Lucene search
K

82 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:19 p.m.5 views

CVE-2026-5712

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing...

8.8CVSS5.5AI score0.00163EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/05/28 2:43 a.m.7 views

CVE-2026-45898

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Internet Wide Area RDMA Protocol iWARP subsystem. Incorrect work submission logic in the iwcm component can lead to multiple queueing of work items. This allows a work item to be processed and freed while still present in the...

9.8CVSS5.8AI score0.00626EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.9 views

PT-2026-43722

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libata-scsi SAT implementation where non-NCQ Native Command Queuing commands can suffer from starvation. When a non-NCQ command is issued while NCQ commands are...

5.8AI score0.00215EPSS
Exploits0References13
NVD
NVD
added 2026/04/29 6:16 p.m.2 views

CVE-2026-5712

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing...

8.8CVSS0.00163EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/29 5:18 p.m.26 views

CVE-2026-5712 IdentityIQ Role Editor Incorrect Authorization Vulnerability

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing...

8CVSS0.00163EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/29 5:18 p.m.2 views

EUVD-2026-26260

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing...

8CVSS5.3AI score0.00163EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/29 5:18 p.m.1 views

CVE-2026-5712 IdentityIQ Role Editor Incorrect Authorization Vulnerability

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing...

8CVSS5.3AI score0.00163EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/29 5:18 p.m.1 views

CVE-2026-5712

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing...

8CVSS5.3AI score0.00163EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.5 views

PT-2026-35962

Name of the Vulnerable Software and Affected Versions IdentityIQ affected versions not specified Description An authenticated identity acting as the requestor or assignee of a work item can edit a role definition without possessing the required capability for role editing. Recommendations At the...

8.8CVSS5.8AI score0.00163EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/24 2:33 p.m.25 views

CVE-2026-31548 wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsrfreewk in cfg80211pmsrwdevdown When the nl80211 socket that originated a PMSR request is closed, cfg80211releasepmsr sets the request's nlportid to zero and schedules pmsrfreewk to process the abort...

7.8CVSS0.00129EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue with the delayed work item otgevent in the fslotgremove function, which could lea...

5.8AI score0.00181EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/12/24 12:23 p.m.28 views

CVE-2023-54071 wifi: rtw88: use work to update rate to avoid RCU warning

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: use work to update rate to avoid RCU warning The ieee80211ops::starcupdate must be atomic, because ieee80211chanbwchange holds rcuread lock while calling drvstarcupdate, so create a work to do original things...

0.00166EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-40171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-fc: move lsop put work to nvmetfclsreqop It's possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport...

5.8AI score0.00167EPSS
Exploits0References3
CVE
CVE
added 2025/10/20 3:26 p.m.10 views

CVE-2025-40007

CVE-2025-40007 — Linux kernel netfs reference leak (concrete details) The issue is in netfs: fix reference leak inside the Linux kernel’s netfs code. A commit (20d72b00ca81) changed netfs_alloc_request() to initialize the reference counter to 2 instead of 1, under the assumption that the request’...

6.4AI score0.00205EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/18 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a cyclic delayed work-item leading to reuse after release, which could lead to memory corruption...

6.1AI score0.00222EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/10/07 6:9 a.m.5 views

CVE-2025-11279

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. This issue affects some unknown processing of the component Add Work Item Page. The manipulation of the argument Title results in csv injection. The attack can be launched remotely. The exploit is now public and may be...

6.5CVSS6.8AI score0.00204EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2016-6962

Malware in sbrugna...

4.3CVSS4.8AI score0.00773EPSS
Exploits0References3
NVD
NVD
added 2025/10/05 3:15 a.m.6 views

CVE-2025-11279

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. This issue affects some unknown processing of the component Add Work Item Page. The manipulation of the argument Title results in csv injection. The attack can be launched remotely. The exploit is now public and may be...

6.5CVSS0.00204EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/05 3:2 a.m.10 views

CVE-2025-11279 Axosoft Scrum and Bug Tracking Add Work Item csv injection

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. This issue affects some unknown processing of the component Add Work Item Page. The manipulation of the argument Title results in csv injection. The attack can be launched remotely. The exploit is now public and may be...

6.5CVSS0.00204EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/05 3:2 a.m.3 views

CVE-2025-11279 Axosoft Scrum and Bug Tracking Add Work Item csv injection

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. This issue affects some unknown processing of the component Add Work Item Page. The manipulation of the argument Title results in csv injection. The attack can be launched remotely. The exploit is now public and may be...

6.5CVSS5.5AI score0.00204EPSS
Exploits0References4
Rows per page
Query Builder