Lucene search
+L

32719 matches found

osv_azl
osv_azl
•added 2026/07/20 5:18 p.m.•14 views

AZL-92853 CVE-2026-64187 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.5CVSS5.6AI score0.00114EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/20 5:18 p.m.•24 views

CVE-2026-64187

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.5CVSS0.00114EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2026/07/20 4:27 p.m.•25 views

CVE-2026-64187

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0
EUVD
EUVD
•added 2026/07/20 4:27 p.m.•24 views

EUVD-2026-46007

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.6AI score0.00114EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/20 4:27 p.m.•60 views

CVE-2026-64187 xfs: fail recovery on a committed log item with no regions

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

0.00114EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/07/20 4:27 p.m.•17 views

CVE-2026-64187

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.8AI score0.00114EPSS
SaveExploits0References8Affected Software1
osv_cve
osv_cve
•added 2026/07/20 4:27 p.m.•16 views

CVE-2026-64187 xfs: fail recovery on a committed log item with no regions

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.9AI score
SaveExploits0References10
CVE
CVE
•added 2026/07/20 4:27 p.m.•93 views

CVE-2026-64187

Technical details for CVE-2026-64187 are not publicly provided in the supplied documents. Monitor for updates.

5.5CVSS5.6AI score0.00114EPSS
SaveExploits0References7Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/20 10:19 a.m.•34 views

Malicious code in @dxcl/log-function-js (npm)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/07/20 10:19 a.m.•16 views

MAL-2026-10877 Malicious code in @dxcl/log-function-js (npm)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
NVD
NVD
•added 2026/07/20 7:16 a.m.•29 views

CVE-2026-12898

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

6.5CVSS0.01352EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/20 6:00 a.m.•23 views

EUVD-2026-45884

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

6.5CVSS5.5AI score0.01352EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/20 6:00 a.m.•17 views

CVE-2026-12898

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

5.4AI score0.01352EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/20 6:00 a.m.•105 views

CVE-2026-12898

The All-in-One WP Migration and Backup WordPress plugin, in versions prior to 7.106 , is vulnerable to an arbitrary log file write due to improper sanitization of user-supplied values used in file path construction. This path traversal vulnerability allows unauthenticated attackers to create or a...

6AI score0.01352EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/20 6:00 a.m.•77 views

CVE-2026-12898 All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path Traversal

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

0.01352EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/07/20 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-64187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader,...

5.5CVSS5.4AI score0.00114EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/20 12:00 a.m.•3 views

CVE-2026-64187: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

5.5CVSS5.6AI score0.00114EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/20 12:00 a.m.•7 views

CVE-2026-53594: Improper Limitation of a Pathname to a Restricted Directory

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's Manage - Logs - App Logs feature uses the bundled rap2hpoutre/laravel-log-viewer override to decrypt a user-supplied file identifier and then pass the resolved path to Laravel's download response. Prior...

4.9CVSS6.1AI score0.00527EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/07/20 12:00 a.m.•17 views

WordPress 5.6+ SkelerSecurity Core Security Plugin REST Batch API Mitigation

This WordPress plugin provides a temporary mitigation for the REST Batch API vulnerability chain commonly referred to as "wp2shell." It requires authentication before requests to the /wp-json/batch/v1 and ?restroute=/batch/v1 endpoints are processed, preventing unauthenticated exploitation of the...

9.8CVSS8.7AI score0.10649EPSS
SaveExploits88
Positive Technologies
Positive Technologies
•added 2026/07/20 12:00 a.m.•32 views

PT-2026-61640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference exists in the XFS file system recovery parser. When processing a crafted log where the first operation of a transaction is a bare transaction header, the xlog...

5.5CVSS5.3AI score0.00114EPSS
SaveExploits0
Rows per page
Query Builder