Lucene search
+L

453516 matches found

EUVD
EUVD
•added 2026/09/24 3:29 p.m.•9 views

EUVD-2026-86233

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

5.9AI score0.00473EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:29 p.m.•9 views

EUVD-2026-86232

In the Linux kernel, the following vulnerability has been resolved: mm/mminit: deferredgrowzone: fix out-of-range firstdeferredpfn With CONFIGDEFERREDSTRUCTPAGEINIT enabled, deferredgrowzone initializes struct pages early in boot to satisfy an allocation. With a large CMA reservation in place, th...

5.7AI score0.00183EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 3:28 p.m.•9 views

EUVD-2026-86231

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU iterator to dump route exceptions rt6nhdumpexceptions uses hlistforeachentry to iterate over RCU-protected exception lists. The caller holds rcureadlock, but does not hold rt6exceptionlock, so rt6insertexception can...

5.8AI score0.00176EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:27 p.m.•7 views

EUVD-2026-86230

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - CirrusSearch extension allows Reflected XSS. This issue affects Mediawiki - CirrusSearch extension through 1.46.0...

6.9CVSS5.8AI score0.00268EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:23 p.m.•5 views

EUVD-2026-86229

BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses isPrivateOrReservedHost to validate a supplied hostname separately from the DNS resolution used by fetchtargetUrl, allowing an...

8.6CVSS5.9AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:21 p.m.•6 views

EUVD-2025-210999

HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability...

4.3CVSS5.8AI score0.00213EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 3:21 p.m.•6 views

EUVD-2026-86228

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

5.7AI score0.00144EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 3:21 p.m.•6 views

EUVD-2026-86227

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix unmatched rnunregister on failed accept When svcrdmaaccept takes the errout path before rpcrdmarnregister has succeeded, the existing cleanup block calls rpcrdmarnunregisterdev, &newxprt-scrn unconditionally...

5.8AI score0.00453EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:21 p.m.•8 views

EUVD-2026-86226

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

5.8AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:21 p.m.•8 views

EUVD-2026-86225

In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites sendsignallocked rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it...

5.8AI score0.00176EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:20 p.m.•7 views

EUVD-2026-86224

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound destinations without validating the address used for the connection. Webhook delivery in packages/core/src/libraries/hook/utils.ts can reach special-use and...

8.5CVSS5.6AI score0.00296EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:18 p.m.•6 views

EUVD-2026-86223

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/account/third-party-tokens.ts allow a caller holding a same-user access token with only the openid scope to retrieve stored social or enterpris...

7.6CVSS5.8AI score0.00311EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:12 p.m.•9 views

EUVD-2026-85951

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's isauthorized/2 delegates to rabbitmgmtutil:isauthorizedmonitor/2, which accepts the monitoring tag. But allowedmethods includes DELETE, and deleteresource/2...

6CVSS5.7AI score0.00303EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•8 views

EUVD-2026-85950

In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsdnet boolean flags to unsigned long flags word nfsdnet contains several boolean fields that are accessed from concurrent contexts without serialization. In particular, nfsd4endgrace guards its drain path with a...

5.7AI score0.0033EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•7 views

EUVD-2026-85949

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

5.8AI score0.00155EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•8 views

EUVD-2026-85948

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sun4i: Advertise a real minimum delta sun4iclkevtnextevent compensates for the timer stop/start synchronization delay by programming evt - TIMERSYNCTICKS into the hardware interval register. The clockeve...

5.8AI score0.00176EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•9 views

EUVD-2026-85947

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugelock. pmdishuge returns true for a device-private PMD, so origpmd can be...

5.8AI score0.00155EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•11 views

EUVD-2026-85946

In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...

5.8AI score0.00155EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•7 views

EUVD-2026-85945

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

5.8AI score0.00155EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•9 views

EUVD-2026-85944

In the Linux kernel, the following vulnerability has been resolved: cdx: Fix double free when sysfs file creation fails In cdxcreateresattr, if sysfscreatebinfile fails, the code frees resattr but doesn't set cdxdev-resattrnum to NULL. This leaves a dangling pointer in the array. Then...

5.8AI score0.00168EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•8 views

EUVD-2026-85942

In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in ofaliasscan stem parser The stem parser tests isdigitend - 1 before checking end start and so reads one byte before the property name when the name is empty or all digits. Check the bound first...

5.8AI score0.00176EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•9 views

EUVD-2026-85943

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: fix deadlock in usbgmaketpg usbgmaketpg held deplock while calling configfsdependitemunlocked, which acquires the configfs root inode lock when operating across subsystems. This creates a circular lock dependen...

