Lucene search
+L

14030 matches found

Snyk
Snyk
added 2026/07/27 12:47 p.m.19 views

Malicious Package

Overview route-processor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/27 10:57 a.m.13 views

CVE-2026-45112

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

6.9CVSS5.8AI score0.01075EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2026/07/27 2:46 a.m.14 views

dovecot: Dovecot: Denial of Service via excessive IMAP bracing

A flaw was found in Dovecot. A remote attacker can exploit this vulnerability by sending excessive open braces over the Internet Message Access Protocol IMAP, leading to uncontrolled memory usage. This can cause the affected system to consume memory up to its configured limit, resulting in a Deni...

7.5CVSS7AI score0.00621EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/07/27 1:30 a.m.17 views

Malicious Package

Overview @thone33/core-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/26 11:32 p.m.17 views

SUSE CVE-2026-11605

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...

7.5CVSS5.8AI score0.00539EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/26 11:32 p.m.17 views

SUSE CVE-2026-11622

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

7.5CVSS5.8AI score0.00523EPSS
SaveExploits0References14
Veracode
Veracode
added 2026/07/25 5:46 p.m.9 views

Denial Of Service (DoS)

pypdf is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation of declared image size values during PDF image parsing, which allows an attacker to craft a malicious PDF that triggers excessive memory consumption and causes a denial-of-service condition...

6.9CVSS5.5AI score0.00515EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2026/07/25 4:00 p.m.9 views

SUSE CVE-2026-64364

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mtioflags mtioflags is a single unsigned long, but mtprocessslot, mtreleasependingpalms and mtreleasecontacts use it as a per-slot bitmap indexed by the slot number. That slot numb...

5.5CVSS5.7AI score0.00354EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 3:58 p.m.10 views

SUSE CVE-2026-64509

In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...

5.5CVSS5.7AI score0.00157EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 3:57 p.m.9 views

SUSE CVE-2026-64518

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcpaoestablishedkey. lockdepsockisheld was added in tcpaoestablishedkey by the cited commit. It can be called from tcpv46timewaitack with twsk. Since it does not have sk-sklock, the lockd...

5.8AI score0.00168EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/07/25 12:44 p.m.13 views

Malicious Package

Overview -whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-suparhit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.14 views

Malicious Package

Overview -john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-espanol is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there i...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.11 views

Malicious Package

Overview -whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-index-main is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.13 views

Malicious Package

Overview -john-wick-4-keanu-reeves-pelicula-completa-h-d-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization,...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.10 views

Malicious Package

Overview -john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization,...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.14 views

Malicious Package

Overview -espanol-john-wick-keanu-reeves-4-k-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/07/25 10:17 a.m.10 views

UBUNTU-CVE-2026-64492

In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...

5.7AI score0.00173EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/25 9:14 a.m.10 views

CVE-2026-64518

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcpaoestablishedkey. lockdepsockisheld was added in tcpaoestablishedkey by the cited commit. It can be called from tcpv46timewaitack with twsk. Since it does not have sk-sklock, the lockd...

5.7AI score0.00168EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/07/25 8:52 a.m.35 views

CVE-2026-64514 userfaultfd: gate must_wait writability check on pte_present()

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: gate mustwait writability check on ptepresent userfaultfdmustwait and userfaultfdhugemustwait read the PTE without taking the page table lock and then apply ptewrite / hugeptewrite to it. Those accessors decode bits...

0.00177EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/25 8:51 a.m.40 views

CVE-2026-64503 iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on writeraw error kxsd9writeraw takes a runtime PM reference with pmruntimegetsync but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping the...

0.00177EPSS
SaveExploits0References8
Rows per page
Query Builder