Lucene search
+L

8345 matches found

Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•15 views

PT-2026-5104

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting XSS vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user...

5.1CVSS5.9AI score0.002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•27 views

PT-2026-5106

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting XSS vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user...

5.1CVSS5.9AI score0.002EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•18 views

Flexense Sync Breeze Enterprise Server and Flexense Disk Pulse Enterprise have vulnerabilities related to cross-site request forgeing attacks.

Flexense Sync Breeze Enterprise Server and Flexense Disk Pulse Enterprise are both products of Flexense Corporation. Flexense Sync Breeze Enterprise Server is a network file synchronization software. Flexense Disk Pulse Enterprise is a real-time file system monitoring software. Versions 10.4.18 o...

8.5CVSS5.7AI score0.00148EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•22 views

Flexense Sync Breeze Enterprise Server and Flexense Disk Pulse Enterprise have vulnerabilities related to cross-site request forgeing attacks.

Flexense Sync Breeze Enterprise Server and Flexense Disk Pulse Enterprise are both products of Flexense Corporation. Flexense Sync Breeze Enterprise Server is a network file synchronization software. Flexense Disk Pulse Enterprise is a real-time file system monitoring software. Both the Flexense...

8.5CVSS5.7AI score0.00148EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•22 views

Flexense Sync Breeze Enterprise Server and Flexense Disk Pulse Enterprise have cross-site scripting vulnerabilities

Flexense Sync Breeze Enterprise Server and Flexense Disk Pulse Enterprise are both products of Flexense Corporation. Flexense Sync Breeze Enterprise Server is a network file synchronization software. Flexense Disk Pulse Enterprise is a real-time file system monitoring software. Both the Flexense...

5.4CVSS5.7AI score0.002EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•25 views

PT-2026-5107

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting XSS vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user...

5.1CVSS5.9AI score0.002EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•19 views

Flexense Sync Breeze Enterprise Server and Flexense Disk Pulse Enterprise have vulnerabilities related to cross-site request forgeing attacks.

Flexense Sync Breeze Enterprise Server and Flexense Disk Pulse Enterprise are both products of Flexense Corporation. Flexense Sync Breeze Enterprise Server is a network file synchronization software. Flexense Disk Pulse Enterprise is a real-time file system monitoring software. Both the Flexense...

8.5CVSS5.7AI score0.00148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•1 views

CVE-2025-59897: Improper Neutralization of Input During Web Page Generation

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting XSS vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user...

5.4CVSS5.8AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/27 3:34 p.m.•6 views

CVE-2025-55095

The function uxhostclassstoragemediamount is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition. This recursion occurs in...

4.2CVSS5.9AI score0.00165EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/01/27 3:34 p.m.•44 views

CVE-2025-55095

The function uxhostclassstoragemediamount is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition. This recursion occurs in...

4.2CVSS0.00165EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2026/01/27 12:26 a.m.•14 views

SUSE CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS5.8AI score0.00131EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•0 views

CVE-2025-55095: Stack-based Buffer Overflow

The function uxhostclassstoragemediamount is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition. This recursion occurs in...

7CVSS5.7AI score0.00165EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/27 12:00 a.m.•19 views

PT-2026-4935

The function ux host class storage media mount is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition. This recursion occurs in ux host class storag...

4.2CVSS5.9AI score0.00165EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/24 9:15 a.m.•23 views

CVE-2026-0772

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS6.6AI score0.01259EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2026/01/24 12:24 a.m.•12 views

SUSE CVE-2026-24137

sigstore framework is a common go library shared across sigstore services and clients. In versions 1.10.3 and below, the legacy TUF client pkg/tuf/client.go supports caching target files to disk. It constructs a filesystem path by joining a cache base directory with a target name sourced from...

5.3CVSS5.7AI score0.00396EPSS
SaveExploits0References8
NVD
NVD
•added 2026/01/23 4:15 p.m.•11 views

CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS0.00131EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/23 4:15 p.m.•9 views

CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS6.6AI score0.00131EPSS
SaveExploits0References4
OSV
OSV
•added 2026/01/23 4:15 p.m.•11 views

UBUNTU-CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

7.8CVSS5.7AI score0.00131EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/01/23 3:24 p.m.•5 views

CVE-2026-22995

In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublkpartitionscanwork A race condition exists between the async partition scan work and device teardown that can lead to a use-after-free of ub-ubdisk: 1. ublkctrlstartdev schedules partitionscanwork...

5.7AI score0.00131EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/01/23 3:24 p.m.•37 views

CVE-2026-22995

The CVE concerns a Linux kernel race in ublk_partition_scan_work that can cause a use-after-free of ub->ub_disk due to a race between async partition scanning and device teardown. The vulnerability occurs when ublk_ctrl_start_dev() schedules partition_scan_work after add_disk(), and ublk_stop_...

7.8CVSS5.2AI score0.00131EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder