Lucene search
+L

398662 matches found

CVE
CVE
added 2026/09/03 8:26 a.m.22 views

CVE-2026-80750

CVE-2026-80750 is a use-after-free in the Linux kernel's pmdomain: mediatek driver, specifically in scpsys_get_bus_protection_legacy(). Two error paths call of_node_put() before verifying the regmap lookup succeeded, then pass the potentially freed device node to dev_err_probe() with the %pOF spe...

8.4CVSS5.8AI score0.0018EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/03 8:26 a.m.21 views

CVE-2026-80749

CVE-2026-80749 is an out-of-bounds memory read in the Linux kernel 's DRM/connector/HDMI subsystem. A helper function copying an audio infoframe used the destination size (60 bytes) instead of the source size (28 bytes) , reading 32 bytes beyond the allocation. The fix uses the correct source siz...

7.1CVSS5.8AI score0.00159EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/03 8:26 a.m.22 views

CVE-2026-80748

CVE-2026-80748 affects the Loongson2 MMC driver in the Linux kernel. In ls2k0500_mmc_reorder_cmd_data() and ls2k2000_mmc_reorder_cmd_data(), the code incorrectly indexes the scatterlist with &sg[i] inside a for_each_sg() loop that already provides the current entry via sg, causing access to wrong...

7.8CVSS5.9AI score0.00161EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/03 8:26 a.m.16 views

CVE-2026-80746

CVE-2026-80746 affects the Linux kernel 's Qualcomm Display Clock Controller driver (dispcc-eliza ). On the Eliza EVK platform, the Display Clock Controller is enabled even though display is not, and it references parent clocks from DSI PHYs, causing a clock reparenting issue during probe. This r...

5.9AI score0.00189EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 8:26 a.m.18 views

CVE-2026-80747

CVE-2026-80747 is a Linux kernel vulnerability in the drm/amdkfd driver's CRAT table parser . The root cause is a missing bounds check: the parser verifies that the subtype header fits within the image but does not validate that the advertised subtype length stays within bounds. A malformed CRAT ...

8CVSS5.8AI score0.00164EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 8:26 a.m.20 views

CVE-2026-80744

CVE-2026-80744 affects the Linux kernel (reproduced on 5.10 stable , present in mainline) in the nf_tables_offload component (net/netfilter/nf_tables_offload.c). In nft_flow_rule_offload_abort(), a WARN_ON_ONCE(err) fires during nf_tables transaction rollback when a memory allocation fails with -...

5.8AI score0.00226EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/03 8:26 a.m.26 views

CVE-2026-80745

CVE-2026-80745 affects the FP9931 regulator driver in the Linux kernel. The VPOSNEG_table[] voltage selector mapping contained two defects: a duplicate 7.04V entry that shifted all subsequent mappings by one position, and a missing 23 entries (only 41 of the required 64 were present), so any sele...

8.4CVSS5.8AI score0.00122EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 8:26 a.m.20 views

CVE-2026-80743

CVE-2026-80743 affects the Linux kernel's ASoC xilinx formatter_pcm driver . The root cause is a race condition: IRQ handlers call dev_get_drvdata() to retrieve driver data, but that data is only assigned at the end of the probe function—after devm_request_irq(). If an interrupt fires in that win...

5.8AI score0.0021EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/03 8:26 a.m.16 views

CVE-2026-80742

CVE-2026-80742 affects the Linux kernel in the af_packet subsystem (net/packet/af_packet.c). When sending zero-byte packets via the TPACKET ring buffer on devices with no hard header (dev->hard_header_len == 0), tpacket_fill_skb() produces an skb with skb->len == 0 , which tpacket_snd() for...

6AI score0.0021EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/03 8:26 a.m.18 views

CVE-2026-80741

CVE-2026-80741 is an out-of-bounds read in the Linux kernel's DRM logging subsystem (drm/log). The function drm_log_draw_kmsg_record() accesses s[len - 1] to strip a trailing newline, but since len is an unsigned int , a value of zero causes the subtraction to wrap to UINT_MAX, reading far beyond...

