Lucene search
+L

23 matches found

OSV
OSV
added 2026/08/18 5:26 p.m.6 views

CVE-2026-74044 Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...

7CVSS5.6AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/18 5:26 p.m.10 views

EUVD-2026-61076

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...

7CVSS5.5AI score0.00378EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.9 views

PT-2026-77251

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.0.0 through 4.14.5 Description An issue exists where authenticated cluster peers can delete arbitrary directory contents within the installation path writable by the wazuh user. This occurs because the system fails to validate...

7CVSS5.5AI score0.00378EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/15 1:18 p.m.6 views

UBUNTU-CVE-2026-74554

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clearbit in ath12kmacdppeercleanup ath12kmacdppeercleanup clears the ML peer ID slot on the freemlpeeridmap bitmap by indexing it with dppeer-peerid. That is wrong: dppeer-peerid for an MLO peer...

8.8CVSS5.5AI score0.00204EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/15 1:18 p.m.7 views

CVE-2026-74554

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clearbit in ath12kmacdppeercleanup ath12kmacdppeercleanup clears the ML peer ID slot on the freemlpeeridmap bitmap by indexing it with dppeer-peerid. That is wrong: dppeer-peerid for an MLO peer...

8.8CVSS0.00204EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/15 5:58 a.m.33 views

CVE-2026-74367

CVE-2026-74367 describes a Linux kernel vulnerability in the ath12k WiFi driver (ath12k_mac_vdev_create) where three error-paths can leave arvif in an inconsistent state. Specifically: (1) on failure of ath12k_wmi_vdev_create, arvif-&gt;ar isn’t cleared, making vdev readiness checks see a non-NUL...

7.8CVSS5.4AI score0.0012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.31 views

PT-2026-73006

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clear bit in ath12k mac dp peer cleanup ath12k mac dp peer cleanup clears the ML peer ID slot on the free ml peer id map bitmap by indexing it with dp peer-peer id. That is wrong: dp peer-peer id f...

5.4AI score0.00204EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/16 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-23173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible port...

5.5CVSS5.4AI score0.00114EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/12/30 12:23 p.m.15 views

CVE-2022-50880

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10kstastate When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in below log. It is because for each vdevid and address, it has only one...

8.8CVSS5.5AI score0.00313EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/10/13 9:10 a.m.8 views

kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

8.8CVSS6.9AI score0.00233EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/10/06 11:22 p.m.17 views

kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

8.8CVSS6.9AI score0.00233EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2024-53191

Malicious code in bioql PyPI...

7.3AI score0.00215EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2025-28951

Malicious code in bioql PyPI...

6.3AI score0.00233EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2025/09/11 11:24 p.m.8 views

SUSE CVE-2025-39761

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

7CVSS6.7AI score0.00233EPSS
SaveExploits0References23
OSV
OSV
added 2025/09/11 4:52 p.m.8 views

CVE-2025-39761 wifi: ath12k: Decrement TID on RX peer frag setup error handling

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

8.8CVSS7.3AI score
SaveExploits0References8
Cvelist
Cvelist
added 2025/09/11 4:52 p.m.21 views

CVE-2025-39761 wifi: ath12k: Decrement TID on RX peer frag setup error handling

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

8.8CVSS0.00233EPSS
SaveExploits0References5
CVE
CVE
added 2025/09/11 4:52 p.m.55 views

CVE-2025-39761

CVE-2025-39761 pertains to the Linux kernel wifi driver ath12k. The issue arises when RX peer frag setup errors occur: TID is not decremented before cleaning up peer state, risking an out-of-bounds access in peer-&gt;rx_tid[]. The advisory states that a decrement operation on TID before peer clea...

8.8CVSS6.4AI score0.00233EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/26 12:00 a.m.11 views

PT-2025-37219

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the ath12k driver related to handling RX peer fragmentation setup errors. Specifically, the Transmission Identifier TID is not decremented before...

7.1CVSS6.8AI score0.00233EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/12/28 3:49 a.m.8 views

SUSE CVE-2024-56543

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Skip Rx TID cleanup for self peer During peer create, dp setup for the peer is done where Rx TID is updated for all the TIDs. Peer object for self peer will not go through dp setup. When core halts, dp cleanup is do...

5.5CVSS7.8AI score0.00215EPSS
SaveExploits0References13
NVD
NVD
added 2024/12/27 2:15 p.m.36 views

CVE-2024-56543

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Skip Rx TID cleanup for self peer During peer create, dp setup for the peer is done where Rx TID is updated for all the TIDs. Peer object for self peer will not go through dp setup. When core halts, dp cleanup is do...

5.5CVSS0.00215EPSS
SaveExploits0References4
Rows per page
Query Builder