Lucene search
+L

37300 matches found

CVE
CVE
added 2026/08/05 8:13 p.m.156 views

CVE-2026-18411

The CVE describes a vulnerability in KARR Security System and SWDS dealer-installed automotive anti-theft systems where a shared Bluetooth authentication key is used across affected devices. An attacker in Bluetooth range can issue unauthorized commands to the vehicle, potentially enabling door u...

8.1CVSS5.5AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 5:16 p.m.18 views

CVE-2026-20268

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

8.6CVSS0.00283EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 4:16 p.m.15 views

CVE-2026-18531

IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret...

5.3CVSS0.00226EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/05 2:18 p.m.21 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.5.2.hum1 aarch64, x8664 grafana13.1-13.1.1-0.5.2.hum1.src src Security Fixes: grafana13.1: CVE-2026-67313 CVE-2026-67314 CVE-2026-67315 CVE-2026-67316...

7.7CVSS5.5AI score0.00623EPSS
SaveExploits9References12
CVE
CVE
added 2026/08/05 1:26 p.m.74 views

CVE-2026-7529

The CVE describes a vulnerability in the wiseCampaign – WooCommerce Conversions Made Easy WordPress plugin (versions '__return_true'. This allows unauthenticated attackers to read and modify plugin settings and assets (banner, stockbar, core settings, background uploads) without nonce or capabil...

7.5CVSS5.5AI score0.00351EPSS
SaveExploits0References10
NVD
NVD
added 2026/08/05 1:24 p.m.14 views

CVE-2026-71263

The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool demo/LINUXTCP/port/porttcp.c. The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MBTCPBUFSIZE limit...

9.1CVSS0.00278EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 1:24 p.m.17 views

CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS0.0033EPSS
SaveExploits1References6
NVD
NVD
added 2026/08/05 1:24 p.m.14 views

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS0.00135EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/05 1:24 p.m.21 views

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.2AI score0.00135EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/05 1:24 p.m.13 views

UBUNTU-CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

6.5CVSS5.5AI score0.0033EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/08/05 12:37 p.m.11 views

CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.5AI score0.00135EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/05 12:37 p.m.49 views

CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS0.00135EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/05 12:37 p.m.94 views

CVE-2026-71226

CVE-2026-71226 affects libkcapi’s one-shot AIO path. The root cause is memory corruption when an uncanceled AIO request returns an error before all submitted IOCBs are drained, allowing later writes from the kernel into caller-owned output buffers. The available sources describe the vulnerability...

7.3CVSS5.5AI score0.00135EPSS
SaveExploits0References6Affected Software4
EUVD
EUVD
added 2026/08/05 12:37 p.m.17 views

EUVD-2026-53375

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...

7.3CVSS5.5AI score0.00135EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/05 12:26 p.m.15 views

EUVD-2026-53358

OpenBK7231T's /cfgwifiset endpoint src/httpserver/httpfns.c accepts configuration changes via a plain GET request with no CSRF token. If the webadminpasswordenabled parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string. A one-click...

6.5CVSS5.5AI score0.00117EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/05 12:26 p.m.12 views

EUVD-2026-53348

The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool demo/LINUXTCP/port/porttcp.c. The check if usTCPFrameBytesLeft MBTCPBUFSIZE uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MBTCPBUFSIZE limit. An MBAP frame with a...

9.1CVSS5.6AI score0.00278EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/05 12:26 p.m.38 views

CVE-2026-71263 FreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool()

The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool demo/LINUXTCP/port/porttcp.c. The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MBTCPBUFSIZE limit...

9.1CVSS0.00278EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/05 12:26 p.m.11 views

CVE-2026-71263 FreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool()

The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool demo/LINUXTCP/port/porttcp.c. The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MBTCPBUFSIZE limit...

9.1CVSS5.2AI score0.00278EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/05 12:26 p.m.6 views

CVE-2026-71263

The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool demo/LINUXTCP/port/porttcp.c. The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MBTCPBUFSIZE limit...

9.1CVSS5.2AI score0.00278EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/05 12:26 p.m.75 views

CVE-2026-71263

The FreeModbus LINUXTCP port has a concrete defect in xMBPortTCPPool(): the code uses a strict greater-than check (usTCPFrameBytesLeft > MB_TCP_BUF_SIZE) against a 263-byte MB_TCP_BUF_SIZE limit. When an MBAP frame with Length 264 is processed, usTCPFrameBytesLeft becomes 263, the check passes...

9.1CVSS5.2AI score0.00278EPSS
SaveExploits0References2
Rows per page
Query Builder