23682 matches found
CVE-2026-6996 BDCOM P3310D rmon event Tab cross site scripting
A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown function of the component rmon event Tab. Executing a manipulation of the argument Description can lead to cross site scripting. The attack may be launched remotely. The exploit has been made availab...
CVE-2026-6996 BDCOM P3310D rmon event Tab cross site scripting
A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown function of the component rmon event Tab. Executing a manipulation of the argument Description can lead to cross site scripting. The attack may be launched remotely. The exploit has been made availab...
GHSA-MH2Q-Q3FH-2475 vulnerabilities
Vulnerabilities for packages: nerdctl, crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-azure-storagesync, promxy-fips, yunikorn-k8shim-fips, litestream, vertical-pod-autoscaler-fips, crossplane-provider-aws-backup-fips, crossplane-provider-aws-elb, aws-efs-csi-driver,...
CVE-2026-29181 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-rds, podman, external-secrets-operator, crossplane-provider-aws-firehose, src, vault-env, crossplane-provider-aws-cloudformation, gitlab-kas, flux, eksctl, crossplane-provider-azure-managedidentity, crossplane-provider-azure-storage, rclone,...
GHSA-MH2Q-Q3FH-2475 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-rds, podman, external-secrets-operator, crossplane-provider-aws-firehose, src, vault-env, crossplane-provider-aws-cloudformation, gitlab-kas, flux, eksctl, crossplane-provider-azure-managedidentity, crossplane-provider-azure-storage, rclone,...
CVE-2026-5820
creationtimestamp| type| source ---|---|--- 2026-04-25 13:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkd5pzeqdv2h...
[SECURITY] Fedora 44 Update: libinput-1.31.1-1.fc44
libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. It provides device detection, device handling, input device event processing and abstraction so minimize the amount of custom input code the user of libinput...
SUSE CVE-2026-31574
In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the nexteventforced flag The prevention mechanism against timer interrupt starvation missed to reset the nexteventforced flag in a couple of places: - When the clock event state changes. That ca...
SUSE CVE-2026-31625
In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alpsrawevent Commit ecfa6f34492c "HID: Add HIDCLAIMEDINPUT guards in rawevent callbacks missing them" attempted to fix up the HID drivers that had missed the previous fix that was done i...
SUSE CVE-2026-31650
In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on disconnect The vub300 driver maintains an explicit reference count for the controller and its driver data and the last reference can in theory be dropped after the driver has been unbound. This...
SUSE CVE-2026-31670
In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill events from being created Userspace can create an unlimited number of rfkill events if the system is so configured, while not consuming them from the rfkill file descriptor, causin...
PT-2026-35170
A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown function of the component rmon event Tab. Executing a manipulation of the argument Description can lead to cross site scripting. The attack may be launched remotely. The exploit has been made availab...
BDCOM P3310D 跨站脚本漏洞
The BDCOM P3310D is an Ethernet switch device designed for access layer networks by the BDCOM company in China. The version BDCOM P3310D 0.4.2 10.1.0F Build 86345 contains a cross-site scripting vulnerability. This vulnerability stems from the operation of the Description parameter in the rmon...
Linux Distros Unpatched Vulnerability : CVE-2026-31574
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clockevents: Add missing resets of the nexteventforced flag The prevention mechanism against...
Linux Distros Unpatched Vulnerability : CVE-2026-31597
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix use-after-free in ocfs2fault when VMFAULTRETRY filemapfault may drop the mmaplock before returning VMFAULTRETRY, as documented in mm/filemap.c: If ou...
GHSA-6V9C-7CG6-27Q7
creationtimestamp| type| source ---|---|--- 2026-04-24 19:23:26+00:00| seen| Telegram/FGivxNz61ghqDj4ER4orUo942MC3d41x9N89ngSi7socZnE 2026-04-30 02:10:29+00:00| seen| https://gist.github.com/alon710/e87f10931158991f62fe5f3be1e4d663...
GHSA-6CHQ-WFR3-2HJ9
creationtimestamp| type| source ---|---|--- 2026-04-24 19:23:26+00:00| seen| Telegram/FGivxNz61ghqDj4ER4orUo942MC3d41x9N89ngSi7socZnE...
GHSA-8C75-8MHR-P7R9
creationtimestamp| type| source ---|---|--- 2026-04-24 19:23:03+00:00| published-proof-of-concept| Telegram/KzwiN8QhKmj3TuqYtGeX9siiyoqjfAY8f7zipbEz0Wiqhk...
CVE-2026-41676
creationtimestamp| type| source ---|---|--- 2026-04-24 19:23:03+00:00| published-proof-of-concept| Telegram/KzwiN8QhKmj3TuqYtGeX9siiyoqjfAY8f7zipbEz0Wiqhk 2026-07-02 13:55:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q...