24393 matches found
CVE-2026-32050
OpenClaw versions prior to 2026.2.25 contain an access control vulnerability in signal reaction notification handling that allows unauthorized senders to enqueue status events before authorization checks are applied. Attackers can exploit the reaction-only event path in event-handler.ts to queue...
CVE-2026-26070 EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to std::map concurrent access container/optional corruption possible. The trigger is an EV SoC update with powermeter periodic update and unplugging/SessionFinished state. Version 2026.2.0 contains a...
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
...
CVE-2026-4278
creationtimestamp| type| source ---|---|--- 2026-03-26 04:16:39+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4278 2026-03-26 06:08:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwwvxa74w24...
CVE-2014-125112
creationtimestamp| type| source ---|---|--- 2026-03-26 03:36:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mhwoevnjzw26 2026-03-26 06:11:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwx3dacbr2g...
PT-2026-28358
Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack susceptible to a data race condition leading to a use-after-free issue. This condition is triggered by events such as EV plug-in/unplug and...
The vulnerability of the amd_rp_pme_resume() function in the arch/x86/pci/fixup.c module, which is part of the Linux operating system’s platform support for x86 kernels, allows a hacker to trigger a service failure.
The vulnerability of the amdrppmeresume function in the arch/x86/pci/fixup.c module of the Linux operating system’s platform involves an infinite wait loop for resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `register_synth_event()` function in the kernel/trace/trace_events_synth.c module, which supports Linux kernel tracing, allows a malicious actor to access protected information or cause system failures.
The vulnerability of the registersynthevent function in the kernel/trace/traceeventssynth.c module, which supports kernel tracing in Linux operating systems, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to access...
PT-2026-28352
Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack susceptible to a data race that could lead to corruption of std::map. The issue is triggered by a CSMS GetLog/UpdateFirmware request network coinciding wi...
ClearanceKit 安全漏洞
ClearanceKit is a macOS file system access control tool developed by Craig J. Bass. Versions of ClearanceKit prior to 4.2.4 contained security vulnerabilities; these vulnerabilities stemmed from the failure to intercept events of type ESEVENTTYPEAUTHEXCHANGEDATA and ESEVENTTYPEAUTHCLONE, which...
The vulnerability of the nest_imc_event_init() function in the arch/powerpc/perf/imc-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the nestimceventinit function in the arch/powerpc/perf/imc-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-3216
creationtimestamp| type| source ---|---|--- 2026-03-25 17:59:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvo5zapjm2j...
CVE-2026-26832
creationtimestamp| type| source ---|---|--- 2026-03-25 17:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvmv46l742n 2026-03-26 00:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwcdxcbrx2s 2026-06-05 16:07:09+00:00| seen|...
SUSE CVE-2026-23311
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix invalid wait context in ctxschedin Lockdep found a bug in the event scheduling when a pinned event was failed and wakes up the threads in the ring buffer like below. It seems it should not grab a wait-queue lock...
SUSE CVE-2026-23382
In the Linux kernel, the following vulnerability has been resolved: HID: Add HIDCLAIMEDINPUT guards in rawevent callbacks missing them In commit 2ff5baa9b527 "HID: appleir: Fix potential NULL dereference at raw event handle", we handle the fact that raw event callbacks can happen even for a HID...
CVE-2026-25465
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Stored XSS.This issue affects CP Multi View Event Calendar : from n/a through = 1.4.37...
CVE-2026-25465 WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Stored XSS.This issue affects CP Multi View Event Calendar : from n/a through = 1.4.36...
CVE-2026-24378
CVE-2026-24378 describes a Deserialization of Untrusted Data flaw in EventPrime (Events Calendar, Bookings and Tickets) that enables unauthenticated PHP object injection. Affected: EventPrime
CVE-2025-69358 WordPress EventPrime plugin <= 4.2.6.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through = 4.2.6.0...