Lucene search
+L

44567 matches found

Vulnrichment
Vulnrichment
•added 2026/03/27 12:00 a.m.•12 views

CVE-2026-30569

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewstockavailability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web...

6.2AI score0.00276EPSS
SaveExploits1References1
Redos
Redos
•added 2026/03/27 12:00 a.m.•14 views

ROS-20260327-73-0007

A vulnerability in the Golang programming language is related to errors in the certificate authentication procedure. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

10CVSS7.3AI score0.00915EPSS
SaveExploits1
osv_opensuse
osv_opensuse
•added 2026/03/27 12:00 a.m.•33 views

OPENSUSE-SU-2026:10443-1 libsuricata8_0_4-8.0.4-1.1 on GA media

These are all security issues fixed in the libsuricata804-8.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.2AI score0.00365EPSS
SaveExploits0References6
CVE
CVE
•added 2026/03/27 12:00 a.m.•35 views

CVE-2026-30569

CVE-2026-30569 affects SourceCodester Sales and Inventory System 1.0. The flaw is a reflected XSS in view_stock_availability.php triggered through the limit parameter, with the app failing to sanitize input. This enables an attacker to inject arbitrary script/HTML via a crafted URL. CVSSv3.1 base...

6.1CVSS6.2AI score0.00276EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2026/03/27 12:00 a.m.•25 views

SourceCodester Inventory System Cross-site Scripting Vulnerabilities

The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System has a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of the limit parameter in the viewstockavailability.php...

6.1CVSS5.7AI score0.00276EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/03/27 12:00 a.m.•21 views

PT-2026-28410

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Inventory System 1.0. The vulnerability is located in the view stock availability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...

6AI score0.00276EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•19 views

FreeRDP xf_SetWindowMinMaxInfo xf_rail_get_window RCE

The vulnerabilities of the functions xfSetWindowMinMaxInfo and xfrailgetwindow in the RDP client FreeRDP are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

10CVSS8.9AI score0.00687EPSS
SaveExploits1References16Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•18 views

FreeRDP RDP Client Heap Buffer Overflow DoS

The vulnerability of the xfAppUpdateWindowFromSurface function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS9AI score0.00566EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•19 views

FreeRDP xf_clipboard_format_equal RCE

The vulnerability of the xfclipboardformatequal function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS9AI score0.00651EPSS
SaveExploits1References14Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•17 views

Linux kernel btrfs_read_locked inode function Heap Buffer Overflow DoS

The vulnerability of the btrfsreadlocked inode function in the fs/btrfs/inode.c file of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

5.5CVSS6.9AI score0.0012EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•11 views

NFS D4 Decode Compound

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

7.8CVSS8.1AI score0.00305EPSS
SaveExploits0References19Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•22 views

mac80211 Stack Use-After-Free

The vulnerability of the ieee80211rxmgmtassocresp function in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

7CVSS6.8AI score0.00157EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•31 views

Linux Kernel skb_copy_ubufs Buffer Overflow

The vulnerability of the skbcopyubufs function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, relates to the issue of data being written outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

7CVSS6.7AI score0.00156EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•19 views

Linux kernel DMA driver module Heap Buffer Overflow DoS

The vulnerability of the opmapdmaprobe function in the drivers/dma/ti/omap-dma.c file of the Linux kernel’s DMA driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentialit...

5.5CVSS8.4AI score0.00226EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•17 views

Linux net/ipv4/inet_fragment Heap Buffer Overflow DoS

The vulnerability of the inetfragqueueinsert function in the net/ipv4/inetfragment.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

5.5CVSS6.8AI score0.00152EPSS
SaveExploits0References4Affected Software1
osv_opensuse
osv_opensuse
•added 2026/03/27 12:00 a.m.•9 views

OPENSUSE-SU-2026:10444-1 traefik-3.6.12-1.1 on GA media

These are all security issues fixed in the traefik-3.6.12-1.1 package on the GA media of openSUSE Tumbleweed...

8.3CVSS6.3AI score0.00471EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/03/26 3:13 p.m.•21 views

CVE-2025-20096

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...

5.9CVSS5.8AI score0.00146EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:13 p.m.•16 views

CVE-2025-71258

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbitrary outbound requests. Attackers can exploit improper URL validation to...

5.3CVSS6.1AI score0.1743EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:06 p.m.•19 views

CVE-2026-22321

A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condition crashes the thread handling the login attempt, forcing the session to close. Because other CLI sessions remain...

5.3CVSS6.2AI score0.00381EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:04 p.m.•24 views

CVE-2026-21671

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution RCE in high availability HA deployments of Veeam Backup & Replication...

9.1CVSS8.1AI score0.01383EPSS
SaveExploits0References1
Rows per page
Query Builder