Lucene search
+L

25101 matches found

Vulnrichment
Vulnrichment
added 2026/04/29 10:40 a.m.6 views

CVE-2026-42648 WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through = 2.19.22...

4.3CVSS5.1AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/29 8:16 a.m.8 views

CVE-2026-42377

Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms Pro: from n/a through 2.8.0...

7.3CVSS0.00229EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/29 7:27 a.m.10 views

CVE-2026-42377

Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms Pro: from n/a through 2.8.0...

7.3CVSS5.1AI score0.00229EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/29 7:27 a.m.12 views

EUVD-2026-26194

Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms Pro: from n/a through 2.8.0...

7.3CVSS5.2AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/29 7:27 a.m.19 views

CVE-2026-42377

The CVE-2026-42377 entry documents a Missing Authorization/Broken Access Control issue in Brainstorm Force SureForms Pro (affecting versions up to and including 2.8.0). The vulnerability arises from incorrectly configured access control security levels, allowing unauthorized actions as described ...

7.3CVSS5.2AI score0.00229EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/29 7:5 a.m.13 views

CLSA-2025-1737465408 php: Fix of 3 CVEs

CVE-2024-8927: fix bypass of cgi.forceredirect configuration - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter - CVE-2024-11234: fix HTTP fulluri CRLF injection...

8.2CVSS6.8AI score0.01618EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.13 views

PT-2026-35965

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API brute-force protection for POST /security/user/authenticate can be bypassed by sending concurrent authentication requests. Although the...

6.5CVSS5.3AI score0.00209EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/04/29 12:0 a.m.11 views

Wazuh 安全漏洞

Wazuh is an open-source application developed by Wazuh. It is used for collecting, summarizing, indexing, and analyzing security data, helping organizations detect intrusions, threats, and abnormal behaviors. Versions of Wazuh from 4.0.0 to 4.14.4 contained security vulnerabilities. These...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.24 views

PT-2026-35906

Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through = 2.19.22...

4.3CVSS5.1AI score0.00165EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.18 views

PT-2026-35869

Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms Pro: from n/a through 2.8.0...

7.3CVSS5.1AI score0.00229EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-31667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependency warning can be triggered reproducibly when using a...

7.8CVSS5.7AI score0.00096EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/04/25 1:36 a.m.7 views

SUSE CVE-2026-31667

In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependency warning can be triggered reproducibly when using a force-feedback gamepad with uinput for example, playing ELDEN RING under Wine...

4.7CVSS5.7AI score0.00096EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/04/24 10:35 p.m.11 views

CVE-2026-31667

A flaw was found in the Linux kernel, specifically within the uinput user input and ff-core force feedback core modules. A local user, by interacting with a force-feedback gamepad through uinput, can trigger a condition where different parts of the system wait indefinitely for each other to relea...

7.8CVSS5.4AI score0.00096EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/24 3:16 p.m.6 views

CVE-2026-31667

In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependency warning can be triggered reproducibly when using a force-feedback gamepad with uinput for example, playing ELDEN RING under Wine...

7.8CVSS0.00096EPSS
SaveExploits0References8
OSV
OSV
added 2026/04/24 2:45 p.m.12 views

CVE-2026-31667 Input: uinput - fix circular locking dependency with ff-core

In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependency warning can be triggered reproducibly when using a force-feedback gamepad with uinput for example, playing ELDEN RING under Wine...

7.8CVSS5.9AI score
SaveExploits0References11
CVE
CVE
added 2026/04/24 2:45 p.m.34 views

CVE-2026-31667

CVE-2026-31667 concerns the Linux kernel’s uinput and ff-core, where a circular locking dependency could cause a local deadlock when a force-feedback gamepad is used. The concrete sequence involves four lock paths that form a cycle: ff-&gt;mutex, udev-&gt;mutex, input_mutex, dev-&gt;mutex, and ba...

7.8CVSS5.6AI score0.00096EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2026/04/24 4:16 a.m.10 views

CVE-2026-6947

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device...

8.7CVSS0.00454EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/24 3:46 a.m.35 views

CVE-2026-6947 D-Link|DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device...

8.7CVSS0.00454EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/24 3:46 a.m.6 views

CVE-2026-6947 D-Link|DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device...

8.7CVSS5.2AI score0.00454EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/24 3:46 a.m.11 views

EUVD-2026-25395

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device...

8.7CVSS5.8AI score0.00454EPSS
SaveExploits0References2
Rows per page
Query Builder