7.1CVSS5.8AI score0.00157EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/03 8:26 a.m.13 views

CVE-2026-80740

CVE-2026-80740 affects the Linux kernel in the drm/log subsystem. When the display scale is large enough that the scaled font exceeds the display dimensions, either the rows or columns variable becomes zero. A zero column count causes an infinite loop in drm_log_draw_kmsg_record() because the loo...

6AI score0.00166EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/03 8:21 a.m.22 views

CVE-2026-80739

CVE-2026-80739 affects the Linux kernel 's mlx5_core driver (Mellanox/NVIDIA network hardware), specifically the TC (Traffic Control) offload path in net/mlx5e. When __mlx5e_add_fdb_flow() fails for a peer flow , the cleanup path mlx5e_tc_del_flow() acquires the ESW devcom lock unconditionally wh...

5.8AI score0.002EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/03 8:21 a.m.23 views

CVE-2026-80738

CVE-2026-80738 affects the Linux kernel BPF subsystem. The functions bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie accept a socket pointer typed as ARG_PTR_TO_BTF_ID_SOCK_COMMON but access sk->sk_protocol without verifying the socket is a full socket rather than a mini-socket. The fix chec...

7.3CVSS5.8AI score0.00118EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 8:21 a.m.27 views

CVE-2026-80737

This vulnerability affects the amba-pl011 UART driver in the Linux kernel . During DMA teardown, dmaengine_terminate_all() does not wait for a running callback, allowing the TX callback to access the TX buffer after it has been freed (use-after-free). Additionally, the RX poll timer reads RX buff...

7.8CVSS6AI score0.00164EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/03 8:21 a.m.19 views

CVE-2026-80736

CVE-2026-80736 is an out-of-bounds array indexing flaw in the Linux kernel's Thunderbolt subsystem , specifically in the tb_consumed_dp_bandwidth() function. Valid bandwidth group IDs range from 1 through MAX_GROUPS, but the local group_reserved[] array only has MAX_GROUPS entries (indices 0–MAX_...

7.8CVSS5.8AI score0.00163EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/03 8:21 a.m.22 views

CVE-2026-80735

CVE-2026-80735 affects the ovpn (OpenVPN) module in the Linux kernel . The root cause is a missing type-check: subsystems such as BPF SOCKMAP can set sk_user_data without setting the expected encap_type, and the ovpn driver dereferences sk_user_data without verifying the socket is actually owned ...

7.3CVSS5.8AI score0.00124EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/03 8:21 a.m.18 views

CVE-2026-80734

CVE-2026-80734 affects the btrfs filesystem in the Linux kernel . When a btrfs inode is evicted from the page cache under memory pressure and subsequently re-looked up via btrfs_iget(), the code path that reuses a previously cached delayed_node skips calls to btrfs_update_inode_mapping_flags() an...

8.8CVSS5.9AI score0.00348EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 8:21 a.m.17 views

CVE-2026-80733

CVE-2026-80733 affects the Linux kernel 's sk_mc_loop() networking function. When called for non-INET sockets—such as AF_PACKET sockets sending packets over virtual devices like VRF or ipvlan —the function falls through its switch statement and triggers a spurious WARN_ON_ONCE(1) . Since non-INET...

5.8AI score0.0021EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/03 8:21 a.m.23 views

CVE-2026-80732

CVE-2026-80732 is a use-after-free vulnerability in the Linux kernel's pata_sl82c105 Parallel ATA driver. Commit 44c10138fd4b replaced a PCI configuration-space read with a direct access to the cached revision field but left that access after pci_dev_put(), allowing the bridge device to be freed ...

