Lucene search
+L

4123 matches found

OSV
OSV
•added 2026/05/27 12:15 p.m.•13 views

CVE-2026-45871 tpm: st33zp24: Fix missing cleanup on get_burstcount() error

In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Fix missing cleanup on getburstcount error getburstcount can return -EBUSY on timeout. When this happens, st33zp24send returns directly without releasing the locality acquired earlier. Use goto outerr to ensure...

5.9AI score
SaveExploits0References11
OSV
OSV
•added 2026/05/27 8:57 a.m.•20 views

BIT-RUBY-MIN-2026-46727

An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout handler rbgetaddrinfo in ext/socket/raddrinfo.c allows a remote attacker who can delay DNS responses near the user-specified timeout to crash a Ruby process that...

8.1CVSS5.8AI score0.00488EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/27 2:47 a.m.•20 views

SUSE CVE-2026-45836

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsockgetsndtimeocb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/05/27 12:00 a.m.•25 views

CVE-2026-45955

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: fix percpuref not resurrected on suspend timeout When llbitmapsuspendtimeout times out waiting for percpuref to become zero, it returns -ETIMEDOUT without resurrecting the percpuref. The caller mdllbitmapdaemonfn...

7.1CVSS6.6AI score0.00169EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•3 views

CVE-2026-45955: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: fix percpuref not resurrected on suspend timeout When llbitmapsuspendtimeout times out waiting for percpuref to become zero, it returns -ETIMEDOUT without resurrecting the percpuref. The caller mdllbitmapdaemonfn...

7.1CVSS6.3AI score0.00169EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•20 views

PT-2026-43940

Content removed...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•20 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the percpuref in the md/md-llbitmap driver. This vulnerability causes permanent damage if the pau...

5.8AI score0.00169EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/05/27 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-45941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: tpmi2cinfineon: Fix locality leak on getburstcount failure getburstcount can return -EBUSY on timeout. When this happens, the function returns directly...

5.5CVSS5.5AI score0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•24 views

PT-2026-43822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/md-llbitmap component where the llbitmap suspend timeout function returns -ETIMEDOUT upon timing out while waiting for percpu ref to reach zero, without...

7.1CVSS5.4AI score0.00169EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•24 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the getburstcount function in tpm/tpmi2cinfineon. When this function returns -EBUSY due to timeout, the...

5.8AI score0.00162EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2026/05/26 8:14 p.m.•24 views

CVE-2026-9362

A security vulnerability has been detected in Edimax EW-7438RPn 1.12. This vulnerability affects the function formConnectionSetting of the file /goform/formConnectionSetting of the component Setting Handler. Such manipulation of the argument maxConn/timeOut leads to command injection. The attack...

6.5CVSS6.3AI score0.02378EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/05/26 8:14 p.m.•21 views

CVE-2026-47071

Uncontrolled Resource Consumption vulnerability in benoitc hackney allows Flooding. The SOCKS5 transport in src/hackneysocks5.erl correctly applies the caller-supplied timeout to the SOCKS5 negotiation phase, but then upgrades the connection to TLS using the two-argument form ssl:connect/2, which...

8.2CVSS5.7AI score0.007EPSS
SaveExploits1References1
NVD
NVD
•added 2026/05/26 5:16 p.m.•26 views

CVE-2026-45836

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsockgetsndtimeocb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...

5.5CVSS0.00162EPSS
SaveExploits0References8
OSV
OSV
•added 2026/05/26 4:14 p.m.•29 views

CVE-2026-45836 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsockgetsndtimeocb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...

5.8AI score
SaveExploits0References11
EUVD
EUVD
•added 2026/05/26 4:14 p.m.•21 views

EUVD-2026-31858

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsockgetsndtimeocb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...

5.8AI score0.00162EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/05/26 12:00 a.m.•10 views

The vulnerability of the formConnectionSetting() function in the /goform/formConnectionSetting file of the Edimax BR-6675nD router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the formConnectionSetting function in the /goform/formConnectionSetting file of the Edimax BR-6675nD router’s microprogramming software is related to the lack of data cleaning measures at the control level when processing the maxConn and timeOut parameters. Exploiting this...

6.5CVSS6.9AI score0.02378EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•52 views

PT-2026-43304

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference exists in the Bluetooth L2CAP subsystem, specifically within the l2cap sock get sndtimeo cb function. This issue can lead to kernel crashes and a denial of...

5.7CVSS5.7AI score0.00162EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/05/26 12:00 a.m.•28 views

openSUSE 16 Security Update : perl-HTTP-Tiny (openSUSE-SU-2026:20792-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20792-1 advisory. Changes in perl-HTTP-Tiny: - updated to 0.094 0.094 - No changes from 0.093-TRIAL 0.093 - fix to prevent invalid characters in all headers, and prevent...

6.5CVSS5.8AI score0.0036EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/25 10:45 p.m.•30 views

EUVD-2026-31752

A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. Impacted is the function setNetworkDiag of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument NetDiagHost/NetDiagPingNum/NetDiagPingSize/NetDiagPingTimeOut/NetDiagTracertHop is...

6.5CVSS6.4AI score0.01768EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/25 3:16 p.m.•31 views

CVE-2026-47071

Uncontrolled Resource Consumption vulnerability in benoitc hackney allows Flooding. The SOCKS5 transport in src/hackneysocks5.erl correctly applies the caller-supplied timeout to the SOCKS5 negotiation phase, but then upgrades the connection to TLS using the two-argument form ssl:connect/2, which...

8.2CVSS0.007EPSS
SaveExploits1References4
Rows per page
Query Builder