Lucene search
+L

16268 matches found

Positive Technologies
Positive Technologies
added 2026/06/26 12:0 a.m.15 views

PT-2026-53083

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.2 Description An issue exists in the public key parsing process where the software expands its public key list using SSH2 REALLOC but fails to zero-initialize new entries before they are populated. If a parse...

8.3CVSS5.8AI score0.00361EPSS
SaveExploits0References24
RedhatCVE
RedhatCVE
added 2026/06/25 6:18 p.m.8 views

CVE-2026-52985

A flaw was found in the Linux kernel's netdevsim module. An uninitialized memory vulnerability exists in the handling of struct iphdr within a dummy skbuff due to the use of skbput instead of skbputzero. This could lead to unpredictable system behavior, including crashes Denial of Service, or...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/25 6:17 p.m.9 views

CVE-2026-52989

A flaw was found in the nvmet-tcp component of the Linux kernel. The nvmettcpbuildpduiovec function fails to propagate errors when detecting out-of-bounds PDU lengths or offsets. This can lead to uninitialized memory being used by subsequent operations, such as reading incoming network data into ...

9.8CVSS6.1AI score0.00342EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/25 6:2 p.m.11 views

CVE-2026-53082

A flaw was found in the 6pack hamradio driver within the Linux kernel. This vulnerability occurs because the system does not properly handle data with communication errors, causing it to process uninitialized information. An attacker with local access could potentially exploit this to gain...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/25 5:47 p.m.18 views

CVE-2026-53225

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted, truncated ASCONF Address Configuration chunk. This can cause the system to read up to 16 bytes of...

9.1CVSS5.8AI score0.00514EPSS
SaveExploits0References4
NVD
NVD
added 2026/06/25 3:16 p.m.12 views

CVE-2026-57434

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...

7.5CVSS0.00358EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/25 2:32 p.m.11 views

EUVD-2026-39424

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...

6.3CVSS5.9AI score0.00358EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/25 2:32 p.m.29 views

CVE-2026-57434

CVE-2026-57434 affects Nokogiri (Ruby) prior to version 1.19.4. A bug in allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node can cause a NULL pointer dereference, potentially crashing the process. The vulnerability is fixed in 1.19.4. Connected sources (OSV, D...

7.5CVSS5.9AI score0.00358EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/06/25 2:32 p.m.39 views

CVE-2026-57434 Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...

6.3CVSS0.00358EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/25 2:32 p.m.6 views

CVE-2026-57434 Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...

6.3CVSS6AI score0.00358EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2026/06/25 2:32 p.m.11 views

CVE-2026-57434

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/25 1:16 p.m.9 views

CVE-2026-40210

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash...

4.8CVSS0.00261EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/25 12:23 p.m.7 views

EUVD-2026-39349

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash...

4.8CVSS5.9AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/25 12:23 p.m.34 views

CVE-2026-40210 Out-of-bounds read in SetMacAddrAction

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash...

4.8CVSS0.00261EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/06/25 12:23 p.m.9 views

CVE-2026-40210

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash...

4.8CVSS5.8AI score0.00261EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/06/25 12:23 p.m.9 views

CVE-2026-40210

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash...

4.8CVSS5.9AI score0.00261EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/06/25 12:3 p.m.8 views

qt5 security and bug fix update

An update is available for python-pyqt5-sip, qgnomeplatform, qt5-qtdoc, qt5-qtscript, qt5-qtlocation, qt5-qtsensors, adwaita-qt, qt5-qtconnectivity, qt5-qtquickcontrols2, qt5-qtserialbus, qt5-qtsvg, qt5-qtserialport, qt5-qtquickcontrols, qt5-qtmultimedia, qt5-qtxmlpatterns, qt5-qttranslations, qt...

7.5CVSS6.9AI score0.01553EPSS
SaveExploits1
OSV
OSV
added 2026/06/25 12:3 p.m.5 views

RLSA-2023:6369 Moderate: qt5 security and bug fix update

Qt is a software toolkit for developing applications. Security Fixes: qt: buffer over-read via a crafted reply from a DNS server CVE-2023-33285 qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation CVE-2023-34410 qtbase: buffer overflow in...

7.5CVSS6.2AI score0.01553EPSS
SaveExploits1References6
Rockylinux
Rockylinux
added 2026/06/25 12:1 p.m.10 views

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

7.5CVSS6.7AI score0.0103EPSS
SaveExploits0
OSV
OSV
added 2026/06/25 12:1 p.m.5 views

RLSA-2023:2851 Moderate: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: clients using /parallel command line switch might read...

7.5CVSS6.2AI score0.0103EPSS
SaveExploits0References10
Rows per page
Query Builder