Lucene search
+L

18268 matches found

Positive Technologies
Positive Technologies
•added 2026/08/22 12:00 a.m.•23 views

PT-2026-79643

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

5.5AI score0.00206EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/22 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-74698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: fix BQL reset on SQ re-activation mlx5equeuestart deactivates and re-activates all channels but closes only the queue being restarted...

5.4AI score0.00206EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/22 12:00 a.m.•0 views

CVE-2026-74698: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5equeuestart deactivates and re-activates all channels but closes only the queue being restarted. mlx5eactivatetxqsq then unconditionally calls netdevtxresetqueue, zeroing the BQL...

5.8AI score0.00206EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/08/22 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-74686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rqspinlock: Reset tail when preserving queue on deadlock Currently, the destruction of the waiter queue is suppressed for rqspinlock in cases where a deadlock i...

6.1AI score0.0024EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/21 8:16 p.m.•15 views

CVE-2026-27462

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

7.5CVSS0.00432EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/21 7:52 p.m.•31 views

CVE-2026-27462

Combodo iTop , a web-based IT service management tool, is vulnerable to user enumeration via its password reset mechanism prior to version 3.2.3. The root cause is that the application returns different responses for valid and invalid usernames depending on multiple factors during the reset proce...

7.5CVSS5.4AI score0.00432EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/21 7:52 p.m.•34 views

CVE-2026-27462 Combodo iTop: User enumeration via password reset

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

7.5CVSS0.00432EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/21 7:52 p.m.•18 views

CVE-2026-27462 Combodo iTop: User enumeration via password reset

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

7.5CVSS5.5AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/21 7:52 p.m.•10 views

CVE-2026-27462 Combodo iTop: User enumeration via password reset

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

7.5CVSS5.2AI score0.00432EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/21 7:52 p.m.•14 views

EUVD-2026-64122

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

7.5CVSS5.4AI score0.00432EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/21 9:16 a.m.•17 views

CVE-2026-61398

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or...

9.1CVSS0.00568EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/21 8:25 a.m.•18 views

EUVD-2026-63839

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or...

5.3AI score0.00568EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/21 8:25 a.m.•8 views

CVE-2026-61398 Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or...

5.3AI score0.00568EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/21 8:25 a.m.•37 views

CVE-2026-61398

Apache CloudStack is affected by an improper encoding or escaping of output vulnerability in its user interface, specifically when utilizing the Instance Reset Password functionality. This flaw results in a Cross-Site Scripting (XSS) issue, allowing for the injection of malicious scripts into web...

5.3AI score0.00568EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/08/21 8:25 a.m.•46 views

CVE-2026-61398 Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or...

0.00568EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/08/21 12:44 a.m.•13 views

SUSE CVE-2026-68237

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset prereset only force-completes fences of MAPPED queues. A queue in any other state e.g. mid-eviction keeps its lastfence pending; after a GPU reset that fence never...

5.5AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•22 views

PT-2026-79324

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.15.1.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper encoding or escaping of output in the user interface occurs when using the Instance Reset Password functionality. Th...

9.1CVSS5.8AI score0.00568EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•1 views

CVE-2026-61398: Improper Encoding or Escaping of Output

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or...

9.1CVSS5.8AI score0.00568EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•1 views

CVE-2026-27462: Observable Response Discrepancy

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

7.5CVSS5.7AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•20 views

PT-2026-79441

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

7.5CVSS5.2AI score0.00432EPSS
SaveExploits0References3
Rows per page
Query Builder