Lucene search
+L

43577 matches found

Wolfi
Wolfi
•added 2026/05/01 1:48 a.m.•22 views

CVE-2026-40542 vulnerabilities

Vulnerabilities for packages: opensearch, apache-nifi, trino, dependency-track...

7.3CVSS5.5AI score0.00702EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/05/01 1:48 a.m.•31 views

GHSA-V468-QCJX-R72W vulnerabilities

Vulnerabilities for packages: opensearch, apache-nifi, trino, dependency-track...

5.7AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/05/01 1:17 a.m.•19 views

CVE-2026-40962 vulnerabilities

Vulnerabilities for packages: ffmpeg...

9.8CVSS6.2AI score0.00158EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/05/01 12:00 a.m.•10 views

CVE-2026-37540

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elfloader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems STM32MP1, Zynq, i.MX, large values can...

8.4CVSS5.9AI score0.00447EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/01 12:00 a.m.•20 views

CVE-2026-37540

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elfloader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems STM32MP1, Zynq, i.MX, large values can...

8.4CVSS5.9AI score0.00447EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/01 12:00 a.m.•54 views

CVE-2026-37540

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elfloader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems STM32MP1, Zynq, i.MX, large values can...

8.4CVSS0.00447EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/01 12:00 a.m.•4 views

CVE-2026-37540: Integer Overflow or Wraparound

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elfloader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems STM32MP1, Zynq, i.MX, large values can...

9.8CVSS5.9AI score0.00447EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/01 12:00 a.m.•1 views

CVE-2026-31765: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Change AMDGPUVARESERVEDTRAPSIZE to 64KB Currently, AMDGPUVARESERVEDTRAPSIZE is hardcoded to 8KB, while KFDCWSRTBATMASIZE is defined as 2 PAGESIZE. On systems with 4K pages, both values match 8KB, so allocation and...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•32 views

PT-2026-36514

Name of the Vulnerable Software and Affected Versions OpenAMP version 2025.10.0 Description The ELF loader contains an integer overflow during firmware image parsing. In the elf loader.c file, the system multiplies two attacker-controlled 16-bit values from the ELF header without performing...

9.8CVSS5.9AI score0.00447EPSS
SaveExploits0References8
CVE
CVE
•added 2026/05/01 12:00 a.m.•94 views

CVE-2026-37540

OpenAMP v2025.10.0 ELF loader contains an integer overflow in firmware image parsing: elf_loader.c multiplies two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded targets (e.g., STM32MP1, Zynq, i.MX), large inputs can wrap the product to a small ...

9.8CVSS5.9AI score0.00447EPSS
SaveExploits0References3Affected Software1
Packet Storm News
Packet Storm News
•added 2026/05/01 12:00 a.m.•15 views

Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems

The adoption of Internet of Things IoT systems at the network edge of smart architectures is increasing rapidly, intensifying the need for security mechanisms that are both adaptive and resource-efficient. In such environments, runtime defence mechanisms are no longer limited to detection alone b...

5.9AI score
SaveExploits0
NVD
NVD
•added 2026/04/30 10:16 p.m.•17 views

CVE-2026-2311

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-controlled code to run with administrator privilege...

9.8CVSS0.00198EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/04/30 8:38 p.m.•244 views

Exploit for CVE-2026-31431

Copy Fail PoC English Python PoC for CVE-2026-31431,...

7.8CVSS5.7AI score0.03437EPSS
SaveExploits244
Snyk
Snyk
•added 2026/04/30 6:34 p.m.•36 views

Creation of Temporary File in Directory with Insecure Permissions

Overview OpenTelemetry.Exporter.OpenTelemetryProtocol is an OTLP Exporter for OpenTelemetry .NET. Affected versions of this package are vulnerable to Creation of Temporary File in Directory with Insecure Permissions in the ExperimentalOptions used in handling disk retry storage for telemetry data...

7.8CVSS5.8AI score0.00148EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/04/30 1:31 p.m.•128 views

Exploit for Out-of-bounds Read in Microsoft

CVE-2024-49113 — Windows LDAP DoS Vulnerability PoC Autho...

7.5CVSS8.8AI score0.83592EPSS
SaveExploits7
UbuntuCve
UbuntuCve
•added 2026/04/30 12:16 p.m.•10 views

CVE-2026-31693

In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code where a request can be replayed if necessary. However, some of these places were missing the necessary...

7.8CVSS6.6AI score0.00175EPSS
SaveExploits0References14
UbuntuCve
UbuntuCve
•added 2026/04/30 11:16 a.m.•24 views

CVE-2026-31787

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmdvmops defines .close privcmdclose, but neither .maysplit nor .open. When userspace does a partial munmap on a privcmd mapping, the kernel splits the VMA via splitvma. Since...

7.8CVSS5.8AI score0.00193EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/04/30 2:30 a.m.•16 views

SUSE CVE-2026-5773

libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criteria must be met. Due to a logical error in the...

3.7CVSS7.2AI score0.00657EPSS
SaveExploits1References11
SUSE CVE
SUSE CVE
•added 2026/04/30 2:25 a.m.•25 views

SUSE CVE-2026-40684

In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...

7.5CVSS5.8AI score0.00607EPSS
SaveExploits0References3
Wolfi
Wolfi
•added 2026/04/30 1:48 a.m.•30 views

GHSA-Q339-8RMV-2MHV vulnerabilities

Vulnerabilities for packages: ruby, ruby4.0-rails, jruby, ruby3.3-rails, ruby3.2-rails, logstash, ruby3.4-rails...

5.7AI score
SaveExploits0
Rows per page
Query Builder