7.8CVSS5.8AI score0.00159EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/03 8:21 a.m.12 views

CVE-2026-80730

CVE-2026-80730 affects the Linux kernel's ring-buffer subsystem. The root cause is in test_ringbuffer()'s out_free cleanup loop: the !rb_threads[cpu] check only catches NULL entries but misses entries holding an ERR_PTR . When kthread_run_on_cpu() fails, it stores ERR_PTR(-ENOMEM) or ERR_PTR(-EIN...

5.8AI score0.00205EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/03 8:21 a.m.31 views

CVE-2026-80731

CVE-2026-80731 is an out-of-bounds write in the Linux kernel's networking subsystem, specifically in dev_validate_header() . When a process holding CAP_SYS_RAWIO sends a packet with a short link-layer header, the function zero-pads using a direct read of dev->hard_header_len . If the device is...

7.8CVSS5.8AI score0.0018EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/03 8:21 a.m.19 views

CVE-2026-80729

CVE-2026-80729 affects the Linux kernel in the mm/huge_memory subsystem. The root cause is that __folio_split() leaves the xa_state's xa_lru field unset, while xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes. This allows a live, memcg-charged xa_node to exist without being linked into ...

5.8AI score0.00189EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 8:21 a.m.22 views

CVE-2026-80728

This Linux kernel vulnerability affects the DRM/amdgpu driver. The root cause is a devres teardown ordering issue : because devres teardown is LIFO and the aperture devres node was registered after the DRM device node, devres_release_all() unmaps the aperture before the DRM device release callbac...

5.8AI score0.00168EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/03 8:21 a.m.13 views

CVE-2026-80727

CVE-2026-80727 affects the Linux kernel x86 MCE (Machine Check Exception) subsystem. During boot, the CMCI storm detection path (cmci_discover → mce_timer_kick → __mod_timer) attempts to modify a timer that has not yet been initialized via timer_setup(), triggering ODEBUG assertions (assert_init ...

5.8AI score0.002EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/03 8:21 a.m.30 views

CVE-2026-80726

CVE-2026-80726 affects the Linux kernel's KVM x86 MMU subsystem . The root cause is that role.invalid is not explicitly cleared when deriving a child shadow page's role from its parent. This violates KVM's invariant that invalid pages are not on the active MMU page list, leading to a use-after-fr...

9.3CVSS5.8AI score0.00177EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/03 8:21 a.m.12 views

CVE-2026-73600

Dell PowerProtect Data Manager versions 20.2.0.0 and below contain a stack buffer overflow in the file-level restore agent . According to the description, a high-privileged remote attacker could exploit this to achieve information disclosure , though the assigned CVSS 3.1 vector (7.8 HIGH ) score...

7.8CVSS6.1AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 8:15 a.m.11 views

CVE-2026-68860

Dell PowerProtect Data Manager (versions 20.2.0.0 and below ) is affected by a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker with high attack complexity and required user interaction could exploit this to launch phishing attacks , resulting in high confidentiali...

6.8CVSS6AI score0.00349EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 8:10 a.m.10 views

CVE-2026-74769

Dell PowerProtect Data Manager versions 20.2.0.0 and below contain an Incorrect Authorization vulnerability in the REST API . A low-privileged remote attacker could exploit this to bypass protection mechanisms, resulting in a HIGH integrity impact (CVSS 3.1 base score 6.5 MEDIUM , vector AV:N/AC:...

6.5CVSS5.9AI score0.0038EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 8:04 a.m.12 views

CVE-2026-74768

Dell PowerProtect Data Manager versions 20.2.0.0 and below contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API . A high-privileged remote attacker could exploit this to achieve information disclosure across a scope change. The CVSS v3.1 score is 4.1 (MEDIUM) with vector AV:...

4.1CVSS5.9AI score0.00349EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 7:59 a.m.11 views

CVE-2026-17539

RTU500 (Hitachi Energy) is affected by a NULL pointer dereference in the last entry of the enhanced message queue, triggered under high-load scenarios such as sending GI (General Interrogation) requests at short intervals . This leads to a BCI_IEC104 fatal write error , causing connection interru...

