Lucene search
+L

3562 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/28 3:44 a.m.14 views

CVE-2026-9793

A flaw was found in Keycloak. When a JSON Web Encryption JWE encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing the configured signature policy. This allows a remote attacker to submit unauthorized claims, leadin...

7.5CVSS5.8AI score0.00163EPSS
SaveExploits0References7
CVE
CVE
added 2026/05/28 3:44 a.m.130 views

CVE-2026-9793

Keycloak vulnerability CVE-2026-9793: when a JSON Web Encryption (JWE) encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing the configured signature policy. This can lead to unauthorized claims and data integrity c...

7.5CVSS5.8AI score0.00163EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2026/05/28 3:44 a.m.28 views

CVE-2026-9793

A flaw was found in Keycloak. When a JSON Web Encryption JWE encrypted request object is submitted, Keycloak may incorrectly process unsigned claims if the decrypted content is raw JSON, bypassing the configured signature policy. This allows a remote attacker to submit unauthorized claims, leadin...

7.5CVSS5.7AI score0.00163EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/28 12:00 a.m.27 views

PT-2026-44184

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists where Keycloak may incorrectly process unsigned claims when a JSON Web Encryption JWE encrypted request object is submitted, provided the decrypted content is raw JSON. This...

7.5CVSS5.5AI score0.00163EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2026/05/28 12:00 a.m.32 views

PT-2026-44341

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bounds checking issue exists in the Linux kernel DRM AMD GPU driver. The uvd, vce, and vcn components access the Indirect Buffer IB at predefined offsets without verifying if the IB is...

7.1CVSS5.8AI score0.00131EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/05/27 9:27 p.m.28 views

CVE-2026-45999

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System component. A local user could provide a specially crafted EROFS image that triggers an unsigned underflow in the zerofslz4handleoverlap function during LZ4 inplace decompression. This vulnerability allows the system to re...

7.1CVSS5.8AI score0.00131EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/27 2:17 p.m.23 views

CVE-2026-45999

In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...

7.1CVSS0.00131EPSS
SaveExploits0References7
OSV
OSV
added 2026/05/27 2:17 p.m.23 views

UBUNTU-CVE-2026-45999

In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...

7.1CVSS5.7AI score0.00131EPSS
SaveExploits0References23
EUVD
EUVD
added 2026/05/27 12:56 p.m.19 views

EUVD-2026-32303

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix u32 overflow in pushbuf reloc bounds check nouveaugempushbufrelocapply validates each relocation with if r-relocbooffset + 4 nvbo-bo.base.size but relocbooffset is u32 uapi/drm/nouveaudrm.h and the integer litera...

5.8AI score0.00143EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:55 p.m.9 views

CVE-2026-45999

In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...

7.1CVSS5.6AI score0.00131EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2026/05/27 12:55 p.m.20 views

EUVD-2026-32295

In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...

5.7AI score0.00131EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/27 12:55 p.m.58 views

CVE-2026-45999 erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()

In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...

7.1CVSS0.00131EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/05/27 12:55 p.m.17 views

CVE-2026-45999

In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...

7.1CVSS5.7AI score0.00131EPSS
SaveExploits0
OSV
OSV
added 2026/05/27 12:55 p.m.9 views

CVE-2026-45999 erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()

In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...

7.1CVSS6.5AI score
SaveExploits0References10
CVE
CVE
added 2026/05/27 12:55 p.m.51 views

CVE-2026-45999

The CVE-2026-45999 issue affects the Linux kernel EROFS LZ4 inplace decompression path (z_erofs_lz4_handle_overlap). Crafted extents can trigger an unsigned underflow (outpages

7.1CVSS5.7AI score0.00131EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.28 views

PT-2026-43866

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1 Description An unsigned underflow exists in the z erofs lz4 handle overlap function within the erofs component. Specifically, crafted images containing illegal extents where !partial decoding is true a...

7.1CVSS5.9AI score0.00131EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.26 views

PT-2026-43873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A 32-bit integer overflow exists in the nouveau gem pushbuf reloc apply function within the drm/nouveau component. The issue occurs during the validation of relocations where the additio...

7.8CVSS5.9AI score0.00143EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an unsigned overflow in the zerofslz4handleoverlap function within erofs. This vulnerability may...

7.1CVSS5.9AI score0.00131EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/05/27 12:00 a.m.18 views

CVE-2026-45999

In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...

7.1CVSS6.5AI score0.00131EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-45999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpag...

7.1CVSS7.2AI score0.00131EPSS
SaveExploits0References3
Rows per page
Query Builder