Lucene search
K

7529 matches found

OSV
OSV
added 2026/01/31 11:39 a.m.3 views

CVE-2026-23017 idpf: fix error handling in the init_task on load

In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the inittask on load If the inittask fails during a driver load, we end up without vports and netdevs, effectively failing the entire process. In that state a subsequent reset will result in a crash as...

5.5CVSS5.7AI score0.00025EPSS
Exploits0References5
CVE
CVE
added 2026/01/31 11:39 a.m.15 views

CVE-2026-23017

CVE-2026-23017 affects the Linux kernel idpf driver. Root cause: if init_task fails during driver load, vports/netdevs are not created and a reset can crash while service/mailbox tasks run. Fix: in the init_task error path, disable service/mailbox tasks and stop PTP callbacks; ensures proper clea...

5.5CVSS5.7AI score0.00025EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/01/31 11:39 a.m.3 views

EUVD-2026-5077

In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the inittask on load If the inittask fails during a driver load, we end up without vports and netdevs, effectively failing the entire process. In that state a subsequent reset will result in a crash as...

5.7AI score0.00025EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/31 11:39 a.m.29 views

CVE-2026-23017 idpf: fix error handling in the init_task on load

In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the inittask on load If the inittask fails during a driver load, we end up without vports and netdevs, effectively failing the entire process. In that state a subsequent reset will result in a crash as...

0.00025EPSS
Exploits0References2
NVD
NVD
added 2026/01/31 5:16 a.m.4 views

CVE-2025-15525

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

5.3CVSS0.00026EPSS
Exploits0References2
CVE
CVE
added 2026/01/31 4:35 a.m.13 views

CVE-2025-15525

CVE-2025-15525 affects the WordPress plugin “Ajax Load More – Infinite Scroll, Load More, & Lazy Load.” The vulnerability arises from incorrect authorization in the parse_custom_args() function, allowing unauthenticated users to view titles and excerpts of private, draft, pending, scheduled, and ...

5.3CVSS5.9AI score0.00026EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/31 4:35 a.m.24 views

CVE-2025-15525 Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

5.3CVSS0.00026EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/31 12:30 a.m.4 views

EUVD-2020-30941

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching...

8.4CVSS6.4AI score0.00012EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-23017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idpf: fix error handling in the inittask on load If the inittask fails during a driver load, we end up without vports and netdevs, effectively failing the entir...

5.5CVSS5.8AI score0.00025EPSS
Exploits0References4
NVD
NVD
added 2026/01/30 11:16 p.m.1 views

CVE-2020-37036

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching...

8.4CVSS0.00012EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/01/30 10:49 p.m.5 views

WordPress Ajax Load More - Infinite Scroll, Lazy Load & Load More plugin <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure vulnerability

WordPress Ajax Load More - Infinite Scroll, Lazy Load & Load More plugin = 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure vulnerability discovered by shark3y in WordPress Plugin Ajax Load More versions = 7.8.1...

5.3CVSS5.9AI score0.00026EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/30 10:7 p.m.1 views

CVE-2020-37036 RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching...

8.4CVSS6.2AI score0.00012EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/30 10:7 p.m.16 views

CVE-2020-37036 RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching...

8.4CVSS0.00012EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/30 10:7 p.m.2 views

CVE-2020-37036

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload with an egg hunter technique to bypass memory protections and execute commands like launching...

8.4CVSS6.4AI score0.00012EPSS
Exploits0References4
CVE
CVE
added 2026/01/30 10:7 p.m.8 views

CVE-2020-37036

RM Downloader 2.50.60 is affected by a local buffer overflow in the Load parameter that can allow arbitrary code execution by overwriting memory. The vulnerability is described as exploitable via a crafted payload using an egg hunter technique to bypass protections, potentially enabling commands ...

8.4CVSS6.4AI score0.00012EPSS
Exploits0References4
CVE
CVE
added 2026/01/30 8:12 p.m.28 views

CVE-2026-25129

PsySH (PHP) is affected by a CWD-based configuration poisoning vulnerability. Prior to versions 0.11.23 and 0.12.19, PsySH auto-loads and executes a .psysh.php file from the current working directory at startup. If an attacker can write to a directory that a victim later uses as the CWD, they can...

7.3CVSS6.5AI score0.00007EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/30 6:57 p.m.4 views

CVE-2025-62348

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process...

7.8CVSS6.3AI score0.00007EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/01/30 11:17 a.m.2 views

SUSE-SU-2026:0348-1 Security update for bind

This update for bind fixes the following issues: Upgrade to release 9.20.18: - CVE-2025-13878: Fixed incorrect length checks for BRID and HHIT records bsc1256997 Feature Changes: Add more information to the rndc recursing output about fetches. Reduce the number of outgoing queries. Provide more...

7.5CVSS6.1AI score0.00047EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2026/01/30 12:0 a.m.3 views

SUSE: Security Advisory (SUSE-SU-2026:20130-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.9AI score0.00106EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/30 12:0 a.m.2 views

Mini-stream RM Downloader security vulnerability

Mini-stream RM Downloader is a streaming media downloader developed by the Mini-stream company. Version 2.50.60 of Mini-stream RM Downloader contains a security vulnerability. This vulnerability stems from a local buffer overflow in the Load parameter, which may allow for the execution of arbitra...

8.4CVSS6.2AI score0.00012EPSS
Exploits0References4
Rows per page
Query Builder