Lucene search
+L

11 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/12 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-89483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges...

7.5CVSS7.3AI score0.00571EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/11 8:19 p.m.•18 views

DEBIAN-CVE-2026-89483

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

7.5CVSS7AI score0.00571EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/11 8:19 p.m.•19 views

CVE-2026-89483

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

7.5CVSS6.7AI score0.00571EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/09/11 7:43 p.m.•48 views

CVE-2026-89483 nvme: zero the discard fallback page

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

7.5CVSS0.00571EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/11 7:43 p.m.•51 views

CVE-2026-89483

CVE-2026-89483 is an information disclosure flaw in the Linux kernel NVMe subsystem . When nvme_setup_discard() falls back to the per-controller ctrl->discard_page (allocated via alloc_page(GFP_KERNEL) without zeroing) under memory pressure, up to 4080 bytes of uninitialized kernel memory (inc...

7.5CVSS6.7AI score0.00571EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•8 views

CVE-2026-89483: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

7.5CVSS6.7AI score0.00571EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•19 views

PT-2026-90199

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the NVMe subsystem where the nvme setup discard function maps a 4096-byte DSM payload regardless of the number of ranges declared. While the buffer is typically zeroed via...

7.5CVSS7.1AI score0.00571EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•4 views

PT-2026-96383

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme setup discard always maps sizeofstruct nvme dsm range NVME DSM MAX RANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number...

7.5CVSS6.7AI score0.00571EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2024/09/19 12:00 a.m.•17 views

VulnCheck KEV: CVE-2022-0653

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

6.1CVSS6.2AI score0.02331EPSS
SaveIn wildExploits4References4
osv_cve
osv_cve
•added 2022/02/24 7:15 p.m.•21 views

CVE-2022-0653

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

6.1CVSS5.8AI score0.02331EPSS
SaveExploits4References2
wpexploit
wpexploit
•added 2022/02/17 12:00 a.m.•100 views

Profile Builder < 3.6.2 - Reflected Cross-Site Scripting

The plugin does not properly sanitise and escape the siteurl parameter before outputting it back in an href attribute, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS0.5AI score0.02331EPSS
SaveExploits4References1
Rows per page
Query Builder