Lucene search
+L

4476 matches found

EUVD
EUVD
added 2026/06/30 7:21 p.m.13 views

EUVD-2026-40387

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied class names via Class.forName and invokes their constructors with no allow-list at three distinct sinks SELECT NEW, enum literals, and reflection-based comparators; an authenticated remo...

7.5CVSS6.1AI score0.0051EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.22 views

PT-2026-53943

Name of the Vulnerable Software and Affected Versions IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.1.6 Description The Object Query Language OQL engine resolves class names provided by an attacker using Class.forName and invokes their constructors without an allow-list at three sinks:...

9.9CVSS6.2AI score0.0051EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/06/29 2:18 p.m.25 views

CVE-2026-53265

A flaw was found in the Linux kernel's device mapper DM cache policy. A race condition exists where two processes attempting to invalidate cache blocks concurrently can lead to memory corruption. This can result in a local denial of service, causing the system to crash, or potentially corrupting...

7.8CVSS4.8AI score0.00176EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/29 11:50 a.m.17 views

PYSEC-2026-373 LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

Summary A serialization injection vulnerability exists in LangChain's dumps and dumpd functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data...

9.3CVSS7.8AI score0.43415EPSS
SaveExploits5References11
Positive Technologies
Positive Technologies
added 2026/06/29 12:00 a.m.19 views

PT-2026-53361

An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...

9.8CVSS6AI score0.00449EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2026/06/26 2:08 a.m.15 views

SUSE CVE-2026-53265

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de "dm cache policy smq: fix missing locks in invalidating cache blocks" added mq-lock around the destructive part of smqinvalidatemapping, but left the...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/25 10:14 p.m.16 views

EUVD-2026-31390

golang.org/x/crypto/ssh/agent doesn't drop invoking agent constraints when forwarding keys...

9.1CVSS5.8AI score0.006EPSS
SaveExploits0References6
NVD
NVD
added 2026/06/25 9:16 p.m.17 views

CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

8.8CVSS0.00505EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/25 9:16 p.m.11 views

DEBIAN-CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

7.5CVSS6AI score0.00505EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/25 9:16 p.m.8 views

UBUNTU-CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

8.8CVSS6AI score0.00505EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/06/25 9:16 p.m.11 views

CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

8.8CVSS6.2AI score0.00505EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/25 8:13 p.m.35 views

CVE-2026-6679 DTLS 1.3 ACK serialization heap buffer overflow via integer truncation

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

8.8CVSS0.00505EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/25 8:13 p.m.42 views

CVE-2026-6679

CVE-2026-6679 describes a heap buffer overflow in the DTLS 1.3 ACK serialization path that occurs before the peer is authenticated. The root cause is an integer truncation when computing the length of the ACK record-number list, which leads to an undersized buffer and an overrun. Impact is on wol...

8.8CVSS6.1AI score0.00505EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/06/25 8:13 p.m.10 views

CVE-2026-6679 DTLS 1.3 ACK serialization heap buffer overflow via integer truncation

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

8.8CVSS6.2AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/06/25 8:13 p.m.22 views

CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

8.8CVSS6AI score0.00505EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/06/25 8:13 p.m.20 views

CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

8.8CVSS6.2AI score0.00505EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/25 8:13 p.m.14 views

EUVD-2026-39557

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

8.8CVSS6.1AI score0.00505EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/25 8:39 a.m.13 views

EUVD-2026-39220

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure register netfilter hooks on-demand when a user adds the first iptables target or nftables expression, if done concurrently they can ra...

5.7AI score0.00162EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/25 12:00 a.m.25 views

PT-2026-52587

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 5.9.1 Description A heap buffer overflow occurs in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The issue stems from an integer truncation when calculating the length of the ACK...

8.8CVSS6AI score0.00505EPSS
SaveExploits0References8
NVD
NVD
added 2026/06/24 11:16 p.m.18 views

CVE-2026-39938

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graphtheme and rrdtool IPC serialization hardening. This issue has been resolved in version 1.2.31...

9.8CVSS0.00693EPSS
SaveExploits1References2
Rows per page
Query Builder