Lucene search
+L

34188 matches found

osv_cve
osv_cve
•added 2026/03/25 10:27 a.m.•21 views

CVE-2026-23364 ksmbd: Compare MACs in constant time

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp with the correct function, cryptomemneq...

7.4CVSS6.5AI score0.00416EPSS
SaveExploits0References11
CVE
CVE
•added 2026/03/25 10:27 a.m.•62 views

CVE-2026-23364

CVE-2026-23364 concerns the Linux kernel’s ksmbd path, where MAC comparisons were not performed in constant time. The underlying issue is a timing-attack-prone memcmp() usage; the recommended fix is to replace memcmp() with crypto_memneq() to ensure constant-time comparisons. The vulnerability is...

7.4CVSS6.5AI score0.00416EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
•added 2026/03/25 10:27 a.m.•27 views

CVE-2026-23364

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp with the correct function, cryptomemneq...

7.4CVSS6.7AI score0.00416EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/03/25 10:27 a.m.•19 views

CVE-2026-23351

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: split gc into unlink and reclaim phase Yiming Qian reports Use-after-free in the pipapo set type: Under a large number of expired elements, commit-time GC can run for a very long time in a non-preemptible...

7.8CVSS5.8AI score0.00134EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2026/03/25 10:27 a.m.•45 views

CVE-2026-23342 bpf: Fix race in cpumap on PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPTRT On PREEMPTRT kernels, the per-CPU xdpbulkqueue bq can be accessed concurrently by multiple preemptible tasks on the same CPU. The original code assumes bqenqueue and cpumapflush run atomically...

0.00091EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/25 10:27 a.m.•8 views

CVE-2026-23308

In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions 'eqbrirqmask' and 'eqbrirqack' are also called in the callback function 'eqbrirqmaskack'. This is done to avoid source code duplication. The problem, is that ...

5.9AI score0.00127EPSS
SaveExploits0References6Affected Software1
osv_cve
osv_cve
•added 2026/03/25 10:26 a.m.•39 views

CVE-2026-23294 bpf: Fix race in devmap on PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in devmap on PREEMPTRT On PREEMPTRT kernels, the per-CPU xdpdevbulkqueue bq can be accessed concurrently by multiple preemptible tasks on the same CPU. The original code assumes bqenqueue and devflush run atomically...

7CVSS5.8AI score
SaveExploits0References6
osv_rhsa
osv_rhsa
•added 2026/03/25 10:15 a.m.•23 views

RHSA-2026:5732 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

7.5CVSS6.1AI score0.006EPSS
SaveExploits0References18
osv_rhsa
osv_rhsa
•added 2026/03/25 10:15 a.m.•28 views

RHSA-2026:5690 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

7.5CVSS6.2AI score0.006EPSS
SaveExploits0References23
SUSE Linux
SUSE Linux
•added 2026/03/25 10:10 a.m.•28 views

Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization and update golang-github-boynux-squidexporter: Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes jscPED-14971: Added compatibility for Squid 6...

4.6CVSS6.5AI score0.00345EPSS
SaveExploits1References24
osv_mal
osv_mal
•added 2026/03/25 6:54 a.m.•20 views

MAL-2026-2185 Malicious code in hy-api-utilities (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e47cae7d998d465d8ad1e4944051a42ee3cbf939476004154800628a94b828f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/25 6:52 a.m.•19 views

Malicious code in auth0-ai-ms-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2e341dbac5b5fcd3b5a882b5ee47e26051b72bacd4d552790c684174ba0e69ae Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
Circl
Circl
•added 2026/03/25 6:10 a.m.•17 views

CVE-2026-1166

creationtimestamp| type| source ---|---|--- 2026-03-25 06:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhugjcqvxp2g 2026-03-25 18:14:51+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/hitachi-security-advisory-av26-279 2026-03-25 20:03:03+00:00| seen|...

4.3CVSS5.6AI score0.00182EPSS
SaveExploits0References3
Circl
Circl
•added 2026/03/25 6:01 a.m.•12 views

CVE-2026-32748

creationtimestamp| type| source ---|---|--- 2026-03-25 06:01:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mhufz2mppb25 2026-03-25 14:35:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqxgt2m2r 2026-03-26 03:02:20+00:00| seen|...

8.7CVSS7.3AI score0.09065EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/03/25 5:33 a.m.•14 views

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS6.4AI score0.006EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/25 5:06 a.m.•20 views

Malicious code in facebookresearch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b2532cd269873dbda78f99b9e22ab736c64c48ba32fa5c27deaf173fdbf33397 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/03/25 5:05 a.m.•23 views

MAL-2026-2171 Malicious code in globally (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1f2d16dd9f9dc8f8c54504946e96b931fab9f6c893012e17b0c03dd531c49f5b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/03/25 5:05 a.m.•26 views

MAL-2026-2172 Malicious code in v2-8-3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b90faec9a57b74163b9282007ed27f9602abf0d5307115928eb4ca75d98f8c72 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/03/25 5:04 a.m.•14 views

MAL-2026-2181 Malicious code in sonic-platform-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0b7ad70e46087b1ffe41c3d0670c24c58b38e72344c958458af49a25541778b4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/25 5:04 a.m.•18 views

Malicious code in lm-sys (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 69240e51e47ad6f05a6d2e98047b80c3beb9f2e05d1449b50606c812b9eb1c1e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
Rows per page
Query Builder