Lucene search
+L

897 matches found

OSV
OSV
added 2026/04/24 2:44 p.m.18 views

CVE-2026-31636 rxrpc: fix RESPONSE authenticator parser OOB read

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgkverifyauthenticator copies authlen bytes into a temporary buffer and then passes p + authlen as the parser limit to rxgkdoverifyauthenticator. Since p is a be32 , that inflate...

9.1CVSS6.6AI score
SaveExploits0References6
EUVD
EUVD
added 2026/04/24 2:44 p.m.14 views

EUVD-2026-25529

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgkverifyauthenticator copies authlen bytes into a temporary buffer and then passes p + authlen as the parser limit to rxgkdoverifyauthenticator. Since p is a be32 , that inflate...

5.5AI score0.00442EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:00 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007353 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: Restrict CPUBIGENDIAN to GNU as or LLVM IAS 15.x or newer Prior to LLVM 15.0.0, LLVM's...

5.5CVSS5.8AI score0.0024EPSS
SaveExploits0References4
CNVD
CNVD
added 2026/04/07 12:00 a.m.31 views

Endian Firewall DATE Parameter OS Command Injection Vulnerability (CNVD-2026-18423)

Endian Firewall is a network security firewall system from Endian. An operating system command injection vulnerability exists in the Endian Firewall DATE parameter, which stems from incomplete regular expression validation of the DATE parameter in /cgi-bin/logslog.cgi, and can be exploited by an...

8.8CVSS5.8AI score0.01469EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.21 views

Endian Firewall remark parameter cross-site scripting vulnerability (CNVD-2026-18375)

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which stems from improper handling of the remark parameter in /manage/ipsec/, and can be exploited by an attacker to inject malicious script and...

6.4CVSS5AI score0.00138EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.8 views

Endian Firewall remark parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which stems from improperly cleaning up the input of the remark parameter in /manage/dnsmasq/hosts/, and can be exploited by an attacker to injec...

6.4CVSS5AI score0.00168EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.15 views

Endian Firewall remark parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which originates from improperly cleaning up the input of the remark parameter in /cgi-bin/routing.cgi, and can be exploited by an attacker to...

6.4CVSS5AI score0.00172EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.16 views

Endian Firewall name parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall name parameter, which stems from improper cleanup of the name parameter input in /manage/qos/classes/, and can be exploited by an attacker to inject malicious...

6.4CVSS5AI score0.00168EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.14 views

Endian Firewall group parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall group parameter, which stems from improper handling of the group parameter in /cgi-bin/proxygroup.cgi, and can be exploited by an attacker to inject malicious...

6.4CVSS5AI score0.00138EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.10 views

Endian Firewall NAME Parameter Cross-Site Scripting Vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall NAME parameter, which originates from improperly cleaning up the input of the NAME parameter in /cgi-bin/uplinkeditor.cgi, and can be exploited by an attacker to...

6.4CVSS4.9AI score0.00168EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.14 views

Endian Firewall DATE Parameter OS Command Injection Vulnerability

Endian Firewall is a network security firewall system from Endian. An operating system command injection vulnerability exists in the Endian Firewall DATE parameter, which stems from incomplete regular expression validation of the DATE parameter in /cgi-bin/logsids.cgi, and can be exploited by an...

8.8CVSS5.8AI score0.01222EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.13 views

Endian Firewall dscp Parameter Cross-Site Scripting Vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall dscp parameter, which stems from improper handling of the dscp parameter in /manage/qos/rules/, and can be exploited by an attacker to inject malicious JavaScript...

6.4CVSS5AI score0.00168EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.22 views

Endian Firewall ADDRESS BCC Parameter Cross-Site Scripting Vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall ADDRESS BCC parameter, which originates from improper handling of the ADDRESS BCC parameter in /cgi-bin/smtprouting.cgi, and can be exploited by an attacker to...

6.4CVSS5AI score0.00138EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.14 views

Endian Firewall remark parameter cross-site scripting vulnerability (CNVD-2026-18402)

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which stems from improper handling of the remark parameter in /cgi-bin/zonefw.cgi, and can be exploited by an attacker to inject malicious...

6.4CVSS5AI score0.00138EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.13 views

Endian Firewall DOMAIN Parameter Cross-Site Scripting Vulnerability

Endian Firewall is a network security firewall system from Endian. Endian Firewall DOMAIN Parameter Cross-Site Scripting VulnerabilityThe vulnerability stems from improper handling of the DOMAIN parameter in /cgi-bin/smtpdomains.cgi, which can be exploited by an attacker to inject malicious...

6.4CVSS5.4AI score0.00138EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.45 views

Endian Firewall remark parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which stems from improperly cleaning up the input of the remark parameter in /manage/dhcp/fixedleases/, and can be exploited by an attacker to...

6.4CVSS5AI score0.00205EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.13 views

Endian Firewall user parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall user parameter, which stems from improper handling of the user parameter in /cgi-bin/proxyuser.cgi, and can be exploited by an attacker to inject malicious...

6.4CVSS5AI score0.00173EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.22 views

Endian Firewall mimetypes parameter cross-site scripting vulnerability

Endian Firewall is a network security firewall system from Endian. Endian Firewall mimetypes parameter cross-site scripting vulnerability, which stems from improper handling of the mimetypes parameter in /cgi-bin/proxypolicy.cgi, can be exploited by an attacker to inject malicious JavaScript code...

6.4CVSS5AI score0.00138EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.13 views

Endian Firewall remark parameter cross-site scripting vulnerability (CNVD-2026-18410)

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which stems from improper handling of the remark parameter in /cgi-bin/snat.cgi, and can be exploited by an attacker to inject malicious JavaScri...

6.4CVSS5AI score0.00168EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/07 12:00 a.m.12 views

Endian Firewall remark parameter cross-site scripting vulnerability (CNVD-2026-18411)

Endian Firewall is a network security firewall system from Endian. A cross-site scripting vulnerability exists in the Endian Firewall remark parameter, which stems from improper handling of the remark parameter in /cgi-bin/dnat.cgi, and can be exploited by an attacker to inject malicious JavaScri...

6.4CVSS5AI score0.00168EPSS
SaveExploits0
Rows per page
Query Builder