Lucene search
+L

513 matches found

Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.24 views

PT-2026-40650

Name of the Vulnerable Software and Affected Versions BIG-IP Virtual Edition VE affected versions not specified BIG-IP hardware platforms affected versions not specified Description Undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate when an SSL profile is configured...

8.7CVSS5.8AI score0.00324EPSS
Exploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/12 7:44 a.m.16 views

Malicious code in 88q (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb830829cae1605ff7626653a2470db03cd5a5aab98b3f0a7f5912eaf244561b The main entrypoint index.js runs an IIFE at require time that monkey-patches the global console.warn and console.error methods. After the override,...

5.8AI score
Exploits0References18
OSV
OSV
added 2026/05/11 6:48 p.m.7 views

MINI-GV4F-6FM3-H763

Bulletin has no description...

7.5CVSS5.7AI score0.00813EPSS
Exploits0
OSV
OSV
added 2026/05/11 1:49 p.m.5 views

MINI-83CV-H3W6-FP86

Bulletin has no description...

5.3CVSS5.7AI score0.0039EPSS
Exploits0
OSV
OSV
added 2026/05/10 10:0 p.m.6 views

MINI-2428-MRC6-PFW6

Bulletin has no description...

3.7CVSS5.7AI score0.00217EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2026/05/08 12:0 a.m.9 views

CVE-2025-67888

An issue was discovered in Control Web Panel CWP before 0.9.8.1209. User input passed via the "key" GET parameter to /admin/index.php when the "api" parameter is set is not properly sanitized before being used to execute OS commands. This can be exploited by unauthenticated attackers to inject an...

7.3CVSS6.1AI score0.01186EPSS
Exploits3References4
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.21 views

PT-2026-38670

Name of the Vulnerable Software and Affected Versions Control Web Panel CWP versions prior to 0.9.8.1209 Description Unauthenticated attackers can inject and execute arbitrary OS commands with root privileges on the web server. This occurs because user input provided through the key GET parameter...

7.3CVSS6.1AI score0.01186EPSS
Exploits3References8
EUVD
EUVD
added 2026/05/07 2:58 a.m.12 views

EUVD-2026-28265

Admidio is an open-source user management solution. Prior to version 5.0.9, the add mode in modules/documents-files.php accepts a name parameter validated only as 'string' type HTML encoding, allowing path traversal characters ../ to pass through unfiltered. Combined with the absence of CSRF...

4.5CVSS5.9AI score0.00362EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/06 12:30 p.m.10 views

EUVD-2026-27689

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac "iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected" relies on pcidevisdisconnected to skip ATS...

5.8AI score0.00123EPSS
Exploits0References9
NVD
NVD
added 2026/05/06 12:16 p.m.10 views

CVE-2026-43130

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac "iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected" relies on pcidevisdisconnected to skip ATS...

5.5CVSS0.00123EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/05/06 11:27 a.m.30 views

CVE-2026-43130 iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac "iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected" relies on pcidevisdisconnected to skip ATS...

0.00123EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.11 views

PT-2026-37470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the system relies on the pci dev is disconnected function to skip Address Translation Services ATS invalidation for safely removed...

5.5CVSS5.5AI score0.00123EPSS
Exploits0
GithubExploit
GithubExploit
added 2026/05/04 5:58 a.m.126 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 "Copy Fail" — Safe Probe Suite !License: MIT...

7.8CVSS6.1AI score0.96267EPSS
Exploits232
GithubExploit
GithubExploit
added 2026/05/02 5:46 p.m.56 views

CVE-Writeups

No d...

5.8AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-31751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comedi: dt2815: add hardware detection to prevent crash The dt2815 driver crashes when attached to I/O ports without actual hardware present. This occurs becaus...

4.7CVSS5.5AI score0.00089EPSS
Exploits0References2
OSV
OSV
added 2026/05/01 3:16 p.m.5 views

DEBIAN-CVE-2026-31738

In the Linux kernel, the following vulnerability has been resolved: vxlan: validate ND option lengths in vxlannacreate vxlannacreate walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source LLAD...

5.5CVSS5.7AI score0.00123EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/01 2:14 p.m.35 views

CVE-2026-31751 comedi: dt2815: add hardware detection to prevent crash

In the Linux kernel, the following vulnerability has been resolved: comedi: dt2815: add hardware detection to prevent crash The dt2815 driver crashes when attached to I/O ports without actual hardware present. This occurs because syzkaller or users can attach the driver to arbitrary I/O addresses...

0.00089EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.6 views

PT-2026-36386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The dt2815 driver crashes when attached to I/O ports without actual hardware present. This occurs because users can attach the driver to arbitrary I/O addresses via the 'COMEDI DEVCONFIG...

4.7CVSS5.5AI score0.00089EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.5 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013017 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure setent is always present Ensure that setent is always set since only drbg...

5.6AI score0.00205EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.10 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011326 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for...

5.9AI score0.00184EPSS
Exploits0References4
Rows per page
Query Builder