Lucene search
+L

7884 matches found

Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.18 views

PT-2026-6684

Name of the Vulnerable Software and Affected Versions DCN DCME-320 versions up to 20260121 Description A flaw exists in the Web Management Backend component of DCN DCME-320. Specifically, manipulating the ip list argument within the apply config function of the /function/system/basic/bridge cfg.p...

5.8CVSS5.4AI score0.17779EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.16 views

PT-2026-37551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pci slot trylock function where error handling is incorrectly implemented. Following a change that delegated the bridge device's pci dev trylock to pci bus trylock...

7.8CVSS5.5AI score0.00107EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2026/02/04 5:16 p.m.14 views

CVE-2026-23049

In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel The connector type for the DataImage SCF0700C48GGU18 panel is missing and devmdrmpanelbridgeadd requires connector type to be set. This leads to a warning a...

5.3AI score0.0018EPSS
SaveExploits0References34
CVE
CVE
added 2026/02/04 4:04 p.m.61 views

CVE-2026-23049

CVE-2026-23049 concerns the Linux kernel drm/panel-simple code for the DataImage SCF0700C48GGU18 panel. The issue is a missing/invalid connector type, which causes a warning and a backtrace in the kernel log and prevents the panel from working when using devm_drm_panel_bridge_add()/devm_drm_of_ge...

5.2AI score0.0018EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/02/04 4:04 p.m.10 views

EUVD-2026-5497

In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel The connector type for the DataImage SCF0700C48GGU18 panel is missing and devmdrmpanelbridgeadd requires connector type to be set. This leads to a warning a...

5.2AI score0.0018EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/04 4:04 p.m.9 views

CVE-2026-23049

In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel The connector type for the DataImage SCF0700C48GGU18 panel is missing and devmdrmpanelbridgeadd requires connector type to be set. This leads to a warning a...

5.2AI score0.0018EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/02/04 4:04 p.m.41 views

CVE-2026-23049 drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel

In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel The connector type for the DataImage SCF0700C48GGU18 panel is missing and devmdrmpanelbridgeadd requires connector type to be set. This leads to a warning a...

0.0018EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2026/02/02 6:52 a.m.17 views

WordPress Bridge Core plugin <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by István Márton - Wordfence in WordPress Plugin Bridge Core versions = 3.2.0...

6.4CVSS5.9AI score0.0029EPSS
SaveExploits0References1Affected Software1
Redos
Redos
added 2026/02/02 12:00 a.m.9 views

ROS-20260202-73-0036

A vulnerability in the pciregisterhostbridge function of the Linux operating system kernel is related to memory re-release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.5AI score0.00301EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/31 9:13 p.m.22 views

CVE-2026-22792

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML including on event attributes to execute in the renderer context. An attacker can inject an payload to run arbitrary...

9.6CVSS6.1AI score0.00832EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/29 9:24 a.m.21 views

CVE-2026-1244

The Forms Bridge – Infinite integrations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in the 'financoopcampaign' shortcode in all versions up to, and including, 4.2.5. This is due to insufficient input sanitization and output escaping on the...

6.4CVSS6AI score0.00261EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/01/28 4:33 p.m.15 views

Malicious Package

Overview gravity-bridge-site is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
NVD
NVD
added 2026/01/28 7:16 a.m.15 views

CVE-2026-1244

The Forms Bridge – Infinite integrations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in the 'financoopcampaign' shortcode in all versions up to, and including, 4.2.5. This is due to insufficient input sanitization and output escaping on the...

6.4CVSS0.00261EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/28 6:43 a.m.8 views

CVE-2026-1244 Forms Bridge <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

The Forms Bridge – Infinite integrations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in the 'financoopcampaign' shortcode in all versions up to, and including, 4.2.5. This is due to insufficient input sanitization and output escaping on the...

6.4CVSS6AI score0.00261EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/28 6:43 a.m.7 views

CVE-2026-1244

The Forms Bridge – Infinite integrations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in the 'financoopcampaign' shortcode in all versions up to, and including, 4.2.5. This is due to insufficient input sanitization and output escaping on the...

6.4CVSS6AI score0.00261EPSS
SaveExploits0References5
CVE
CVE
added 2026/01/28 6:43 a.m.64 views

CVE-2026-1244

CVE-2026-1244 – WordPress Forms Bridge vulnerability The Forms Bridge – Infinite integrations plugin for WordPress (

6.4CVSS6AI score0.00261EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/28 6:43 a.m.39 views

CVE-2026-1244 Forms Bridge <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

The Forms Bridge – Infinite integrations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in the 'financoopcampaign' shortcode in all versions up to, and including, 4.2.5. This is due to insufficient input sanitization and output escaping on the...

6.4CVSS0.00261EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/01/28 1:36 a.m.14 views

WordPress Forms Bridge plugin <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability discovered by zaim in WordPress Plugin Forms Bridge versions = 4.2.5...

6.4CVSS5.9AI score0.00261EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.20 views

PT-2026-5068

The Forms Bridge – Infinite integrations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute in the 'financoop campaign' shortcode in all versions up to, and including, 4.2.5. This is due to insufficient input sanitization and output escaping on the...

6.4CVSS6AI score0.00261EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.14 views

WordPress Plugin Forms Bridge – Infinite integrations Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00261EPSS
SaveExploits0References5
Rows per page
Query Builder