27 a.m.6 views

Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency

A flaw was found in Node.js. An inconsistency in how Node.js matches hostnames can be exploited by a remote attacker in multi-context mTLS mutual Transport Layer Security setups. This vulnerability allows for a trust-policy bypass, potentially leading to unauthorized access to sensitive informati...

5.4CVSS6.6AI score0.00216EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/07/03 3:4 a.m.21 views

SUSE CVE-2026-53340

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

5.8AI score0.00112EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/07/02 11:34 p.m.4 views

github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input

A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service DoS by providing...

7.5CVSS6.1AI score0.0075EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2026/07/02 11:34 p.m.7 views

github.com/containerd/containerd: containerd: Arbitrary code execution via CRI checkpoint image tag poisoning

A flaw was found in containerd, an open-source container runtime. The CRI Container Runtime Interface checkpoint import process fails to validate image references within a checkpoint image's configuration. An attacker with permissions to create pods can exploit this by using a specially crafted...

9.9CVSS6.4AI score0.00332EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/02 11:34 p.m.5 views

github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands o...

9.4CVSS6.2AI score0.00176EPSS
SaveExploits0References5
Rows per page
Query Builder