Lucene search
+L

11 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/19 12:00 a.m.•2 views

CVE-2026-63830: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG transforms The skmsg sg.copy bitmap is part of the scatterlist entry ownership state. A set bit tells skmsgcomputedatapointers not to expose the entry through writable BPF ctx-data. This...

9.4CVSS5.8AI score0.00372EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/06/25 9:16 a.m.•23 views

CVE-2026-53266

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebtsnat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skbensurewritableskb, 0. This is intentional: at the bridge ebtables hooks the Ethernet header is...

8.8CVSS6.9AI score0.00827EPSS
SaveExploits1References35
Cvelist
Cvelist
•added 2026/06/25 8:39 a.m.•134 views

CVE-2026-53266 netfilter: bridge: make ebt_snat ARP rewrite writable

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebtsnat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skbensurewritableskb, 0. This is intentional: at the bridge ebtables hooks the Ethernet header is...

8.8CVSS0.00827EPSS
SaveExploits1References8
OSV
OSV
•added 2026/06/19 2:00 p.m.•16 views

CVE-2026-52908 RDMA: During rereg_mr ensure that REREG_ACCESS is compatible

In the Linux kernel, the following vulnerability has been resolved: RDMA: During reregmr ensure that REREGACCESS is compatible If IBMRREREGACCESS changes from RO to RW then the umem has to be re-evaluated to ensure it is properly pinned as RW. Since the umem is hidden inside each driver's mr stru...

7.8CVSS5.8AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•24 views

PT-2026-52361

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An out-of-bounds write issue exists in the ebt snat tg function within the net/bridge/netfilter/ebt snat.c module. The ebtables SNAT target, when configured to rewrite the hardware addre...

8.8CVSS7.6AI score0.00827EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:53 a.m.•16 views

SUSE CVE-2017-1085

In FreeBSD before 11.2-RELEASE, an application which calls setrlimit to increase RLIMITSTACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context...

7.8CVSS7.7AI score0.0185EPSS
SaveExploits4References2
OSV
OSV
•added 2022/11/08 3:15 p.m.•13 views

CVE-2022-41757

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0...

8.8CVSS5.8AI score0.00729EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/08/09 8:20 p.m.•4 views

CVE-2022-20239

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

8.9AI score0.00291EPSS
SaveExploits0References1
OSV
OSV
•added 2021/05/01 12:00 a.m.•18 views

ASB-A-174259860

In kbasememfromuserbuffer of malikbasememlinux.c, there is a possible remapping of shared read-only memory as write-able due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

9CVSS7.9AI score0.12084EPSS
SaveExploits2References1
NVD
NVD
•added 2021/03/02 1:15 a.m.•33 views

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

9.8CVSS0.03989EPSS
SaveExploits1References4
exploitpack
exploitpack
•added 2015/01/05 6:43 p.m.•23 views

WM-Downloader-3.1.2.2-2010.04.15-(.m3u)

WM Downloader 3.1.2.2 2010.04.15 .m3u Buffer Overflow + DEP Bypass Author: sickness Download : http://mini-stream.net/wm-downloader/ The payload can be replaced with whatever you want, there is enough space. import sys header='EXTM3U\n' junk ='http://'+'\x90' 17400 junk+='\x41'17 eip...

0.9AI score
SaveExploits0
Rows per page
Query Builder