Lucene search
+L

1796 matches found

Cvelist
Cvelist
•added 2026/03/25 10:27 a.m.•39 views

CVE-2026-23331 udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected.

In the Linux kernel, the following vulnerability has been resolved: udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected. Let's say we bind an UDP socket to the wildcard address with a non-zero port, connect it to an address, and disconnect it from the address. bind sets...

0.00121EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/25 10:27 a.m.•13 views

CVE-2026-23331 udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected.

In the Linux kernel, the following vulnerability has been resolved: udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected. Let's say we bind an UDP socket to the wildcard address with a non-zero port, connect it to an address, and disconnect it from the address. bind sets...

5.7AI score
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2026/03/13 12:00 a.m.•18 views

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, relates to bypassing authentication by using an alternative path or channel. This allows attackers to escalate their privileges.

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.8AI score0.0031EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/03/13 12:00 a.m.•19 views

The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00351EPSS
SaveExploits0References2Affected Software14
EUVD
EUVD
•added 2026/03/12 6:31 a.m.•21 views

EUVD-2026-11521

A vulnerability was detected in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formEasySetupWizard3. The manipulation of the argument wanconnected results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may b...

9CVSS6.3AI score0.0117EPSS
SaveExploits1References6
NVD
NVD
•added 2026/03/12 4:16 a.m.•21 views

CVE-2026-3978

A vulnerability was detected in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formEasySetupWizard3. The manipulation of the argument wanconnected results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may b...

9CVSS0.0117EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/12 3:32 a.m.•42 views

CVE-2026-3978

CVE-2026-3978 affects D-Link DIR-513 running 1.10. The issue is in an unknown function of the file /goform/formEasySetupWizard3, where manipulation of the wan_connected argument causes a stack-based buffer overflow. It supports remote exploitation and has a publicly available exploit. Multiple co...

9CVSS8.2AI score0.0117EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/03/12 3:32 a.m.•57 views

CVE-2026-3978 D-Link DIR-513 formEasySetupWizard3 stack-based overflow

A vulnerability was detected in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formEasySetupWizard3. The manipulation of the argument wanconnected results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may b...

9CVSS0.0117EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/03/12 12:00 a.m.•24 views

D-Link DIR-513 安全漏洞

The D-Link DIR-513 is a wireless router product from D-Link Corporation. Version 1.10 of the D-Link DIR-513 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/formEasySetupWizard3, specifically the parameter “wanconnected”. This...

9CVSS7.7AI score0.0117EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/03/10 6:31 p.m.•17 views

EUVD-2026-10616

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00351EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/10 6:31 p.m.•26 views

EUVD-2026-10617

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00351EPSS
SaveExploits0References2
OSV
OSV
•added 2026/03/10 6:18 p.m.•14 views

CVE-2026-24292

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00351EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/10 6:18 p.m.•15 views

CVE-2026-24292

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/10 5:05 p.m.•43 views

CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

7.8CVSS0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/10 5:05 p.m.•119 views

CVE-2026-26117

CVE-2026-26117 concerns Arc Enabled Servers running the Azure Connected Machine Agent. The vulnerability is an Elevation of Privilege issue affecting the Azure Arc-enabled machine agent on Arc-enabled servers. According to the CVSS data, it is a local, low-complexity attack requiring LOW privileg...

7.8CVSS7.2AI score0.0031EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/10 5:05 p.m.•8 views

CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/10 5:04 p.m.•8 views

CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.00351EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/10 5:04 p.m.•10 views

CVE-2026-24292

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00351EPSS
SaveExploits0References2Affected Software14
CVE
CVE
•added 2026/03/10 5:04 p.m.•59 views

CVE-2026-24292

CVE-2026-24292 is a Windows vulnerability in the Connected Devices Platform Service (Cdpsvc) described as a use-after-free that enables local privilege escalation for an authenticated, non-user interaction scenario. Connected documents corroborate the issue with Cdpsvc and list the CVE-2026-24292...

7.8CVSS7.5AI score0.00351EPSS
SaveExploits0References1Affected Software11
Microsoft CVE
Microsoft CVE
•added 2026/03/10 2:00 p.m.•17 views

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS7.7AI score0.00351EPSS
SaveExploits0
Rows per page
Query Builder