Lucene search
+L

23422 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/04 12:00 a.m.9 views

The vulnerabilities of the functions nvmet_tcp_build_pdu_iovec() and nvmet_tcp_handle_req_failure() in the Linux kernel’s drivers/nvme/target/tcp.c module allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions nvmettcpbuildpduiovec and nvmettcphandlereqfailure in the driver/nvme/target/tcp.c module of the Linux kernel are related to error handling flaws. Exploiting these vulnerabilities allows a remote attacker to compromise the confidentiality, integrity, and...

10CVSS4.4AI score0.00356EPSS
SaveExploits0References12Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-80738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type...

7.3CVSS5.7AI score0.00118EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-80850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix AO info use-after-free in tcpaoconnectinit tcpv4connect adds a SYN-SENT socket to the ehash before calling tcpconnect. If TCP-AO is configured,...

6.4AI score0.00171EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-80847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate...

5.8AI score0.00168EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.8 views

PT-2026-86251

Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational...

5.3AI score0.00258EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-80862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: fix usage of pagefragcache nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in...

5.7AI score0.00156EPSS
SaveExploits0References3
Oracle linux
Oracle linux
added 2026/09/04 12:00 a.m.12 views

Unbreakable Enterprise kernel security update

6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...

10CVSS7.4AI score0.01482EPSS
SaveExploits27
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-80789

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: bound SGL data length before allocating command buffers nvmettcpmapdata reads the host- controlled 32-bit sgl-length and, for the in-capsule offset...

5.8AI score0.00234EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-80849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer tcpinboundaohash is called before bhlocksocknested is taken, with only rcureadlock hel...

6AI score0.00168EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.13 views

PT-2026-85728

In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free in tcp ao connect init tcp v4 connect adds a SYN-SENT socket to the ehash before calling tcp connect. If TCP-AO is configured, tcp connect first verifies that a key matches the peer and the bound...

5.5AI score0.00171EPSS
SaveExploits0References125
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.10 views

PT-2026-85724

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handle esp restores skb-dev from the saved skb iif before passing the packet into the XFRM input path. Queued TCP data ca...

8.8CVSS5.3AI score0.00234EPSS
SaveExploits0References129
Cvelist
Cvelist
added 2026/09/04 12:00 a.m.36 views

CVE-2026-79391

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...

0.00389EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/04 12:00 a.m.31 views

CVE-2026-79390

Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational...

0.00258EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.11 views

PT-2026-86192

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the IPVS IP Virtual Server component where checksum validations are missing or incorrect for certain packet types. Specifically, the ip vs in icmp v6 function fails to...

5.7AI score0.00161EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/04 12:00 a.m.12 views

CVE-2026-79390

Trueview TI8161 (version 6.0.23.4) is vulnerable to information disclosure caused by the transmission of MQTT communications in plaintext over TCP port 1883 . An unauthenticated attacker with access to the same network segment can intercept this traffic and obtain sensitive device information and...

7.5CVSS5.3AI score0.00258EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.9 views

PT-2026-85725

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP MIN MSS tcp select initial window assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAX ADVMSS is one way to g...

8.8CVSS5.3AI score0.00234EPSS
SaveExploits0References124
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.10 views

PT-2026-85740

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page frag cache nvme uses page frag cache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently page frag cache is used in not...

8.8CVSS5.3AI score0.00234EPSS
SaveExploits0References124
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.10 views

PT-2026-85630

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmet tcp map data reads the host-controlled 32-bit sgl-length and, for the in-capsule offset descriptor type 0x01, checks it against port-inline data size before...

5.7AI score0.00234EPSS
SaveExploits0References129
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.9 views

PT-2026-85727

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of current key on reconnect to another peer tcp inbound ao hash is called before bh lock sock nested is taken, with only rcu read lock held. On the fast path for established sockets, if the rnext...

5.5AI score0.00234EPSS
SaveExploits0References124
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-80788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because...

5.9AI score0.00195EPSS
SaveExploits0References3
Rows per page
Query Builder