5.8AI score0.00176EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•9 views

EUVD-2026-85941

In the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsdserv deref in nfsdfilenetdispose nfsdfilenetdispose is the consumer side of l-freeme: the nfsd service thread loop calls it to drain entries that the filecache garbage collector and shrinker append via...

5.7AI score0.00168EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•8 views

EUVD-2026-85940

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize DRC hash table before registering shrinker shrinkerregister precedes the INITLISTHEAD loop and the drchashsize store. On weakly-ordered architectures arm64, ppc, a shrinker scan can observe drchashsize before the...

5.7AI score0.00168EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•10 views

EUVD-2026-85939

In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid target hints Currently, gettgtname returns ERRPTR-ENOENT when ce-tgthint is NULL, and dfscachenorequpdatetgthint assumes ce-tgthint is always valid. In preparation for clearing...

5.6AI score0.00172EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•9 views

EUVD-2026-85938

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: use skbget instead of skbclone for reqskb BT enable fails intermittently with -ETIMEDOUT -110. The kernel log shows the HCI Read Local Version command was sent and the firmware replied with status 0x00 logged ...

6.3AI score0.00172EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•9 views

EUVD-2026-85937

In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...

5.8AI score0.00168EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•9 views

EUVD-2026-85936

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpcgsswirecred at svcauthgssdecodecredbody entry svcauthgssdecodecredbody writes the caller's rpcgsswirecred field by field and assigns gcctx.len only on the success tail. The caller storage is svcdata-clcred, which...

5.8AI score0.00473EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•10 views

EUVD-2026-85935

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

5.8AI score0.00189EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:10 p.m.•9 views

EUVD-2026-85934

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...

5.9AI score0.00168EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:01 p.m.•9 views

EUVD-2026-85933

Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative attacker could retrieve and unencrypt all credentials the target use...

6.8CVSS5.8AI score0.00165EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:00 p.m.•8 views

EUVD-2026-85932

A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/controllers/runners.js of the component JSON Runner. Executing a manipulation of the argument comment.text/script.schedule can lead to code injection. The attack may be performed from...

6.5CVSS5.2AI score0.00242EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 2:59 p.m.•10 views

EUVD-2026-85931

phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthenticated attacker can submit an account’s numeric user ID and a valid or brute-forced six-digit TOTP code without firs...

8.1CVSS5.8AI score0.00399EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 2:58 p.m.•13 views

EUVD-2026-85930

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...

2.9CVSS5.8AI score0.00102EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 2:58 p.m.•10 views

EUVD-2026-85336

Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files...

6.5CVSS5.7AI score0.00267EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 2:57 p.m.•11 views

EUVD-2026-85324

SunEditor: Critical XSS vulnerability - sanitizer bypass...

10CVSS5.8AI score0.00393EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 2:57 p.m.•8 views

EUVD-2026-85332

REDAXO: Unwhitelisted ORDER BY Column in rexlist Allows Authenticated Column Enumeration...

4.3CVSS5.7AI score0.00273EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 2:52 p.m.•10 views

EUVD-2026-85929

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS6.1AI score0.0011EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:52 p.m.•9 views

EUVD-2026-85928

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS5.7AI score0.00109EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:52 p.m.•10 views

EUVD-2026-85927

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS5.7AI score0.00109EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:52 p.m.•8 views

EUVD-2026-85926

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS5.8AI score0.00109EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:51 p.m.•9 views

EUVD-2026-85925

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS5.8AI score0.00109EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:51 p.m.•10 views

EUVD-2026-85924

Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS5.8AI score0.00109EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:51 p.m.•8 views

EUVD-2026-85923

Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS6AI score0.00109EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:51 p.m.•7 views

EUVD-2026-85922

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS6.1AI score0.0011EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:49 p.m.•9 views

EUVD-2026-85921

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire fi...

8.7CVSS5.8AI score0.00291EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 2:49 p.m.•10 views

EUVD-2026-85920

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

8.1CVSS5.8AI score0.00316EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 2:45 p.m.•9 views

EUVD-2026-85919

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File Handler. Performing a manipulation of the argument customData.generationData.html results in cross site scripting. Th...

5.3CVSS3.9AI score0.00263EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 2:41 p.m.•8 views

EUVD-2026-85918

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...

5.9CVSS5.8AI score0.00132EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:39 p.m.•9 views

EUVD-2026-85917

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...

6.5CVSS5.8AI score0.00201EPSS
SaveExploits0References1
Total number of security vulnerabilities453516