Lucene search
K

2569 matches found

Kaspersky
Kaspersky
added 2026/03/24 12:0 a.m.6 views

KLA90955 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of...

10CVSS7.2AI score0.01238EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/03/24 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-29111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v2...

5.5CVSS5.7AI score0.00121EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/23 9:3 p.m.11 views

CVE-2026-29111

systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this i...

5.5CVSS6AI score0.00121EPSS
Exploits0References12Affected Software1
OSV
OSV
added 2026/03/23 8:0 p.m.2 views

UBUNTU-CVE-2026-29111

systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this i...

5.5CVSS6AI score0.00121EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/23 12:0 a.m.4 views

Siemens SIMATIC S7-1500 Use After Free (CVE-2025-38212)

In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, 0 0: https://lore.ke rnel.org/all/[email protected]/ idrforeach is protected by rwsem, but th...

7.8CVSS6.2AI score0.00153EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/20 9:32 a.m.4 views

EUVD-2026-13598

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.120171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authentication. Access to the local network is required for this attack...

6.3CVSS6AI score0.00316EPSS
Exploits0References4
NVD
NVD
added 2026/03/20 7:16 a.m.4 views

CVE-2026-4475

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.120171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The exploit has been...

8.8CVSS0.00299EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/20 6:32 a.m.3 views

CVE-2026-4476

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.120171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authentication. Access to the local network is required for this attack...

6.3CVSS6AI score0.00316EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/20 6:32 a.m.3 views

CVE-2026-4476 Yi Technology YI Home Camera CGI Endpoint ipc missing authentication

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.120171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authentication. Access to the local network is required for this attack...

6.3CVSS6AI score0.00316EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/20 6:2 a.m.1 views

CVE-2026-4475

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.120171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The exploit has been...

8.8CVSS5.2AI score0.00299EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/20 6:2 a.m.2 views

CVE-2026-4475 Yi Technology YI Home Camera ipc hard-coded credentials

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.120171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The exploit has been...

8.8CVSS6.7AI score0.00299EPSS
Exploits0References3
CVE
CVE
added 2026/03/20 6:2 a.m.13 views

CVE-2026-4475

CVE-2026-4475 concerns Yi Technology YI Home Camera 2 (version 2.1.1_20171024151200). The vulnerability is in an unknown function within the file home/web/ipc, leading to hard-coded credentials. Access to the local network is required for exploitation. Public disclosure has occurred, and the vend...

8.8CVSS6.7AI score0.00299EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.4 views

PT-2026-26568

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1 20171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The exploit has been...

8.8CVSS6.7AI score0.00299EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/20 12:0 a.m.3 views

Yi Technology YI Home Camera 2 安全漏洞

The Yi Technology YI Home Camera 2 is an intelligent home camera device developed by China's Yi Technology Company. Version 2.1.120171024151200 of the Yi Technology YI Home Camera 2 contains a security vulnerability, which stems from hard-coded credentials in the home/web/ipc files...

8.8CVSS7.3AI score0.00299EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.4 views

PT-2026-26569

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.1 20171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authentication. Access to the local network is required for this attac...

6.3CVSS6AI score0.00316EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/16 7:10 a.m.3 views

CVE-2025-26474 communication_ipc an improper input validation vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios...

3.3CVSS5.8AI score0.00138EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/16 7:10 a.m.26 views

CVE-2025-26474 communication_ipc an improper input validation vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios...

3.3CVSS0.00138EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:0 a.m.3 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005792 advisory. In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free...

7.8CVSS6.9AI score0.00153EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2026/03/03 9:28 p.m.566 views

Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware

Dahua IP Camera CVE Exploit Tools ⚠️ UNDER DEVELOPMENT...

10CVSS6.1AI score0.99871EPSS
Exploits11
Packet Storm News
Packet Storm News
added 2026/03/02 12:0 a.m.6 views

Exploiting PendingIntent Provenance Confusion to Spoof Android SDK Authentication

A single authentication bypass in a partner SDK grants attackers the identity of every partner in the ecosystem -- and millions of apps use SDKs with exactly this vulnerability. OWASP's 2024 Mobile Top 10 ranks Inadequate Supply Chain Security as the second most critical mobile risk, explicitly...

6AI score
Exploits0
Rows per page
Query Builder