2 matches found
CVE-2026-39956
jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin in jq's src/builtin.c passes its arguments directly to jvstringindexes without verifying they are strings, and jvstringindexes in src/jv.c relies solely on assert checks that are stripped in release builds compile...
6.1CVSS5.6AI score0.00174EPSS
SaveExploits1
PT-2017-18579
Name of the Vulnerable Software and Affected Versions smb4k versions prior to 2.0.1 Description The issue allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or...
7.8CVSS5.8AI score0.01948EPSS
SaveExploits4References24
20