5.9CVSS5.9AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 7:55 a.m.21 views

CVE-2026-9854

A vulnerability in the SYS600 RBAC mechanism (by Hitachi Energy ) allows users with access to the engineering tools to elevate privileges to administrator level on the underlying Windows host , granting themselves full control over the machine. The CVSS 4.0 score is 8.5 (HIGH) , with a local atta...

8.5CVSS5.9AI score0.00125EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/09/03 7:53 a.m.18 views

CVE-2026-9853

CVE-2026-9853 is a vulnerability in Hitachi Energy's SYS600 application that allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without completing SYS600's own authentication. This effectively bypasses the intended ac...

8.5CVSS5.8AI score0.00125EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/09/03 7:53 a.m.20 views

CVE-2026-9852

CVE-2026-9852 is a CSV injection vulnerability in Hitachi Energy SYS600 , affecting the Notify service log export function on Windows. Injected malicious formulas in log data can modify spreadsheet data, insert links, exfiltrate data , and in some configurations execute malicious code on the user...

7.8CVSS6.1AI score0.00195EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/09/03 6:00 a.m.31 views

CVE-2025-10478

A denial-of-service vulnerability exists in the Rockwell Automation 1756-ENBT module , a ControlLogix EtherNet/IP bridge that enables communication between Logix 5000 controllers and Ethernet devices. An attacker can exploit the issue by sending a crafted CIP packet , causing the module to crash;...

SaveExploits0References14
CVE
CVE
added 2026/09/03 6:00 a.m.40 views

CVE-2026-77477

CVE-2026-77477 affects OPCFoundation OPC UA LocalDiscoveryServer (LDS) . During installation, a high-privilege console window is launched that an attacker with physical access (keyboard and display) and the ability to launch the installer with elevated privileges can intercept. Successful exploit...

SaveExploits0References14
CVE
CVE
added 2026/09/03 4:29 a.m.15 views

CVE-2026-2573

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via the postBodyCss parameter in all versions up to and including 2.4.4 . The root cause is insufficient input sanitization and output escapin...

6.4CVSS5.6AI score0.0025EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 3:00 a.m.21 views

CVE-2023-51214

This CVE entry is currently reserved with no public technical details available. The affected product, vulnerability type, and impact are not yet disclosed. Monitor for future updates when the details are publicized.

SaveExploits0
CVE
CVE
added 2026/09/03 2:45 a.m.17 views

CVE-2026-85040

ZhongBangKeJi CRMEB (up to 6.0.0 ) is vulnerable to OS command injection in the Custom Scheduled Task feature. The eval function in /adminapi/system/crontab/save unsafely processes the customCode argument, allowing remote attackers to inject operating-system commands. The vendor documents this as...

5.8CVSS4.8AI score0.01639EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/03 2:25 a.m.11 views

CVE-2021-38489

CVE-2021-38489 affects the HddPasswordPei driver in Insyde InsydeH2O 5.x firmware, as shipped in Siemens SIMATIC products. The root cause is that the HDD password is stored in plaintext within a UEFI variable, exposing it to attackers with local, high-privilege access. The vulnerability carries a...

8.2CVSS5.2AI score0.00121EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 2:15 a.m.21 views

CVE-2021-43614

CVE-2021-43614 affects the VariableEditSmm component in Insyde UEFI firmware . The root cause is an error in handling the PlatformLangCodes UEFI variable, which can cause a buffer overflow leading to resource exhaustion and failure; the CVE title further suggests potential for code execution . Th...

6.7CVSS5.5AI score0.00131EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 2:05 a.m.19 views

CVE-2021-43613

A vulnerability in the SysPasswordDxe driver of Insyde InsydeH2O 5.x exposes user and administrator password hashes in runtime UEFI variables, enabling privilege escalation . The affected firmware is also used in Siemens SIMATIC industrial products. The CVSS 3.1 score is 6.5 (Medium) with a local...

