Lucene search
+L

17619 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/02 12:00 a.m.•10 views

CVE-2026-6447: Improper Neutralization of Input During Web Page Generation

The Call for Price for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS5.8AI score0.00327EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/05/02 12:00 a.m.•24 views

openSUSE 16 Security Update : radare2 (openSUSE-SU-2026:20653-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20653-1 advisory. Changes in radare2: - Update to version 6.1.4 bsc1262142, CVE-2026-40499: Analysis: improve autoname scoring, jmptbl detection, and performance...

10CVSS7AI score0.01697EPSS
SaveExploits3References18
Tenable Nessus
Tenable Nessus
•added 2026/05/02 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-43010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject sleepable kprobemulti programs at attach time kprobe.multi programs run in atomic/RCU context and cannot sleep. However, bpfkprobemultilinkattach di...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/05/01 4:18 p.m.•21 views

CVE-2026-43010

A flaw was found in the Linux kernel. A local user could attach a sleepable BPF kprobemulti program, which allows sleepable helper functions, such as bpfcopyfromuser, to be invoked from a non-sleepable context. This incorrect handling can lead to a system crash, resulting in a Denial of Service D...

5.5CVSS5.7AI score0.00122EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/01 3:16 p.m.•18 views

CVE-2026-43010

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobemulti programs at attach time kprobe.multi programs run in atomic/RCU context and cannot sleep. However, bpfkprobemultilinkattach did not validate whether the program being attached had the sleepable...

5.5CVSS0.00122EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/05/01 2:59 p.m.•309 views

cve-checker-2026

CVE Checker 2026 Multi-OS vulnerability scanner for: - CVE...

9.8CVSS7AI score0.98527EPSS
SaveExploits324
osv_cve
osv_cve
•added 2026/05/01 2:15 p.m.•28 views

CVE-2026-43031 net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets When a TX packet spans multiple buffer descriptors scatter-gather, axienetfreetxchain sums the per-BD actual length from descriptor status into a caller-provided...

7.5CVSS6.6AI score0.00609EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/05/01 2:15 p.m.•57 views

CVE-2026-43031 net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets When a TX packet spans multiple buffer descriptors scatter-gather, axienetfreetxchain sums the per-BD actual length from descriptor status into a caller-provided...

7.5CVSS0.00609EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/01 2:15 p.m.•47 views

CVE-2026-43031

The CVE concerns the Linux kernel xilinx axienet driver. When a TX packet spans multiple buffer descriptors, the current accounting in axienet_free_tx_chain summing per-BD lengths into an accumulator can lose earlier bytes if the packet completes across different polls, causing BQL to overestimat...

7.5CVSS6.6AI score0.00609EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2026/05/01 2:15 p.m.•12 views

CVE-2026-43031

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets When a TX packet spans multiple buffer descriptors scatter-gather, axienetfreetxchain sums the per-BD actual length from descriptor status into a caller-provided...

6.8AI score0.00609EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2026/05/01 2:15 p.m.•25 views

CVE-2026-43031

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets When a TX packet spans multiple buffer descriptors scatter-gather, axienetfreetxchain sums the per-BD actual length from descriptor status into a caller-provided...

7.5CVSS6.8AI score0.00609EPSS
SaveExploits0
CVE
CVE
•added 2026/05/01 2:15 p.m.•52 views

CVE-2026-43010

CVE-2026-43010 : The Linux kernel fix addresses a bug where sleepable kprobe_multi programs could be attached in a non-sleepable context because bpf_kprobe_multi_link_attach() did not validate the sleepable flag. This allowed sleepable helpers (e.g., bpf_copy_from_user()) to be invoked from an at...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2026/05/01 2:15 p.m.•45 views

CVE-2026-43010

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobemulti programs at attach time kprobe.multi programs run in atomic/RCU context and cannot sleep. However, bpfkprobemultilinkattach did not validate whether the program being attached had the sleepable...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/05/01 2:15 p.m.•21 views

EUVD-2026-26609

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobemulti programs at attach time kprobe.multi programs run in atomic/RCU context and cannot sleep. However, bpfkprobemultilinkattach did not validate whether the program being attached had the sleepable...

5.8AI score0.00122EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/05/01 2:15 p.m.•19 views

CVE-2026-43010 bpf: Reject sleepable kprobe_multi programs at attach time

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobemulti programs at attach time kprobe.multi programs run in atomic/RCU context and cannot sleep. However, bpfkprobemultilinkattach did not validate whether the program being attached had the sleepable...

5.8AI score0.00122EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/05/01 2:15 p.m.•21 views

CVE-2026-43010

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobemulti programs at attach time kprobe.multi programs run in atomic/RCU context and cannot sleep. However, bpfkprobemultilinkattach did not validate whether the program being attached had the sleepable...

5.5CVSS6AI score0.00122EPSS
SaveExploits0
Patchstack
Patchstack
•added 2026/05/01 9:32 a.m.•20 views

WordPress Contact Form 7 Multi-Step Forms plugin <= 4.4.1 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Contact Form 7 Multi-Step Forms versions = 4.4.1...

6.1CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2026/05/01 1:47 a.m.•131 views

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-Scanner !Licensehttps://img.shields...

9.8CVSS8.7AI score0.98527EPSS
SaveExploits79
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•20 views

PT-2026-36358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb gadget f subset component where the net device is allocated during function instance creation and registered during the bind phase with the gadget device as it...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/05/01 12:00 a.m.•28 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to validate the sleepable flag when the bpf kprobemulti program is attached, which could result in...

5.5CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Rows per page
Query Builder