Lucene search
+L

36576 matches found

UbuntuCve
UbuntuCve
added 2026/02/04 4:16 p.m.10 views

CVE-2026-23040

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not actually a valid channel. This could result in a NULL pointer dereference in...

5.7AI score0.00145EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/04 4:7 p.m.6 views

CVE-2026-23066

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg unconditional requeue If rxrpcrecvmsg fails because MSGDONTWAIT was specified but the call at the front of the recvmsg queue already has its mutex locked, it requeues the call - whether or not the call is alrea...

5.2AI score0.00129EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/02/04 4:0 p.m.11 views

CVE-2026-23040 wifi: mac80211_hwsim: fix typo in frequency notification

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not actually a valid channel. This could result in a NULL pointer dereference in...

5.2AI score
SaveExploits0References5
CVE
CVE
added 2026/02/04 4:0 p.m.48 views

CVE-2026-23040

CVE-2026-23040 is a Linux kernel vulnerability involving the wifi mac80211_hwsim: a typo in the frequency notification. The NAN notification was listed as 5745 MHz (channel 149) instead of a valid channel like 5475, which could lead to a NULL pointer dereference in cfg80211_next_nan_dw_notif. The...

5.2AI score0.00145EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/04 4:0 p.m.11 views

EUVD-2026-5507

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not actually a valid channel. This could result in a NULL pointer dereference in...

5.2AI score0.00145EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/02/04 4:0 p.m.11 views

CVE-2026-23040

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: fix typo in frequency notification The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not actually a valid channel. This could result in a NULL pointer dereference in...

5.2AI score0.00145EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/02/04 8:25 a.m.38 views

CVE-2026-0816 All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parameter

The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'deleteid' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

4.9CVSS0.00339EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/04 8:25 a.m.5 views

CVE-2026-0816

The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'deleteid' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

4.9CVSS5.8AI score0.00339EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/04 8:25 a.m.3 views

CVE-2026-0816 All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parameter

The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'deleteid' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

4.9CVSS5.8AI score0.00339EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/02/04 8:25 a.m.13 views

EUVD-2026-5411

The Fortis for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to an inverted nonce check in the 'checkfortisnotifyresponse' function in all versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to update arbitrary WooCommerce order...

5.3CVSS5.5AI score0.00345EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.22 views

PT-2026-6018

Name of the Vulnerable Software and Affected Versions Fortis for WooCommerce versions up to and including 1.2.0 Description The Fortis for WooCommerce plugin for WordPress has an authorization bypass issue because of an incorrect nonce check within the check fortis notify response function. This...

5.3CVSS5.4AI score0.00345EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.14 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a spelling error in the frequency notifications. This vulnerability may lead to null pointer...

5.8AI score0.00145EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.11 views

PT-2026-6022

Name of the Vulnerable Software and Affected Versions All push notification for WP versions up to and including 1.5.3 Description The All push notification for WP plugin for WordPress is susceptible to time-based SQL Injection via the delete id parameter. This is due to inadequate escaping of...

4.9CVSS5.8AI score0.00339EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/03 12:15 p.m.4 views

CVE-2025-6397

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ankara Hosting Website Design Website Software allows Reflected XSS. This issue affects Website Software: through 03022026. NOTE: The vendor was contacted early about this disclosure but did...

8.6CVSS5.4AI score0.00234EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/02 11:1 p.m.2 views

CVE-2025-6593 "{{SITENAME}} registered email address has been changed" email sent to unverified email addresses

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php. This issue affects MediaWiki: from 1.27.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0...

2.1CVSS5.3AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/02 11:1 p.m.37 views

CVE-2025-6593

CVE-2025-6593 affects Wikimedia Foundation MediaWiki. A remote attacker could entice a user to interact with malicious content in includes/user/User.Php, potentially leading to disclosure of limited sensitive information. Affected versions include MediaWiki 1.27.0 before 1.39.13, 1.42.7–1.43.2, a...

2.1CVSS5.2AI score0.00443EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/02/02 10:56 a.m.7 views

Server-side Request Forgery (SSRF)

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via insufficient validation of the backchannelclientnotificationendpoint,...

5.1CVSS5.9AI score0.00236EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/02 7:17 a.m.65 views

CVE-2026-1518

CVE-2026-1518 is marked as rejected in the public CVE feed. Connected documents, however, describe a Keycloak SSRF issue via the CIBA backchannel notification endpoint . The vulnerability arises from insufficient validation of the client-configured backchannel_notification_endpoint during client ...

5.3AI score0.00236EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/02/02 7:17 a.m.2 views

CVE-2026-1518

...

5.8AI score0.00236EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/02/02 12:0 a.m.14 views

Keycloak 代码问题漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak itself. Keycloak has code-related vulnerabilities; these vulnerabilities stem from insufficient backend notification endpoint validation by the CIBA function regarding client configurations. This may lead to...

2.7CVSS5.8AI score0.00236EPSS
SaveExploits0References2
Rows per page
Query Builder