Lucene search
+L

57018 matches found

Cvelist
Cvelist
added 5 days ago31 views

CVE-2026-70560 Ultimate POS Stored XSS via First Name Field in Leave Notifications

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS0.00165EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago4 views

CVE-2026-70560

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References4
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-57170

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 5 days ago10 views

CVE-2026-19566

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any prefix length matching 0|1-90-9 and passes it to width2bits, which builds the mask as '1' x $width + 8, one character per bit. The inc...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 5 days ago4 views

PT-2026-71126

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default allowed deserialization classes allow-list, so tightening that...

8.8CVSS5.8AI score0.00484EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 5 days ago4 views

PT-2026-71057

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References4
Oracle linux
Oracle linux
added 5 days ago7 views

kernel security update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

7.1CVSS5.3AI score0.00126EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 5 days ago9 views

Linux Distros Unpatched Vulnerability : CVE-2026-68342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: avoid putting unrelated P2P peer on socket release ovpnpeerreleasep2p is called when an OVPN UDP socket is being destroyed. It checks the currently...

5.6AI score0.00177EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 5 days ago6 views

Linux Distros Unpatched Vulnerability : CVE-2026-68177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Delay module ref count for enableevent trigger Triggers are now delayed from freeing, but can still be triggered until after the RCU grace period has...

7.8CVSS5.6AI score0.00154EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 6 days ago16 views

CVE-2026-44618

A flaw was found in Apache CXF. An insecure XML parser configuration within Apache CXF's WS-Transfer module may allow a remote attacker to perform XML External Entity XXE attacks. This could lead to information disclosure, denial of service, or server-side request forgery. Mitigation If using...

5.3CVSS5.3AI score0.00303EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago4 views

CVE-2026-68116

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module, specifically within its Multicast Database MDB functionality. When an operation to replace the source list of an MDB remote entry fails, the system incorrectly deletes existing sources. This can lead to a situation where...

7.9CVSS5.4AI score0.00121EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago7 views

CVE-2026-68122

A flaw was found in the Linux kernel's ovpn module. A race condition in the TCP error handling paths can lead to a reference count leak. This occurs when an internal object's reference count is incremented twice but decremented only once, preventing the object from being properly released. Over...

5.5CVSS5.3AI score0.00173EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago7 views

CVE-2026-68205

A flaw was found in the Linux kernel. The v4l2-fwnode module, responsible for video device node management, incorrectly handles module ownership during asynchronous subdevice registration. This can lead to a sensor module's reference count not being properly incremented. As a result, the module m...

5.5CVSS5.3AI score0.00209EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago7 views

CVE-2026-68428

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. A local attacker with privileges to load and unload kernel modules could exploit a use-after-free vulnerability. This occurs when a vendor module is unloaded while the KVM module remains loaded, and a subseque...

5.5CVSS5.3AI score0.00156EPSS
SaveExploits0References4
NVD
NVD
added 6 days ago4 views

CVE-2026-20898

Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

8.5CVSS0.00117EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago34 views

CVE-2026-62693

Technical details beyond the brief description are not publicly provided in the supplied documents. No concrete information on affected components, root cause specifics, or remediation is available here; monitor for official updates.

7CVSS5.4AI score0.00189EPSS
SaveExploits0References1Affected Software3
RedhatCVE
RedhatCVE
added 6 days ago9 views

CVE-2026-68174

A flaw was found in the Linux kernel's tracing subsystem. When handling dynamic events, a memory collision occurs where a reference counter is mistakenly interpreted as a module pointer. This can happen when filtering or setting events for a specific module without properly checking the event's...

5.5CVSS5.4AI score0.00198EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago11 views

CVE-2026-68342

A flaw was found in the Linux kernel's OpenVPN ovpn module. During the destruction of an ovpn UDP socket, a race condition can occur where a new peer is published before the old socket is fully released. This can lead to a use-after-free vulnerability, allowing an attacker to potentially cause a...

5.5CVSS5.8AI score0.00177EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 days ago7 views

CVE-2026-68341

A flaw was found in the Linux kernel's ovpn module. When the unlockovpn function processes a list of objects, it may attempt to access memory that has already been freed. This use-after-free vulnerability could potentially lead to system instability or, in more severe cases, arbitrary code...

8.8CVSS5.7AI score0.00565EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 6 days ago9 views

Malicious code in base65-11x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cc9506a804a2663d0cde1c610fa8cba5733e6797652b6365569ada5ef3901d base65-11x is a name-lookalike of the widely used base-x encoder. Both entrypoints src/cjs/index.cjs and src/esm/index.js, 127KB each vs. 4KB for rea...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder