Lucene search
+L

1385 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-74651

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB read in rtwgetwpaie rtwgetwpaie reads bytes at fixed offsets into a vendor-specific information element without checking that the...

8.1CVSS5.8AI score0.00274EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/19 5:18 p.m.20 views

CVE-2026-20177

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...

5.3CVSS0.00389EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 5:18 p.m.8 views

CVE-2026-20232

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

5.4CVSS0.00205EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 4:16 p.m.7 views

EUVD-2026-62562

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

5.4CVSS5.7AI score0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 4:16 p.m.35 views

CVE-2026-20232

The web-based management interface of Cisco IE 1000 Series Switches fails to validate user-supplied input, enabling an authenticated attacker to inject malicious script into specific pages that executes in another user's session (stored XSS). CVSS 5.4 (MEDIUM) requires valid credentials and user ...

5.4CVSS5.7AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 4:16 p.m.34 views

CVE-2026-20232 Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

5.4CVSS0.00205EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 4:16 p.m.8 views

EUVD-2026-62559

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...

5.3CVSS5.5AI score0.00389EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 4:16 p.m.34 views

CVE-2026-20177 Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...

5.3CVSS0.00389EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/08/19 4:00 p.m.12 views

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

5.4CVSS5.8AI score0.00205EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.12 views

PT-2026-78491

Name of the Vulnerable Software and Affected Versions Cisco Industrial Ethernet IE 1000 Series Switches affected versions not specified Description Insufficient protection against management plane flooding attacks allows an unauthenticated remote attacker to cause a denial of service DoS conditio...

5.3CVSS5.2AI score0.00389EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.17 views

PT-2026-78493

A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

5.4CVSS5.7AI score0.00205EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/10 1:20 p.m.6 views

CVE-2026-68352

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beaconielen, assocreqlen, and assocresplen fields in ath6klwmiconnecteventrx are not validated against the buffer length. Their sum up t...

8.3CVSS0.00419EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/08/10 1:20 p.m.7 views

CVE-2026-68190

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetwpsie rtwgetwpsie iterates over IE data from network frames without validating that the IE header and payload fit within the remaining buffer before reading them. Specifically: - iniecnt...

5.5AI score0.00205EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/10 1:20 p.m.13 views

CVE-2026-68352

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beaconielen, assocreqlen, and assocresplen fields in ath6klwmiconnecteventrx are not validated against the buffer length. Their sum up t...

8.3CVSS5.5AI score0.00419EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/10 12:03 p.m.53 views

CVE-2026-68352

CVE-2026-68352 concerns the Linux kernel’s ath6kl Wi‑Fi driver. The vulnerability arises from insufficient validation of firmware‑controlled IE lengths (beacon_ie_len, assoc_req_len, assoc_resp_len) in ath6kl_wmi_connect_event_rx(), allowing a total IE length up to 765 to exceed the actual WMI ev...

8.3CVSS5.3AI score0.00419EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/10 12:03 p.m.19 views

CVE-2026-68352 wifi: ath6kl: fix OOB read from firmware IE lengths in connect event

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beaconielen, assocreqlen, and assocresplen fields in ath6klwmiconnecteventrx are not validated against the buffer length. Their sum up t...

8.3CVSS5.4AI score
SaveExploits0References11
CVE
CVE
added 2026/08/10 12:00 p.m.48 views

CVE-2026-68190

CVE-2026-68190 affects the Linux kernel staging/rtl8723bs driver, specifically the function rtw_get_wps_ie() in processing of IE data from network frames. The vulnerability arises from insufficient bounds checking: the code reads in_ie[cnt+1] without verifying cnt+1

5.4AI score0.00205EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/10 12:00 p.m.12 views

CVE-2026-68190 staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetwpsie rtwgetwpsie iterates over IE data from network frames without validating that the IE header and payload fit within the remaining buffer before reading them. Specifically: - iniecnt...

5.4AI score
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-68352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beaconielen, assocreqlen, and assocresplen fields in...

8.3CVSS6AI score0.00419EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-68190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB reads in rtwgetwpsie rtwgetwpsie iterates over IE data from network frames without validating that the IE header and payload fit...

6AI score0.00205EPSS
SaveExploits0References3
Rows per page
Query Builder