Lucene search
+L

11697 matches found

Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.16 views

PT-2026-35907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpeverest User Registration user-registration allows Reflected XSS.This issue affects User Registration: from n/a through = 5.1.5...

7.1CVSS5.2AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/29 12:00 a.m.15 views

WordPress Plugin User Registration 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.00149EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.27 views

PT-2026-36906

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.32 n8n versions prior to 2.17.4 n8n versions prior to 2.18.1 Description The MCP OAuth client registration endpoint accepts unauthenticated requests and stores client data without adequate resource controls. A remot...

8.7CVSS5.8AI score0.00487EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2026/04/29 12:00 a.m.19 views

Flexense SysGauge Pro 安全漏洞

Flexense SysGauge Pro is a system analysis tool developed by Flexense Corporation, designed for real-time monitoring of system performance and resource usage. Version 4.6.12 of Flexense SysGauge Pro contains a security vulnerability. This vulnerability stems from a local buffer overflow in the...

8.6CVSS6.4AI score0.0015EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.14 views

PT-2026-35978

Name of the Vulnerable Software and Affected Versions SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0 Description A cross-site scripting issue exists in the Registration component. A remote attacker can execute this by manipulating the student id, full name,...

5.3CVSS4.5AI score0.0032EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/04/27 7:23 p.m.14 views

CVE-2026-41427

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.5, the clientPrivileges option documents a create action, but the OAuth client creation endpoints did not invoke the hook before persisting new clients. Deployments that configured clientPrivileges to restrict...

7.1CVSS5.3AI score0.00212EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/27 6:16 p.m.14 views

CVE-2026-31687

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

5.5CVSS0.00096EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2026/04/27 5:32 p.m.38 views

CVE-2026-31687 gpio: omap: do not register driver in probe()

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

0.00096EPSS
SaveExploits0References11
EUVD
EUVD
added 2026/04/27 5:32 p.m.25 views

EUVD-2026-25884

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

5.3AI score0.00096EPSS
SaveExploits0References11
CVE
CVE
added 2026/04/27 5:32 p.m.49 views

CVE-2026-31687

The CVE-2026-31687 issue concerns the Linux kernel GPIO/omap driver: omap_mpuio_driver was registered from omap_gpio_probe() and could deadlock because a device lock may be held during probe, compounded by the driver core changes enforcing device_lock for driver_match_device(). The driver was als...

5.5CVSS5.4AI score0.00096EPSS
SaveExploits0References11Affected Software1
OSV
OSV
added 2026/04/27 5:32 p.m.12 views

CVE-2026-31687 gpio: omap: do not register driver in probe()

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

5.9AI score
SaveExploits0References14
NVD
NVD
added 2026/04/26 10:17 p.m.12 views

CVE-2018-25289

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help...

6.9CVSS0.00137EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/26 10:17 p.m.13 views

CVE-2018-25276

RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields and click Register to trigger an...

6.8CVSS0.00116EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/26 10:17 p.m.9 views

CVE-2018-25278

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet...

6.9CVSS0.00145EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/26 1:19 p.m.7 views

CVE-2018-25289

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help...

6.9CVSS5.8AI score0.00137EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/26 1:19 p.m.5 views

CVE-2018-25289 Softdisk 3.0.3 Buffer Overflow Denial of Service

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help...

6.9CVSS5.8AI score0.00137EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/26 1:19 p.m.18 views

CVE-2018-25289

Softdisk 3.0.3 contains a local buffer overflow in the registration code dialog. The vulnerability is triggered when a 6000-byte payload is entered into the Registration Name field via the Help menu → Enter Registration Code dialog, allowing a local attacker to cause a denial of service by causin...

6.9CVSS5.8AI score0.00137EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/26 1:19 p.m.12 views

EUVD-2018-21809

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help...

6.9CVSS5.8AI score0.00137EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/04/26 1:19 p.m.41 views

CVE-2018-25289 Softdisk 3.0.3 Buffer Overflow Denial of Service

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help...

6.9CVSS0.00137EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/26 1:19 p.m.8 views

CVE-2018-25278 PicaJet FX 2.6.5 Denial of Service via Registration Fields

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet...

6.9CVSS5.5AI score0.00145EPSS
SaveExploits0References2
Rows per page
Query Builder