Lucene search
+L

832 matches found

Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•24 views

PT-2026-28117

IBM Concert 1.0.0 through 2.2.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources...

6.2CVSS6AI score0.00174EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•25 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to cancel pending tasks after clearing deferredqc, potentially leading to the triggering of...

5.5CVSS6AI score0.00122EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/03/18 12:00 a.m.•25 views

Mura 安全漏洞

Mura is a content management system developed by Mura Corporation. Versions of Mura 10.1.10 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the lack of CSRF token verification when clearing the trash bin, which could lead to permanent data loss...

8.1CVSS5.8AI score0.00129EPSS
SaveExploits0References2
Redos
Redos
•added 2026/03/13 12:00 a.m.•24 views

ROS-20260313-73-0022

A vulnerability in the raid1reshape function of the Linux operating system kernel is related to incorrect resource clearing or freeing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

7.1CVSS6.9AI score0.00187EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/03/09 1:03 a.m.•21 views

kernel: macvlan: fix possible UAF in macvlan_forward_source()

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlanforwardsource Add RCU protection on struct macvlansourceentry-vlan. Whenever macvlanhashdelsource is called, we must clear entry-vlan pointer before RCU grace period starts. This allows...

7.8CVSS6.7AI score0.00209EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/03/05 8:00 p.m.•24 views

lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing

A flaw was found in lz4-java. This vulnerability allows disclosure of sensitive data via crafted compressed input due to insufficient clearing of the output buffer in Java-based decompressor implementations...

8.2CVSS7AI score0.00605EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/03/05 1:40 p.m.•20 views

CVE-2026-3056

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraphaccelapi AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.9AI score0.00349EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/05 12:00 a.m.•8 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : patch (SUSE-SU-2026:0781-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0781-1 advisory. - CVE-2021-45261: Clear range of pointers before they are used/freed bsc1194037. Tenable has extracted th...

5.5CVSS6.4AI score0.00759EPSS
SaveExploits1References4
Patchstack
Patchstack
•added 2026/03/04 10:22 p.m.•25 views

WordPress Seraphinite Accelerator plugin <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing vulnerability

Missing Authorization to Authenticated Subscriber+ Log Clearing vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin Seraphinite Accelerator versions = 2.28.14...

4.3CVSS5.9AI score0.00349EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/03/04 12:30 p.m.•19 views

EUVD-2026-9394

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraphaccelapi AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.9AI score0.00349EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/03/04 11:22 a.m.•11 views

CVE-2026-3056

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraphaccelapi AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00349EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/03/04 11:22 a.m.•9 views

CVE-2026-3056 Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraphaccelapi AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00349EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•7 views

CVE-2026-20039: Improper Clearing of Heap Memory Before Release

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due...

8.6CVSS6AI score0.00365EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•32 views

PT-2026-22901

The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seraph accel api AJAX action with fn=LogClear in all versions up to, and including, 2.28.14. This makes it possible for authenticated attackers, with...

4.3CVSS5.9AI score0.00349EPSS
SaveExploits0References5
Redos
Redos
•added 2026/03/04 12:00 a.m.•13 views

ROS-20260304-73-0008

A vulnerability in the netsched component of the Linux operating system kernel is related to incorrect resource clearing or freeing. Exploitation of the vulnerability could allow a remote attacker to affect the availability of protected information...

7.8CVSS6.6AI score0.00217EPSS
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/03/03 1:28 p.m.•10 views

Security update for patch

This update for patch fixes the following issues: CVE-2021-45261: Clear range of pointers before they are used/freed bsc1194037. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

3.3CVSS6.4AI score0.00759EPSS
SaveExploits1References4
osv_suse
osv_suse
•added 2026/03/03 1:28 p.m.•6 views

SUSE-SU-2026:0781-1 Security update for patch

This update for patch fixes the following issues: - CVE-2021-45261: Clear range of pointers before they are used/freed bsc1194037...

5.5CVSS6.4AI score0.00759EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•21 views

ImageMagick 代码注入漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained a code injection vulnerability. This vulnerability stemmed from the ps...

5.7CVSS6.9AI score0.00183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/21 12:00 a.m.•5 views

PT-2026-35564

Уязвимость межсетевого экрана Интернет Контроль Сервер связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/19 12:00 a.m.•27 views

WordPress plugin Breeze - WordPress Cache Plugin 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.0041EPSS
SaveExploits0References5
Rows per page
Query Builder