Lucene search
+L

175401 matches found

EUVD
EUVD
added 2026/08/27 6:31 a.m.8 views

EUVD-2026-66502

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the code doesn't expect some combinations to be present. That's speciall...

9.8CVSS5.7AI score0.00386EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/27 6:31 a.m.7 views

EUVD-2026-66488

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforceprocesspacket reads fixed fields from joystick, wheel and status packets without first checking their lengths. In particular, the shared hats-and-buttons helper unconditionally...

5.3AI score0.00164EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/08/27 6:31 a.m.6 views

EUVD-2026-66461

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrbmsgtotype6cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Integer overflow after CEIL4 alignment: Signed int variables could...

7.8CVSS5.7AI score0.00136EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/27 6:31 a.m.9 views

EUVD-2026-66582

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...

9.8CVSS5.3AI score0.00434EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/27 6:31 a.m.8 views

EUVD-2026-66456

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against AMDGPUGEMDOMAINMASK, but did not validate domain combinations. Userspace could combine CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA,...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/08/27 6:31 a.m.7 views

EUVD-2026-66460

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrbmsgtotype6ep11cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Missing minimum size validation: The ep11cprb structure and...

7.8CVSS5.7AI score0.00136EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/27 6:31 a.m.8 views

EUVD-2026-66592

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562volumecontrolput does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and...

7.8CVSS5.4AI score0.00128EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/27 6:31 a.m.8 views

EUVD-2026-66452

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...

7.8CVSS5.5AI score0.00127EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/27 6:31 a.m.6 views

EUVD-2026-66366

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

9.1CVSS5.5AI score0.00811EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/27 6:31 a.m.7 views

EUVD-2026-66367

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

9.1CVSS5.5AI score0.00811EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/27 6:17 a.m.7 views

CVE-2026-80576

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could exploit this vulnerability by providing oversized input buffer IB bytes to the amdgpucsp2ib function on Graphics GFX rings. This lack of size validation allows the oversized values to corrupt adjacent control bits...

8.8CVSS5.6AI score0.0012EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/27 6:17 a.m.12 views

CVE-2026-78137

The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through to the checkout total when the BOGO...

7.5CVSS0.00281EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 6:17 a.m.11 views

CVE-2026-77016

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...

9.6CVSS0.00241EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 6:00 a.m.6 views

EUVD-2026-66882

The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through to the checkout total when the BOGO...

7.5CVSS5.3AI score0.00281EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 6:00 a.m.6 views

EUVD-2026-66880

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...

8.8CVSS6AI score0.00406EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 6:00 a.m.6 views

EUVD-2026-66878

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...

9.6CVSS5.5AI score0.00241EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/27 5:55 a.m.7 views

CVE-2026-74752

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. When cookie authentication is disabled, the system improperly validates authentication AUTH fields restored directly from peer-controlled cookie bytes. A local attacker could exploit this by forging RANDOM lengths o...

9.8CVSS5.8AI score0.00434EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/27 5:21 a.m.32 views

CVE-2026-47885 Spring Framework maxPartSize Ignored in PartEventHttpMessageReader

The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28...

0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 5:21 a.m.129 views

CVE-2026-47885

This vulnerability affects the PartEventHttpMessageReader in Spring WebFlux , which fails to enforce the maxPartSize limit when maxInMemorySize is set to -1, potentially allowing oversized multipart data to be processed without the intended size constraint. Affected versions are Spring Framework ...

7.5CVSS5.4AI score0.00259EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 5:06 a.m.10 views

EUVD-2026-66837

Spring Data REST does not guard identifier @Id and version @Version properties against mutation via RFC 6902 JSON Patch application/json-patch+json requests. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7....

7.1CVSS5.1AI score0.00273EPSS
SaveExploits0References1
Rows per page
Query Builder