6.5CVSS5.2AI score0.00114EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 2:00 a.m.40 views

CVE-2026-85031

TOTOLINK CP450 firmware version 4.1.0 contains a buffer overflow in an unknown function of /cgi-bin/cstecgi.cgi, triggered by manipulating the topicurl argument. Remote exploitation is possible. The vulnerability is rated CVSS 3.1: 9.9 (Critical) with a scope change and high impact to confidentia...

9.9CVSS9.3AI score0.00579EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/03 1:30 a.m.25 views

CVE-2026-85030

HKUDS AI-Trader (a simulated trading/competition platform) contains a business logic error in the selfRegister API Endpoint within service/server/routes_agent.py. By manipulating the initial_balance argument, a remote attacker can inflate their starting cash/equity value. However, because profit_...

6.3CVSS4.3AI score0.00355EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/03 1:04 a.m.15 views

CVE-2026-85092

LiME (Linux Memory Engine) through version 1.12.0 contains an arbitrary file overwrite vulnerability caused by a missing O_NOFOLLOW flag and insufficient validation of the operator-supplied disk acquisition output path. An unprivileged local attacker who controls the output directory can plant a ...

6.6CVSS5.5AI score0.00152EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/03 1:04 a.m.18 views

CVE-2026-85093

Cheshire Cat AI (an open-source AI agent framework) contains an information disclosure vulnerability in its GET /memory/collections/{collection_id}/points endpoint. The root cause is a missing per-user filter when retrieving episodic memory points, allowing any authenticated user with MEMORY:READ...

7.1CVSS5.3AI score0.00318EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/03 1:04 a.m.82 views

CVE-2026-85091

zlib versions 1.3.1.2 through 1.3.2 are affected by a heap buffer overflow in the gz_vacate() function. The root cause is an unchecked memmove() that writes beyond the internal input buffer boundary when processing non-blocking gzwrite() operations with stale external buffer pointers . An attacke...

8.3CVSS5.6AI score0.00442EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/03 1:04 a.m.22 views

CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 are affected by an information disclosure vulnerability in the Save Session Info PDU writers within libfreerdp/core/info.c. Three functions (rdp_write_logon_info_v2, rdp_write_logon_info_plain, and rdp_write_logon_info_ex) use Stream_Seek instead of Stream_Ze...

7.1CVSS5.5AI score0.00416EPSS
SaveExploits1References7Affected Software1
CVE
CVE
added 2026/09/03 1:04 a.m.26 views

CVE-2026-85090

FreeRDP before 3.31.0 is affected by a heap out-of-bounds read in the general_ChromaV1ToYUV444 function, which handles AVC444 chroma plane reconstruction . A malicious RDP server can craft an RFX_AVC444_BITMAP_STREAM with specific frame geometry to trigger an out-of-bounds memory read past the al...

5.4CVSS5.3AI score0.00314EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2026/09/03 12:45 a.m.25 views

CVE-2026-85022

A cross-site scripting (XSS) vulnerability affects the WebApp Sign-In component of langgenius dify 1.13.0 , specifically in the router.replace function within web/app/(shareLayout)/webapp-signin/components/mail-and-password-auth.tsx. Manipulating the redirect_url argument enables remote attackers...

5.1CVSS3.3AI score0.0027EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/03 12:30 a.m.15 views

CVE-2026-85021

langgenius/dify version 1.13.0 is affected by a cross-site scripting (XSS) vulnerability in the Splash Layout component, specifically in the router.replace function within web/app/(shareLayout)/components/splash.tsx. The root cause is improper handling of the redirect_url argument, allowing remot...

5.3CVSS3.6AI score0.00368EPSS
SaveExploits0References8
Total number of security vulnerabilities398662