Lucene search
+L

37641 matches found

Redos
Redos
added 2026/04/03 12:0 a.m.8 views

ROS-20260403-73-0037

A vulnerability in the doregisterframebuffer function of the fbdev/core/fbmem.c component of the Linux kernel is related to writing outside the buffer boundaries. Exploitation of the vulnerability allows an attacker to violate the integrity and availability of protected information...

7.8CVSS6.7AI score0.00186EPSS
SaveExploits0
Redos
Redos
added 2026/04/03 12:0 a.m.8 views

ROS-20260403-73-0006

A vulnerability in the setblocksize function of the block/bdev.c module of the Linux kernel block layer is related to null pointer dereferencing. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

6.6AI score0.00011EPSS
SaveExploits0
EUVD
EUVD
added 2026/04/02 12:31 p.m.8 views

EUVD-2026-18176

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

9.1CVSS6.1AI score0.00415EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/02 10:16 a.m.11 views

CVE-2026-33615

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

9.1CVSS0.00415EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/02 8:59 a.m.3 views

CVE-2026-33615 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

9.1CVSS6.1AI score0.00415EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/02 8:59 a.m.35 views

CVE-2026-33615 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

9.1CVSS0.00415EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/02 8:59 a.m.17 views

CVE-2026-33615

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

9.1CVSS6.1AI score0.00415EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2026/04/02 12:0 a.m.5 views

python311-Pygments-2.20.0-2.1 on GA media (moderate)

python311-Pygments-2.20.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10476-1 Rating: moderate Cross-References: CVE-2026-4539 CVSS scores: CVE-2026-4539 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

3.3CVSS5.8AI score0.00156EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2026/04/02 12:0 a.m.4 views

conftest-0.67.1-2.1 on GA media (moderate)

conftest-0.67.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10472-1 Rating: moderate Cross-References: CVE-2026-33747 CVSS scores: CVE-2026-33747 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-33747 SUSE : 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

8.6CVSS5.9AI score0.00498EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.17 views

PT-2026-29712

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

9.1CVSS6.1AI score0.00415EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.7 views

PT-2026-29807

Name of the Vulnerable Software and Affected Versions opensc affected versions not specified Description These are all security issues fixed in the opensc-0.27.1-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations At the moment, there is no information about a newer version that...

5.7CVSS5.8AI score0.00176EPSS
SaveExploits0References20
OSV
OSV
added 2026/04/01 12:0 a.m.1 views

OPENSUSE-SU-2026:10480-1 python313-3.13.12-3.1 on GA media

These are all security issues fixed in the python313-3.13.12-3.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.9AI score0.00638EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/01 12:0 a.m.2 views

OPENSUSE-SU-2026:10478-1 python311-3.11.15-4.1 on GA media

These are all security issues fixed in the python311-3.11.15-4.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.9AI score0.00638EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2026/04/01 12:0 a.m.2 views

python311-nltk-3.9.4-1.1 on GA media (moderate)

python311-nltk-3.9.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10461-1 Rating: moderate Cross-References: CVE-2026-33230 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

6.1CVSS5.9AI score0.00331EPSS
SaveExploits1
CVE
CVE
added 2026/04/01 12:0 a.m.16 views

CVE-2025-67807

The CVE describes an authentication behavior issue in Sage DPW 2025_06_004 where login responses differ for valid vs. invalid usernames, enabling account enumeration on versions prior to 2021_06_000. Affected product: Sage DPW (on-premise deployments); root cause: discriminatory responses during ...

4.7CVSS5.8AI score0.00142EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/01 12:0 a.m.8 views

The vulnerability of the hci_cs_disconnect() function in the net/bluetooth/hci_event.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcicsdisconnect function in the net/bluetooth/hcievent.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS7AI score0.00228EPSS
SaveExploits0References19Affected Software4
OSV
OSV
added 2026/04/01 12:0 a.m.3 views

OPENSUSE-SU-2026:10472-1 conftest-0.67.1-2.1 on GA media

These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed...

9.8CVSS5.9AI score0.00498EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/01 12:0 a.m.2 views

OPENSUSE-SU-2026:10473-1 dnsdist-2.0.3-1.1 on GA media

These are all security issues fixed in the dnsdist-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

8.2CVSS5.9AI score0.01028EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/01 12:0 a.m.2 views

OPENSUSE-SU-2026:10475-1 opensc-0.27.1-1.1 on GA media

These are all security issues fixed in the opensc-0.27.1-1.1 package on the GA media of openSUSE Tumbleweed...

6.8CVSS5.9AI score0.00282EPSS
SaveExploits2References5
OSV
OSV
added 2026/04/01 12:0 a.m.2 views

OPENSUSE-SU-2026:10479-1 python312-3.12.13-4.1 on GA media

These are all security issues fixed in the python312-3.12.13-4.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.9AI score0.00638EPSS
SaveExploits0References4
Rows per page
Query Builder