Lucene search
+L

5248 matches found

CVE
CVE
added 2026/08/06 7:13 a.m.90 views

CVE-2026-64594

The CVE affects the Linux kernel USB gadget subsystem (functionfs) and specifically f_fs. The bug occurs because ffs->reset_work is not initialized on all code paths; it is only initialized via INIT_WORK() in ffs_func_set_alt() and ffs_func_disable() under FFS_DEACTIVATED, and only after ffs_d...

5.4AI score0.00165EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/06 7:13 a.m.12 views

CVE-2026-64594 usb: gadget: f_fs: initialize reset_work at allocation time

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: initialize resetwork at allocation time ffsfskillsb unconditionally calls cancelworksync on ffs-resetwork when a functionfs instance is unmounted: ffsdataresetffs; cancelworksync&ffs-resetwork; However...

5.4AI score
SaveExploits0References11
CVE
CVE
added 2026/08/06 7:13 a.m.75 views

CVE-2026-64590

The CVE-2026-64590 entry concerns the Linux kernel dma-buf/udmabuf path where, with CONFIG_DMA_API_DEBUG_SG enabled, importing udmabuf into a DRM driver (e.g., amdgpu) could emit a spurious cacheline EEXIST warning due to overlapping per-page SG mappings. The fix is to pass DMA_ATTR_SKIP_CPU_SYNC...

5.3AI score0.00165EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/06 7:06 a.m.24 views

CVE-2026-64584 usb: gadget: f_midi: cancel pending IN work before freeing the midi object

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

7.8CVSS5.2AI score
SaveExploits0References11
OSV
OSV
added 2026/08/06 12:07 a.m.9 views

RLSA-2026:49871 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown CVE-2025-68214 kernel: procfs: avoid fetching build ID while holding VMA lock CVE-2026-23199 Bug Fixes...

5.5CVSS5.5AI score0.0013EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/05 6:37 a.m.47 views

CVE-2026-7726 Layouts for WPBakery <= 1.1.3 - Missing Authorization to Unauthenticated Template Cache Manipulation via 'handle_sync' AJAX Action

The Layouts for WPBakery plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on the LayoutsWPBRemote::templatesync callback registered via wpajaxnoprivhandlesync in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated...

6.5CVSS0.00267EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/05 6:37 a.m.9 views

CVE-2026-7726

The Layouts for WPBakery plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on the LayoutsWPBRemote::templatesync callback registered via wpajaxnoprivhandlesync in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated...

6.5CVSS5.5AI score0.00267EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/08/05 6:37 a.m.10 views

CVE-2026-7726 Layouts for WPBakery <= 1.1.3 - Missing Authorization to Unauthenticated Template Cache Manipulation via 'handle_sync' AJAX Action

The Layouts for WPBakery plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on the LayoutsWPBRemote::templatesync callback registered via wpajaxnoprivhandlesync in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated...

6.5CVSS5.5AI score0.00267EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/04 9:16 p.m.15 views

CVE-2026-70488

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file ids supplied in the request body without checking that those objec...

4.3CVSS0.00213EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/08/04 8:35 p.m.19 views

Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

Summary A user with write access to one knowledge base could delete directories, and drop file embeddings, belonging to knowledge bases they do not control. The sync cleanup endpoint verified write access on the knowledge base named in the URL and then acted on the directory and file ids supplied...

4.3CVSS5.5AI score0.00213EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/08/04 8:35 p.m.10 views

GHSA-JXC9-XMC4-GR23 Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

Summary A user with write access to one knowledge base could delete directories, and drop file embeddings, belonging to knowledge bases they do not control. The sync cleanup endpoint verified write access on the knowledge base named in the URL and then acted on the directory and file ids supplied...

4.3CVSS5.5AI score0.00213EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/04 8:35 p.m.40 views

CVE-2026-70488 Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file ids supplied in the request body without checking that those objec...

4.3CVSS0.00213EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/04 8:35 p.m.74 views

CVE-2026-70488

CVE-2026-70488 – Open WebUI : In Open WebUI builds from 0.9.6 to 0.11.0, the sync cleanup endpoint (POST /api/v1/knowledge/{id}/sync/cleanup) did not properly constrain actions to the target knowledge base. The handler authenticated write access via the URL knowledge base, then acted on directory...

4.3CVSS5.5AI score0.00213EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/04 8:35 p.m.24 views

CVE-2026-70488 Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file ids supplied in the request body without checking that those objec...

4.3CVSS5.4AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/04 7:25 a.m.55 views

CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...

8.5CVSS0.00116EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/04 7:25 a.m.59 views

CVE-2026-18759

CVE-2026-18759 affects ASUSTOR Backup Plan (ABP) and ASUSTOR EZ Sync (AES): a file-based IPC protected by AES can be abused by a local authenticated user to recover the IPC key (readable by standard users, DPAPI-protected) and forge IPC requests. Combined with an insufficient substring check for ...

8.5CVSS5.6AI score0.00116EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/08/04 3:55 a.m.15 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the StatementSyncIterator. An attacker can execute unintended SQL statements with altered parameters by leveraging a stale iterator after the underlying statement has been reset and...

6CVSS6.5AI score0.00253EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/04 12:49 a.m.10 views

CVE-2026-58041

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...

5.3CVSS6.2AI score0.00253EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/04 12:49 a.m.18 views

EUVD-2026-52561

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...

5.3CVSS6.2AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/03 9:16 p.m.13 views

CVE-2026-48063

Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a malicious payload via the placeholderResendMessage and trigger a fake messages.upsert event with a fake message key and payload. This allows anyone to...

9.3CVSS0.00157EPSS
SaveExploits0References2
Rows per page
Query Builder