Lucene search
+L

5275 matches found

SUSE CVE
SUSE CVE
•added 2026/09/05 12:24 a.m.•14 views

SUSE CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

6.9CVSS5.8AI score0.0018EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/05 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-80750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pmdomain: mediatek: fix remaining %pOF after ofnodeput scpsysgetbusprotectionlegacy looks up several legacy bus protection regmaps from device-tree nodes. Two...

8.4CVSS5.6AI score0.00194EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/04 8:53 p.m.•9 views

GHSA-5W7R-F4CG-RQQ7 SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers

CVE: This vulnerability corresponds to CVE-2026-72799. Summary Five filetree endpoints resolve arbitrary document IDs and paths with no publish-access check of any kind. All are CheckAuth-only, so they are reachable by the publish RoleReader token and by the anonymous account when...

5.8CVSS5.8AI score0.00325EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/09/04 8:53 p.m.•8 views

SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers

CVE: This vulnerability corresponds to CVE-2026-72799. Summary Five filetree endpoints resolve arbitrary document IDs and paths with no publish-access check of any kind. All are CheckAuth-only, so they are reachable by the publish RoleReader token and by the anonymous account when...

6.9CVSS5.7AI score0.00325EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2026/09/04 4:48 p.m.•21 views

CVE-2026-80874

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5 DRAM controller protects DRAM content using inline ECC. The inline ECC utilizes areas of DRAM for its operation, which are in the DRAM address range, but must...

5.8AI score0.00198EPSS
SaveExploits0
CVE
CVE
•added 2026/09/04 3:13 p.m.•28 views

CVE-2026-80809

CVE-2026-80809 affects the Linux kernel's ocfs2 filesystem . The root cause is that ocfs2_calc_xattr_set_need() fails to reserve metadata blocks for a new xattr value's extent tree when the file already has an external xattr block, leaving meta_ac as NULL. On a fragmented filesystem , this causes...

5.3AI score0.00243EPSS
SaveExploits0References9
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•14 views

Malicious Package

Overview tiny-folder-tree is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•16 views

PT-2026-85650

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs BUG lsetxattr panics the kernel when setting a large xattr value on a fragmented filesystem where the file already has an external xattr block. CAUSE ocfs2 calc xattr set...

8.8CVSS5.3AI score0.00322EPSS
SaveExploits0References129
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•11 views

The vulnerability of the `of_unittest_changeset()` function in the `drivers/of/unittest.c` module of the Linux operating system’s device and open-source driver tree allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ofunittestchangeset function in the drivers/of/unittest.c module of the Linux device and open-source kernel tree driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

8.4CVSS7.7AI score0.0019EPSS
SaveExploits0References8Affected Software2
RedHat Linux
RedHat Linux
•added 2026/09/03 11:00 p.m.•13 views

gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection

A flaw was found in GitPython. This vulnerability allows an attacker to overwrite arbitrary files on the system. By injecting specific options into the git read-tree command through methods like IndexFile.fromtree, IndexFile.reset, and IndexFile.mergetree, without proper option validation or...

8.1CVSS7.8AI score0.00543EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2026/09/03 4:24 p.m.•19 views

SUSE CVE-2026-80750

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after ofnodeput scpsysgetbusprotectionlegacy looks up several legacy bus protection regmaps from device-tree nodes. Two error paths put the device node before checking whether the regmap...

5.8AI score0.00194EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/09/03 1:06 p.m.•13 views

CVE-2026-80750

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after ofnodeput scpsysgetbusprotectionlegacy looks up several legacy bus protection regmaps from device-tree nodes. Two error paths put the device node before checking whether the regmap...

8.4CVSS5.4AI score0.00194EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/03 12:46 p.m.•18 views

util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks

The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with...

7CVSS5.9AI score0.00154EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/03 9:30 a.m.•12 views

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

6.1CVSS6.2AI score0.00223EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/09/03 12:06 a.m.•14 views

SUSE CVE-2026-74355

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...

8.2CVSS6.8AI score0.00181EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/03 12:00 a.m.•20 views

PT-2026-84948

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after of node put scpsys get bus protection legacy looks up several legacy bus protection regmaps from device-tree nodes. Two error paths put the device node before checking whether the regm...

5.8AI score0.00194EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2026/09/03 12:00 a.m.•13 views

libtree-sitter0_26-0.26.8-5.1 on GA media (moderate)

libtree-sitter026-0.26.8-5.1 on GA media Announcement ID: openSUSE-SU-2026:11655-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7...

8.7CVSS5.3AI score0.00554EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/09/03 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-84309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes...

6.9CVSS5.5AI score0.0018EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/09/02 4:17 p.m.•10 views

CVE-2026-78409

The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to opentree with ATSYMLINKNOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with...

7CVSS5.4AI score0.00154EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/02 3:12 p.m.•12 views

CVE-2026-84309

A flaw was found in pypdf. An attacker can craft a malicious PDF document with a cyclic tree structure. When a writing code path attempts to insert a child object, the TreeObject.insertchild function can follow /Next links indefinitely, leading to an infinite loop. This can result in a denial of...

6.9CVSS5.9AI score0.0018EPSS
SaveExploits0References7
Rows per page
Query Builder