Lucene search
+L

10369 matches found

Positive Technologies
Positive Technologies
•added 2026/03/28 12:00 a.m.•33 views

PT-2026-34017

Name of the Vulnerable Software and Affected Versions Tenda W30E version V2.0 V16.01.0.21 Description The formSetUSBPartitionUmount function fails to properly neutralize special elements when processing the usbPartitionName parameter. This allows a remote attacker to execute arbitrary commands by...

9.8CVSS5.8AI score0.02606EPSS
SaveExploits1References5
osv_suse
osv_suse
•added 2026/03/27 3:47 p.m.•8 views

SUSE-SU-2026:1130-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm bsc1221532. - CVE-2025-21738: ata: libata-sff: Ensure that we cannot writ...

7.8CVSS7.3AI score0.00243EPSS
SaveExploits0References11
NVD
NVD
•added 2026/03/27 6:16 a.m.•14 views

CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS0.00179EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2026/03/27 6:16 a.m.•20 views

DEBIAN-CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/03/27 6:16 a.m.•29 views

AZL-85335 CVE-2026-4948 affecting package firewalld for versions less than 2.0.2-4

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/03/27 6:16 a.m.•16 views

CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/03/27 6:16 a.m.•17 views

UBUNTU-CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/03/27 5:30 a.m.•20 views

CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/03/27 5:30 a.m.•23 views

CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/27 5:30 a.m.•10 views

CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/27 5:30 a.m.•82 views

CVE-2026-4948 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS0.00179EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/03/27 5:30 a.m.•9 views

CVE-2026-4948 Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/03/27 5:30 a.m.•17 views

CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/03/27 12:00 a.m.•16 views

virtio Device Restore Heap Buffer Overflow DoS

The vulnerability of the virtiodevicerestore function in the drivers/virtio/virtio.c file, which supports the virtio bus in Linux kernel, is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.5CVSS6.6AI score0.00258EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/27 12:00 a.m.•6 views

CVE-2026-4948: Incorrect Execution-Assigned Permissions

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/03/27 12:00 a.m.•21 views

PT-2026-28678

Name of the Vulnerable Software and Affected Versions firewalld affected versions not specified Description A flaw exists in firewalld that allows a local unprivileged user to modify the runtime firewall state without proper authentication. This is possible due to mis-authorization of two runtime...

5.5CVSS5.9AI score0.00179EPSS
SaveExploits0References57
RedhatCVE
RedhatCVE
•added 2026/03/26 5:02 p.m.•17 views

CVE-2026-27095

Deserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Object Injection.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through = 5.6.0...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:10 p.m.•20 views

CVE-2026-1653

A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Windows blue screen error...

6.8CVSS5.8AI score0.00097EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:09 p.m.•17 views

CVE-2026-1652

A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to corrupt memory and cause a Windows blue screen error...

6.9CVSS6AI score0.00098EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/03/26 8:07 a.m.•20 views

net: usb: kalmia: validate USB endpoints

...

5.5CVSS5.7AI score0.00129EPSS
SaveExploits0
Rows per page
Query Builder