Lucene search
+L

1976 matches found

Cvelist
Cvelist
•added 2026/02/04 4:07 p.m.•38 views

CVE-2026-23063 uacce: ensure safe queue release with state management

In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly calling putqueue carries risks since it cannot guarantee that resources of uaccequeue have been fully released beforehand. So adding a stopqueue operation for the...

0.00131EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/02/04 4:07 p.m.•9 views

EUVD-2026-5481

In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly calling putqueue carries risks since it cannot guarantee that resources of uaccequeue have been fully released beforehand. So adding a stopqueue operation for the...

5.3AI score0.00131EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/04 4:07 p.m.•9 views

CVE-2026-23063

In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly calling putqueue carries risks since it cannot guarantee that resources of uaccequeue have been fully released beforehand. So adding a stopqueue operation for the...

5.3AI score0.00131EPSS
SaveExploits0References8Affected Software1
CVE
CVE
•added 2026/02/04 4:07 p.m.•63 views

CVE-2026-23063

CVE-2026-23063 pertains to the Linux kernel, specifically the UACCE accelerator framework. The issue arises in the queue release path for uacce_queue when resources could be freed concurrently (e.g., during poweroff -f with accelerators still active). The root cause is unsafe sequencing of operat...

5.5CVSS5.3AI score0.00131EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/02/04 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2026-23063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uacce: ensure safe queue release with state management Directly calling putqueue carries risks since it cannot guarantee that resources of uaccequeue have been...

5.5CVSS6AI score0.00131EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/29 3:19 p.m.•28 views

CVE-2025-14795

The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1. This is due to missing nonce validation in the ssaddtoallowlist class. This makes it possible for unauthenticated attackers to add arbitrary email addresses to...

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/28 2:16 p.m.•16 views

CVE-2025-14795

The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1. This is due to missing nonce validation in the ssaddtoallowlist class. This makes it possible for unauthenticated attackers to add arbitrary email addresses to...

4.3CVSS0.00181EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/28 1:26 p.m.•41 views

CVE-2025-14795 Stop Spammers Classic <= 2026.1 - Cross-Site Request Forgery via Email Allowlist

The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1. This is due to missing nonce validation in the ssaddtoallowlist class. This makes it possible for unauthenticated attackers to add arbitrary email addresses to...

4.3CVSS0.00181EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/28 1:26 p.m.•6 views

CVE-2025-14795

The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1. This is due to missing nonce validation in the ssaddtoallowlist class. This makes it possible for unauthenticated attackers to add arbitrary email addresses to...

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References5
CVE
CVE
•added 2026/01/28 1:26 p.m.•37 views

CVE-2025-14795

CVE-2025-14795 affects the Stop Spammers Classic WordPress plugin. It is a CSRF vulnerability caused by missing nonce validation in the ss_addtoallowlist class, enabling unauthenticated attackers to add email addresses to the spam allowlist via forged requests, if a site admin is tricked into cli...

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/01/28 1:56 a.m.•18 views

WordPress Stop Spammers Classic plugin <= 2026.1 - Cross-Site Request Forgery via Email Allowlist vulnerability

Cross-Site Request Forgery via Email Allowlist vulnerability discovered by JoanClarke2 in WordPress Plugin Stop Spammers versions = 2026.1...

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•2 views

CVE-2025-14795: Cross-Site Request Forgery (CSRF)

The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1. This is due to missing nonce validation in the ssaddtoallowlist class. This makes it possible for unauthenticated attackers to add arbitrary email addresses to...

4.3CVSS5.7AI score0.00181EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•18 views

WordPress plugin Stop Spammers Classic has a cross-site request forgeing vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.00181EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•22 views

PT-2026-5122

The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1. This is due to missing nonce validation in the ss addtoallowlist class. This makes it possible for unauthenticated attackers to add arbitrary email addresses to...

4.3CVSS5.9AI score0.00181EPSS
SaveExploits0References5
OSV
OSV
•added 2026/01/22 3:19 p.m.•8 views

SUSE-SU-2026:0246-1 Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.91 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1254451. - CVE-2022-50409: net: If sock is dead don't access sock's skwq in...

9.8CVSS6.9AI score0.00432EPSS
SaveExploits2References21
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•11 views

SUSE SLES15 Security Update : kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:0168-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0168-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.164 fixes various security issues The following security issues were fixed: ...

9.8CVSS7.4AI score0.00432EPSS
SaveExploits2References31
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•14 views

Azure Linux 3.0 Security Update: qemu (CVE-2024-4693)

The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4693 advisory. - A flaw was found in the QEMU Virtio PCI Bindings hw/virtio/virtio-pci.c. An improper release and use of the irq...

5.5CVSS5.5AI score0.00324EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•7 views

SUSE SLES15 Security Update : kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:0173-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0173-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.88 fixes various security issues The following security issues were fixed: -...

9.8CVSS7.5AI score0.00432EPSS
SaveExploits2References31
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•9 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-47730)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47730 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - inject error befo...

7.8CVSS6.7AI score0.00253EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•12 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-37985)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37985 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdmopen and...

4.7CVSS6.7AI score0.00134EPSS
SaveExploits0References2
Rows per page
Query Builder