Lucene search
+L

3134 matches found

OSV
OSV
•added 2024/05/22 7:15 a.m.•13 views

DEBIAN-CVE-2021-47447

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a3xx: fix error handling in a3xxgpuinit These error paths returned 1 on failure, instead of a negative error code. This would lead to an Oops in the caller. A second problem is that the check for "if ret != -ENODATA" did...

5.5CVSS5.1AI score0.00208EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/22 7:15 a.m.•30 views

UBUNTU-CVE-2021-47447

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a3xx: fix error handling in a3xxgpuinit These error paths returned 1 on failure, instead of a negative error code. This would lead to an Oops in the caller. A second problem is that the check for "if ret != -ENODATA" did...

7.8CVSS5.7AI score0.00208EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/05/22 12:00 a.m.•18 views

PT-2024-25155 · Asustek Computer · Asus Sabertooth X99 Driver

Name of the Vulnerable Software and Affected Versions: ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver version 1.0.1.0 Description: An issue in the component AsIO64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Recommendations: For...

7.8CVSS8.1AI score0.00259EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
•added 2024/05/21 2:02 a.m.•16 views

SUSE CVE-2023-52664

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aqringfree could be called multiple times on same ring, if system is under stress and got memory allocation...

5.5CVSS6.2AI score0.00275EPSS
SaveExploits0References19
CVE
CVE
•added 2024/05/19 8:35 a.m.•4437 views

CVE-2024-35915

CVE-2024-35915 affects the Linux kernel NFC/NCI subsystem. The issue is an uninitialized payload read in nci_rx_work() when a received packet has a zero-length payload, leading to potential uninitialized data exposure. The patch fixes the vulnerability by validating the payload size before invoki...

8.8CVSS6.7AI score0.00323EPSS
SaveExploits0References11Affected Software1
OSV
OSV
•added 2024/05/17 2:15 p.m.•18 views

AZL-54956 CVE-2023-52664 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aqringfree could be called multiple times on same ring, if system is under stress and got memory allocation...

7.8CVSS6.4AI score0.00275EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/17 2:15 p.m.•12 views

DEBIAN-CVE-2023-52664

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aqringfree could be called multiple times on same ring, if system is under stress and got memory allocation...

7.8CVSS5.8AI score0.00275EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/17 2:15 p.m.•13 views

UBUNTU-CVE-2023-52664

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aqringfree could be called multiple times on same ring, if system is under stress and got memory allocation...

7.8CVSS6.2AI score0.00275EPSS
SaveExploits0References36
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•27 views

RHEL 8 : git (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially...

8.1AI score0.01074EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•37 views

RHEL 8 : mozilla (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Mozilla: Malicious Extension could obtain auth codes from OAuth login flows CVE-2020-6823 - If a user sav...

6.9AI score0.01608EPSS
SaveExploits1References3
Rockylinux
Rockylinux
•added 2024/05/10 2:32 p.m.•36 views

flatpak security, bug fix, and enhancement update

An update is available for flatpak. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak is a system for building, distributing, and running sandboxed desktop...

10CVSS7.3AI score0.00879EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/04/30 8:32 a.m.•12 views

CVE-2024-4185 Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the...

8.1CVSS5.9AI score0.0085EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2024/04/27 4:55 p.m.•71 views

Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs

Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 1.0.0 Created BY BLACK-SCORP10 t.me/BLACK-SCORP10 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for...

7.2AI score
SaveExploits0References3
GithubExploit
GithubExploit
•added 2024/04/18 4:35 p.m.•398 views

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2024-3400 Simple Python code to check for arbitrary upload...

10CVSS8.6AI score0.99999EPSS
SaveExploits48
OSV
OSV
•added 2024/04/16 1:15 p.m.•20 views

CVE-2024-3869

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woocommercejsonsearchcoupons' function . This makes it possible for attackers with subscriber level access to view coupon codes...

4.3CVSS5.8AI score0.00454EPSS
SaveExploits0References3
NVD
NVD
•added 2024/04/16 1:15 p.m.•44 views

CVE-2024-3869

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woocommercejsonsearchcoupons' function . This makes it possible for attackers with subscriber level access to view coupon codes...

4.3CVSS4.4AI score0.00454EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/04/16 12:51 p.m.•43 views

CVE-2024-3869 Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woocommercejsonsearchcoupons' function . This makes it possible for attackers with subscriber level access to view coupon codes...

4.3CVSS4.7AI score0.00454EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/04/16 12:51 p.m.•15 views

CVE-2024-3869 Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woocommercejsonsearchcoupons' function . This makes it possible for attackers with subscriber level access to view coupon codes...

4.3CVSS5.9AI score0.00454EPSS
SaveExploits0References3
CVE
CVE
•added 2024/04/16 12:51 p.m.•68 views

CVE-2024-3869

Technical details about CVE-2024-3869 are not publicly provided in the supplied documents. Monitor for updates from Wordfence/NVD.

4.3CVSS6.5AI score0.00454EPSS
SaveExploits0References3Affected Software1
WPVulnDB
WPVulnDB
•added 2024/04/16 12:00 a.m.•15 views

Customer Reviews for WooCommerce < 5.47.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search

Description The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woocommercejsonsearchcoupons' function . This makes it possible for attackers with subscriber level access to view coupon codes...

4.3CVSS6.6AI score0.00454EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder