Lucene search
+L

16682 matches found

CVE
CVE
•added 2026/08/28 6:48 a.m.•35 views

CVE-2026-80643

This Linux kernel issue affects the igen6_edac driver (EDAC subsystem for Igen6 memory controllers). When the driver is unloaded, a kernel warning and call trace are triggered because the memory controller devices lack a required release() callback, as reported by the kobject core in drivers/base...

5.8AI score0.00206EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/28 6:48 a.m.•45 views

CVE-2026-80643 EDAC/igen6: Fix call trace due to missing release()

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

0.00206EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/28 6:48 a.m.•22 views

EUVD-2026-67519

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

5.8AI score0.00206EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/28 6:48 a.m.•18 views

CVE-2026-80643 EDAC/igen6: Fix call trace due to missing release()

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

5.8AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/08/28 6:48 a.m.•21 views

CVE-2026-80643

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

5.9AI score0.00206EPSS
SaveExploits0
CVE
CVE
•added 2026/08/28 3:39 a.m.•47 views

CVE-2026-16759

Tutor LMS (eLearning plugin for WordPress, versions ≤ 4.0.5 ) is vulnerable to unauthenticated Remote Code Execution limited to zero-argument function invocation via the tutor_course_filter_ajax AJAX action. The root cause is a missing authorization check combined with unsanitized array keys pass...

6.5CVSS6AI score0.0062EPSS
SaveIn wildExploits0References9
SUSE CVE
SUSE CVE
•added 2026/08/28 1:00 a.m.•14 views

SUSE CVE-2026-72214

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmemdeviceput causing reference leak In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained via nvmemdevicefind is not released with nvmemdeviceput on the success or...

5.9AI score0.00215EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•31 views

PT-2026-82943

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the igen6 edac driver where unloading the driver triggers a call trace. This occurs because the memory controller devices lack a release function, leading to a warning...

5.8AI score0.00206EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•31 views

PT-2026-82860

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited to zero-argument function invocation in all versions up to, and including, 4.0.5 via the tutor course filter ajax AJAX action. This is due to missing authorization on the handl...

6.5CVSS6AI score0.0062EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•2 views

CVE-2026-80643: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

5.8AI score0.00206EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•3 views

CVE-2026-39070: Improper Neutralization of Input During Web Page Generation

WordPress plugin Bit Assist before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role admin can exploit this to redirect user to malicious site or control the account...

4.8CVSS5.6AI score0.00242EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•27 views

PT-2026-83172

WordPress plugin Bit Assist before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role admin can exploit this to redirect user to malicious site or control the account...

5.8AI score0.00242EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/08/28 12:00 a.m.•20 views

EUVD-2026-67902

WordPress plugin Bit Assist before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role admin can exploit this to redirect user to malicious site or control the account...

5.8AI score0.00242EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/08/28 12:00 a.m.•43 views

CVE-2026-39070

WordPress plugin Bit Assist before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role admin can exploit this to redirect user to malicious site or control the account...

0.00242EPSS
SaveExploits1References1
CVE
CVE
•added 2026/08/28 12:00 a.m.•29 views

CVE-2026-39070

The Bit Assist WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in its Call-To-Action feature. This flaw affects versions 1.7.1 and lower , where an authenticated attacker with administrator privileges can insert a malicious payload into a widget's Call-To-Action form field. On...

4.8CVSS5.6AI score0.00242EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/08/28 12:00 a.m.•10 views

CVE-2026-39070

WordPress plugin Bit Assist before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role admin can exploit this to redirect user to malicious site or control the account...

5.6AI score0.00242EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2026-80643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it...

5.9AI score0.00206EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•4 views

PT-2026-86725

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6 edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

5.8AI score0.00206EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/08/27 8:13 p.m.•34 views

Exploit for Use After Free in Mozilla Firefox

CVE-2026-74936 A not fancy reproduction. The baseline require...

9.8CVSS6.2AI score0.00592EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/08/27 5:05 p.m.•23 views

CVE-2026-19092 Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output...

9.8CVSS6AI score0.02001EPSS
SaveExploits0References1
Rows per page
Query Builder