Lucene search
+L

1380 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/03 4:59 p.m.4 views

CVE-2026-24667

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, failure to invalidate active user sessions after a password change allows existing session tokens to remain valid, potentially enabling unauthorized continued access to user...

5CVSS5.3AI score0.00129EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.8 views

PT-2026-6047

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor Cloud versions prior to 2026-02-03 Description Foxit PDF Editor Cloud pdfonline contains a stored cross-site scripting issue in the file upload feature. A malicious username is embedded into the upload file list without proper...

6.3CVSS5.4AI score0.00195EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.8 views

PT-2026-6199

Name of the Vulnerable Software and Affected Versions Open eClass versions prior to 4.2 Description The Open eClass platform, previously known as GUnet eClass, is a course management system. A flaw exists where active user sessions are not invalidated after a password change. This allows existing...

5CVSS5.4AI score0.00129EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.11 views

Open eClass 代码问题漏洞

Open eClass is an open-source e-classroom system developed by the Greek Universities Network. Versions of Open eClass prior to 4.2 contained code vulnerabilities. These vulnerabilities stemmed from the failure to invalidate active user sessions after password changes, allowing unauthorized access...

5CVSS5.9AI score0.00129EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/01/26 4:39 p.m.13 views

kernel: Linux kernel drm/xe: Out-of-bounds shift in TLB invalidation

A flaw was found in the Linux kernel's drm/xe component. This vulnerability allows a local attacker to cause a denial of service or information disclosure via an out-of-bounds shift during TLB invalidation...

7.1CVSS5.8AI score0.0018EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/01/26 2:32 p.m.6 views

kernel: Linux kernel drm/xe: Out-of-bounds shift in TLB invalidation

A flaw was found in the Linux kernel's drm/xe component. This vulnerability allows a local attacker to cause a denial of service or information disclosure via an out-of-bounds shift during TLB invalidation...

7.1CVSS5.8AI score0.0018EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/26 12:0 a.m.11 views

RHEL 10 : kernel (RHSA-2026:1236)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1236 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/compaction: fix UBSAN...

7.8CVSS6.1AI score0.00326EPSS
SaveExploits0References17
OSV
OSV
added 2026/01/20 4:16 p.m.4 views

CVE-2025-36065

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system...

6.5CVSS5.8AI score0.00158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/20 3:12 p.m.6 views

CVE-2025-36065 Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system...

6.3CVSS5.5AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/20 3:12 p.m.23 views

CVE-2025-36065 Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system...

6.3CVSS0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/20 3:10 p.m.20 views

CVE-2025-36063 Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

6.3CVSS0.00145EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.7 views

PT-2026-3588

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system...

6.3CVSS5.5AI score0.00158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.17 views

PT-2026-3587

Name of the Vulnerable Software and Affected Versions IBM Sterling Connect:Express Adapter for Sterling B2B Integrator versions 5.2.0.00 through 5.2.0.12 Description The software does not invalidate session data after a user logs out. This could potentially allow an authenticated user to...

6.5CVSS5.4AI score0.00145EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/01/17 12:51 a.m.14 views

SUSE CVE-2017-18905

An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidation was mishandled...

5.3CVSS7AI score0.00769EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/01/16 12:26 a.m.4 views

SUSE CVE-2025-71142

In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at remotepartitiondisable+0xf7/0x110 RIP: 0010:remotepartitiondisable+0xf7/0x110 RSP:...

5.5CVSS6.4AI score0.00102EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/01/15 5:38 p.m.10 views

CVE-2025-71089

A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing SVA implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and...

7.8CVSS6.5AI score0.00145EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.7 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003235 advisory. Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated user to potentially enable...

6.5CVSS6.8AI score0.00915EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.8 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003124 advisory. Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated user to potentially enable...

6.5CVSS6.8AI score0.00915EPSS
SaveExploits0References19
ATTACKERKB
ATTACKERKB
added 2026/01/14 3:7 p.m.3 views

CVE-2025-71142

In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at remotepartitiondisable+0xf7/0x110 RIP: 0010:remotepartitiondisable+0xf7/0x110 RSP:...

5.2AI score0.00102EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/01/14 3:7 p.m.32 views

CVE-2025-71142 cpuset: fix warning when disabling remote partition

In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at remotepartitiondisable+0xf7/0x110 RIP: 0010:remotepartitiondisable+0xf7/0x110 RSP:...

0.00102EPSS
SaveExploits0References2
Rows per page
Query Builder