Lucene search
+L

11755 matches found

Positive Technologies
Positive Technologies
added 2026/02/05 12:00 a.m.20 views

PT-2026-6574

Name of the Vulnerable Software and Affected Versions Nsauditor version 3.2.0.0 Description The software contains a denial of service condition in the registration name input field. An attacker can cause the application to crash by providing a malicious payload of 1000 bytes of repeated character...

7.5CVSS5.5AI score0.00455EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/02/05 12:00 a.m.24 views

PT-2026-6587

Name of the Vulnerable Software and Affected Versions HRSALE version 1.1.8 Description HRSALE version 1.1.8 is susceptible to a cross-site request forgery condition. This allows attackers to add unauthorized administrative users via the employee registration form. An attacker can create a malicio...

5.1CVSS5.2AI score0.00156EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/02/05 12:00 a.m.16 views

PT-2026-6575

Name of the Vulnerable Software and Affected Versions Nsauditor Product Key Explorer version 4.2.2.0 Description The application can be crashed by a local attacker inputting a specially crafted registration key. A payload of 1000 bytes of repeated characters, when pasted into the 'Key' input fiel...

6.7CVSS5.4AI score0.00228EPSS
SaveExploits1References6
OSV
OSV
added 2026/02/04 5:16 p.m.14 views

UBUNTU-CVE-2026-23101

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

4.7CVSS5.8AI score0.0012EPSS
SaveExploits0References35
EUVD
EUVD
added 2026/02/04 4:08 p.m.12 views

EUVD-2026-5441

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

5.2AI score0.0012EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.8 views

CVE-2025-59439

An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions...

7.5CVSS5.3AI score0.00428EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.13 views

CVE-2026-25222

PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, a timing attack vulnerability in the sign-in process allows unauthenticated attackers to determine if a specific email address is registered on the platform. By measuring the response time of the login endpoint...

7.5CVSS5.5AI score0.00429EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/02/04 12:00 a.m.13 views

Espressif ESP-IDF 数字错误漏洞

Espressif ESP-IDF is an IoT development framework developed by Espressif, a Chinese company. Versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6 of Espressif ESP-IDF contain numerical error vulnerabilities. These vulnerabilities stem from integer underflow during the processing ofEAP-WSC packets in th...

8CVSS5.8AI score0.00213EPSS
SaveExploits0References9
CNVD
CNVD
added 2026/02/04 12:00 a.m.9 views

WordPress Plugin Simple User Registration Access Control Error Vulnerability

WordPress is a set of blogging platform developed using the PHP language, the platform has the ability to set up a personal blog site on a server based on PHP and MySQL, WordPress plugin is an application plugin. An access control error vulnerability exists in the WordPress plugin Simple User...

8.8CVSS5.5AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/03 6:16 p.m.13 views

CVE-2025-59439

An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions...

7.5CVSS0.00428EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/03 12:00 a.m.9 views

EUVD-2025-206709

An issue was discovered in Samsung Modem Exynos through 2025-08-29. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions...

7.5CVSS5.4AI score0.00428EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/03 12:00 a.m.40 views

CVE-2025-59439

An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions...

0.00428EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/03 12:00 a.m.42 views

CVE-2025-59439

CVE-2025-59439 affects Samsung Exynos-based devices (Mobile Processor, Wearable Processor and Modem: Exynos 980/990/850/1080/9110/W920/W930/W1000 and Modem 5123). The issue is due to incorrect handling of NAS Registration messages, leading to Denial of Service from improper handling of exceptiona...

7.5CVSS5.3AI score0.00428EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.10 views

PT-2026-5923

An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions...

7.5CVSS5.5AI score0.00428EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.22 views

SAMSUNG Modem Exynos 安全漏洞

Samsung Modem Exynos is a series of modem chips developed by South Korea’s Samsung Corporation. The Samsung Modem Exynos 2025-08-29 and earlier versions have security vulnerabilities. These vulnerabilities stem from improper handling of NAS registration messages, which may lead to denial-of-servi...

7.5CVSS5.8AI score0.00428EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/03 12:00 a.m.4 views

CVE-2025-59439

An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions...

5.3AI score0.00428EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/02 11:01 p.m.7 views

CVE-2026-25222

PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, a timing attack vulnerability in the sign-in process allows unauthenticated attackers to determine if a specific email address is registered on the platform. By measuring the response time of the login endpoint...

6.3CVSS5.5AI score0.00429EPSS
SaveExploits1References3Affected Software1
Snyk
Snyk
added 2026/02/02 10:56 a.m.7 views

Server-side Request Forgery (SSRF)

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via insufficient validation of the backchannelclientnotificationendpoint,...

5.1CVSS5.9AI score0.00236EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/02 8:14 a.m.11 views

CVE-2025-71182

In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939sessionactivate fail if device is no longer registered syzbot is still reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 even after commit 93a27b5891b8 "can: j1939: add missing...

5.5CVSS5AI score0.00162EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/02/02 8:04 a.m.13 views

WordPress WP Affiliate Platform plugin < 6.5.1 - Reflected XSS via Registration Form vulnerability

Reflected XSS via Registration Form vulnerability discovered by Bob Matyas in WordPress Plugin Affiliate Manager versions 6.5.1...

6.1CVSS5.2AI score0.00345EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder