Lucene search
+L

75524 matches found

Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.10 views

PT-2026-61496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the net: wwan: iosm component. The issue occurs within the ipc imem init function, where memory allocated by the ipc protocol init function is not properly freed...

5.1AI score0.00161EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.10 views

PT-2026-61404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the adm1266 nvmem read blackbox function within the hwmon pmbus/adm1266 module. The function processes a record count value obtained from the BLACKBOX INFO response...

5.2AI score0.00184EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.8 views

PT-2026-61373

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net: ethernet: cortina driver within the gmac rx function. The socket buffer SKB used to assemble packets from fragments was implemented as a static local...

9.8CVSS5.4AI score0.00552EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.6 views

PT-2026-61084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the ov8856 init controls function within the i2c media component. The issue arises because the control handler is not properly freed when the process of adding...

5.1AI score0.00161EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.7 views

PT-2026-61178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtk-snfi SPI driver where the on-host NAND ECC engine is registered during the mtk snand probe function, but the corresponding teardown process is missing from bot...

5.1AI score0.00161EPSS
SaveExploits0
CVE
CVE
added 2026/07/18 8:33 p.m.13 views

CVE-2026-57857

The Flow Payment plugin for WordPress (flow.cl) v3.0.8 is affected by a reflected cross-site scripting (XSS) on the WooCommerce checkout page. The vulnerability arises because error_message from an order-cancellation flow is passed directly to wc_add_notice() in flowpayment-fl.php (lines 57–58) w...

5.1CVSS5AI score0.00224EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/18 8:33 p.m.10 views

EUVD-2026-45400

The Flow Payment plugin for WordPress flow.cl version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an order cancellation, the errormessage GET parameter is passed directly to wcaddnotice in flowpayment-fl.php lines 57-58 without...

5.1CVSS5AI score0.00224EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/18 8:33 p.m.7 views

CVE-2026-57857 Flow Payment Plugin for WordPress Reflected Cross-Site Scripting via error_message Parameter

The Flow Payment plugin for WordPress flow.cl version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an order cancellation, the errormessage GET parameter is passed directly to wcaddnotice in flowpayment-fl.php lines 57-58 without...

5.1CVSS5AI score0.00224EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/18 8:33 p.m.39 views

CVE-2026-57857 Flow Payment Plugin for WordPress Reflected Cross-Site Scripting via error_message Parameter

The Flow Payment plugin for WordPress flow.cl version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an order cancellation, the errormessage GET parameter is passed directly to wcaddnotice in flowpayment-fl.php lines 57-58 without...

5.1CVSS0.00224EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/07/18 8:12 p.m.58 views

Exploit for CVE-2026-63030

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-202...

9.8CVSS7.1AI score0.98051EPSS
SaveExploits55
NVD
NVD
added 2026/07/18 2:17 p.m.11 views

CVE-2024-58361

SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...

7.1CVSS0.00249EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/18 1:10 p.m.10 views

CVE-2024-58366

SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute code with SurrealDB process privileges...

9CVSS5.6AI score0.00299EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/18 1:10 p.m.12 views

CVE-2024-58364

CVE-2024-58364 affects SurrealDB before 1.2.1. An uncaught exception in the span rendering path triggers a panic when parsing malformed queries with errors on line terminator characters, leading to server denial of service. Public details in the connected sources indicate the impact is an in-proc...

7.1CVSS5.3AI score0.00249EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/18 1:10 p.m.8 views

CVE-2024-58361

SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...

7.1CVSS5.5AI score0.00249EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/18 1:10 p.m.5 views

CVE-2024-58361 SurrealDB before 2.0.4 Denial of Service via Parser Exception

SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...

7.1CVSS5.5AI score0.00249EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/18 1:10 p.m.8 views

EUVD-2024-55677

SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...

7.1CVSS5.5AI score0.00249EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/18 1:10 p.m.40 views

CVE-2024-58361 SurrealDB before 2.0.4 Denial of Service via Parser Exception

SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...

7.1CVSS0.00249EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/18 1:10 p.m.13 views

CVE-2024-58361

SurrealDB is affected in versions before 2.0.4 by an uncaught exception in the parser error rendering path when processing empty strings. Authorized clients can issue malformed queries that convert empty strings to record, duration, or datetime types, triggering a panic in error rendering and cra...

7.1CVSS5.5AI score0.00249EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/18 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-47180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name...

6.5CVSS5.3AI score0.0023EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/18 12:0 a.m.4 views

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3089-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3089-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: -...

9.8CVSS6.1AI score0.00908EPSS
SaveExploits19References88
Rows per page
Query Builder