Lucene search
+L

6414 matches found

Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.14 views

PT-2026-72272

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the SCSI target core during the REGISTER AND MOVE process. The function core scsi3 emulate pro register and move maps the PERSISTENT RESERVE OUT paramete...

9.8CVSS5.8AI score0.00724EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.17 views

PT-2026-72273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCSI target component where the core scsi3 decode spec i port and core scsi3 emulate register and move functions pass a raw PERSISTENT RESERVE OUT parameter buffer...

9.8CVSS5.8AI score0.00745EPSS
SaveExploits0
Veracode
Veracode
added 2026/08/14 9:19 a.m.14 views

Open Redirect

Spring Security is vulnerable to Open Redirect. The vulnerability is due to CookieRequestCache and CookieServerRequestCache storing and using an unvalidated absolute URL from a browser cookie as the post-login redirect target, allowing an attacker to redirect users to a malicious destination...

6.1CVSS4.6AI score0.00211EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/14 12:00 a.m.10 views

The vulnerability in the `drivers/target/iscsi/iscsi_target_util.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/target/iscsi/iscsitargetutil.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9CVSS5.5AI score0.0025EPSS
SaveExploits0References17Affected Software3
OSV
OSV
added 2026/08/13 12:07 p.m.49 views

RLSA-2026:54343 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 kernel: scsi: target:...

7CVSS5.2AI score0.00778EPSS
SaveExploits2References6
Rockylinux
Rockylinux
added 2026/08/13 12:07 p.m.32 views

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

9.8CVSS5.3AI score0.00778EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.21 views

RockyLinux 10 : kernel (RLSA-2026:54343)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54343 advisory. kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action...

9.8CVSS5.5AI score0.00778EPSS
SaveExploits2References9
Github Security Blog
Github Security Blog
added 2026/08/12 3:18 p.m.20 views

Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

Summary The target search endpoint POST /api/latest/fleet/targets returned team enroll secrets and full team configuration, including credential-bearing agent options, to observer-class users. Other team-facing endpoints mask these fields for observers; the target search endpoint did not apply th...

6.5CVSS5.5AI score0.00251EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/08/12 3:18 p.m.9 views

GHSA-88P2-JJ8W-J8QG Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

Summary The target search endpoint POST /api/latest/fleet/targets returned team enroll secrets and full team configuration, including credential-bearing agent options, to observer-class users. Other team-facing endpoints mask these fields for observers; the target search endpoint did not apply th...

6.5CVSS5.5AI score0.00251EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/12 2:25 p.m.14 views

kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...

9.8CVSS5.8AI score0.00778EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/08/11 11:56 p.m.8 views

SUSE CVE-2026-45571

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside the intended checkout target, including the repository's .git directory. These validations were...

5.4CVSS5.7AI score0.00297EPSS
SaveExploits0References2
NCSC
NCSC
added 2026/08/11 7:47 p.m.41 views

Vulnerabilities in Microsoft Windows

Microsoft has fixed a large number of vulnerabilities in Windows. An attacker could exploit these vulnerabilities to carry out attacks that could result in the following types of damage, as listed in the table below. The most severe vulnerabilities are identified by the following CVE numbers:...

9.8CVSS6.9AI score0.06184EPSS
SaveExploits14
NVD
NVD
added 2026/08/11 5:18 p.m.13 views

CVE-2026-65796

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

8.1CVSS0.00528EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/11 5:18 p.m.22 views

CVE-2026-65791

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

9.8CVSS0.006EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/11 5:18 p.m.25 views

CVE-2026-65681

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

7.5CVSS0.00886EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/11 5:18 p.m.17 views

CVE-2026-65679

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

8.1CVSS0.00566EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/11 5:06 p.m.33 views

CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

8.1CVSS5.1AI score0.00528EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 5:06 p.m.44 views

CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

8.1CVSS0.00528EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 5:06 p.m.19 views

EUVD-2026-56744

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

5.9CVSS5.5AI score0.00528EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 5:06 p.m.83 views

CVE-2026-65796

CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution . A heap-based buffer overflow in the Windows iSCSI Target Service is the underlying vulnerability, enabling an unauthenticated attacker to execute code remotely over the network. Public sources consistently describe this as a rem...

8.1CVSS5.9AI score0.00528EPSS
SaveExploits0References1Affected Software7
Rows per page
Query Builder