Lucene search
+L

54191 matches found

Positive Technologies
Positive Technologies
added 2026/04/01 12:00 a.m.7 views

PT-2026-29965

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control;...

7.8CVSS5.9AI score0.00134EPSS
SaveExploits0References3
Circl
Circl
added 2026/03/31 5:29 p.m.18 views

CVE-2026-24148

creationtimestamp| type| source ---|---|--- 2026-03-31 17:29:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miepbcnduy2c 2026-03-31 19:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miev6tyebb24 2026-03-31 19:20:10+00:00| seen|...

9.4CVSS4.8AI score0.00349EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.37 views

PT-2026-29399

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a heap-buffer-overflow HBO in CIccApplyCmmSearch::costFunc can be triggered via malformed JSON configuration input to the iccApplySearch tool. AddressSanitizer reports an...

6.2CVSS5.7AI score0.00159EPSS
SaveExploits1References6
EUVD
EUVD
added 2026/03/30 9:41 p.m.8 views

EUVD-2026-17223

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM format with an invalid initial step index value = 89. The unvalidated step index is read directly from the network and...

6.9CVSS5.8AI score0.00256EPSS
SaveExploits1References2
CBLMariner
CBLMariner
added 2026/03/30 4:12 p.m.25 views

CVE-2025-71184 affecting package kernel for versions less than 6.6.130.1-1

CVE-2025-71184 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

5.5CVSS5.8AI score0.00118EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/03/30 4:12 p.m.13 views

CVE-2026-23284 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23284 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

5.8AI score0.00123EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/03/30 4:12 p.m.9 views

CVE-2026-23050 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23050 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

5.8AI score0.00168EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/03/29 8:02 a.m.12 views

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

...

5.5CVSS5.8AI score0.00182EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2026/03/29 12:00 a.m.7 views

jupyter-jupyterlab-templates-0.5.2-4.1 on GA media (moderate)

jupyter-jupyterlab-templates-0.5.2-4.1 on GA media Announcement ID: openSUSE-SU-2026:10429-1 Rating: moderate Cross-References: CVE-2026-3449 CVSS scores: CVE-2026-3449 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVE-2026-3449 SUSE : 4.8...

4.8CVSS5.9AI score0.00112EPSS
SaveExploits0
OSV
OSV
added 2026/03/27 5:17 p.m.10 views

GHSA-83XR-5XXR-MH92 Incus vulnerable to arbitrary file read and write through pongo templates

Summary Instance template files can be used to cause arbitrary read or writes as root on the host server. Details Incus allows for pongo2 templates within instances which can be used at various times in the instance lifecycle to template files inside of the instance. This particular implementatio...

9.9CVSS6AI score0.00481EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/27 2:31 p.m.9 views

CVE-2026-30407

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/27 2:25 p.m.11 views

CVE-2021-27465

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

6.1CVSS6.9AI score0.00642EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/03/27 8:01 a.m.7 views

Squid has issues in ICP message handling

...

6.9CVSS5.8AI score0.01039EPSS
SaveExploits0
OSV
OSV
added 2026/03/26 10:16 p.m.5 views

DEBIAN-CVE-2026-33672

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS5.8AI score0.0041EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/26 8:33 p.m.11 views

GO-2026-4834 NATS allows MQTT clients to bypass ACL checks in github.com/nats-io/nats-server

NATS allows MQTT clients to bypass ACL checks in github.com/nats-io/nats-server...

8.1CVSS5.9AI score0.00259EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/03/26 12:00 a.m.8 views

CVE-2026-32748

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

8.7CVSS5.9AI score0.08931EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/25 11:16 a.m.8 views

DEBIAN-CVE-2026-23348

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimmbus object when creating nvdimm objects Found issue during running of cxl-translate.sh unit test. Adding a 3s sleep right before the test seems to make the issue reproduce fairly consistently. The...

4.7CVSS5.3AI score0.00088EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/25 12:00 a.m.15 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from uninitialized variables, potentially leading to kernel crashes...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2026/03/25 12:00 a.m.8 views

Mageia: Security Advisory (MGASA-2026-0063)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.8AI score0.00604EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/24 6:30 p.m.4 views

CVE-2026-26809

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder