Lucene search
+L

2395 matches found

NVD
NVD
added 2025/12/08 1:16 a.m.10 views

CVE-2025-40321

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

0.00197EPSS
SaveExploits0References8
CVE
CVE
added 2025/12/08 12:46 a.m.34 views

CVE-2025-40321

CVE-2025-40321 affects the Linux kernel brcmfmac WLAN driver. The crash happens when transmitting an ANQP/Action Frame in standalone AP mode because the driver uses an uninitialized P2P vif pointer. The fix described in the advisory is to always use the vif corresponding to the wdev that initiate...

6AI score0.00197EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/08 12:46 a.m.19 views

CVE-2025-40321 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

6.3AI score
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-53764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: Handle lock during peerid find ath12kpeerfindbyid requires that the caller hold the ab-baselock. Currently the WBM error path does not hold the lo...

8.8CVSS6.9AI score0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/08 12:00 a.m.7 views

PT-2025-49494

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2+ 3 Description The Linux kernel contains a flaw within the ath12k driver related to lock handling during peer ID retrieval. Specifically, the ath12k peer find by id function requires a lock, but this lo...

5.4AI score0.00225EPSS
SaveExploits0References19
Vulnrichment
Vulnrichment
added 2025/12/04 9:48 p.m.4 views

CVE-2025-11838 WatchGuard Firebox iked Memory Corruption Vulnerability

A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service DoS condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer...

8.7CVSS7.9AI score0.00484EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/04 9:48 p.m.37 views

CVE-2025-11838 WatchGuard Firebox iked Memory Corruption Vulnerability

A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service DoS condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer...

8.7CVSS0.00484EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/04 12:00 a.m.9 views

PT-2025-49158

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.11.4 WatchGuard Fireware OS versions 2025.1 through 2025.1.2 Description A memory corruption issue exists in WatchGuard Fireware OS. An unauthenticated attacker can potentially cause a Denial of...

8.7CVSS6.8AI score0.00484EPSS
SaveExploits0References8
CNVD
CNVD
added 2025/11/27 12:00 a.m.37 views

WordPress Peer Publish plugin Cross-Site Request Forgery Vulnerability

The WordPress Peer Publish plugin is a tool for multi-author collaboration that allows users to submit posts to a WordPress blog for review and publication by other users. A cross-site request forgery vulnerability exists in WordPress Peer Publish plugin, which stems from a lack of random number...

4.3CVSS6.8AI score0.00151EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/26 7:59 a.m.18 views

CVE-2025-12587

The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the website management pages. This makes it possible for unauthenticated attackers to add, modify, or delete website configuratio...

4.3CVSS5.5AI score0.00151EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/25 8:15 a.m.8 views

CVE-2025-12587

The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the website management pages. This makes it possible for unauthenticated attackers to add, modify, or delete website configuratio...

4.3CVSS0.00151EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/11/25 7:28 a.m.7 views

CVE-2025-12587 Peer Publish <= 1.0 - Cross-Site Request Forgery

The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the website management pages. This makes it possible for unauthenticated attackers to add, modify, or delete website configuratio...

4.3CVSS5.1AI score0.00151EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/25 7:28 a.m.17 views

CVE-2025-12587

The CVE-2025-12587 issue affects the WordPress Peer Publish plugin. Multiple sources describe a Cross-Site Request Forgery vulnerability in all versions up to 1.0 caused by missing nonce validation on admin pages, allowing unauthenticated attackers to add, modify, or delete site configurations vi...

4.3CVSS5.1AI score0.00151EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/25 7:28 a.m.9 views

EUVD-2025-199563

The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the website management pages. This makes it possible for unauthenticated attackers to add, modify, or delete website configuratio...

4.3CVSS5AI score0.00151EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/11/25 7:28 a.m.15 views

CVE-2025-12587 Peer Publish <= 1.0 - Cross-Site Request Forgery

The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the website management pages. This makes it possible for unauthenticated attackers to add, modify, or delete website configuratio...

4.3CVSS0.00151EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/11/25 12:00 a.m.12 views

PT-2025-48000

The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the website management pages. This makes it possible for unauthenticated attackers to add, modify, or delete website configuratio...

4.3CVSS5.5AI score0.00151EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/11/25 12:00 a.m.11 views

WordPress plugin Peer Publish 跨站请求伪造漏洞

The WordPress Peer Publish plugin is a tool for multi-author collaboration that allows users to submit posts to a WordPress blog for review and publication by other users. A cross-site request forgery vulnerability exists in WordPress Peer Publish plugin, which stems from a lack of random number...

4.3CVSS6.7AI score0.00151EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/11/24 11:39 p.m.12 views

WordPress Peer Publish plugin <= 1.0 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Peer Publish versions = 1.0...

4.3CVSS7AI score0.00151EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/11/20 11:56 a.m.13 views

CLSA-2025-1763639786 Update of squid

fix storeclient memory leak causing OOM - fix PeerDigest lifetime management to prevent leaks...

5.8AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/11/17 12:00 a.m.12 views

GNUnet P2P Framework 0.26.1

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

6.8AI score
SaveExploits0
Rows per page
Query Builder